IP address

Threat categories

TL	Role	Category	Details
35	src	scan

---

Warden events (16)

2026-09-24

ReconScanning (node.f90c6b): 2

2026-09-20

ReconScanning (node.f90c6b): 1

2026-09-15

ReconScanning (node.86eb21): 1

2026-09-06

ReconScanning (node.86eb21): 1

2026-09-05

ReconScanning (node.86eb21): 1

2026-08-22

ReconScanning (node.86eb21): 1

2026-08-21

ReconScanning (node.86eb21): 1

2026-08-07

ReconScanning (node.86eb21): 1

2026-08-04

ReconScanning (node.86eb21): 1

2026-08-03

ReconScanning (node.86eb21): 1

2026-07-29

ReconScanning (node.86eb21): 1

2026-07-21

ReconScanning (node.86eb21): 1

2026-07-20

ReconScanning (node.86eb21): 1

2026-07-19

ReconScanning (node.86eb21): 1

2026-07-16

ReconScanning (node.86eb21): 1

DShield reports (IP summary, reports)

2026-09-17

Number of reports: 12

Distinct targets: 3

Origin AS

AS3214 - XTOM

BGP Prefix

192.109.228.0/24

geo

Netherlands

🕑 Europe/Amsterdam

hostname

s20135.vps.hosting

Address block ('inetnum' or 'NetRange' in whois database)

192.109.228.0 - 192.109.229.255

last_activity

2026-09-24 02:49:44

last_warden_event

2026-09-24 02:49:44

rep

0.0019922713677336112

reserved_range

0

Shodan's InternetDB

Open ports: 11, 13, 15, 17, 19, 25, 26, 37, 43, 49, 51, 70, 79, 80, 82, 83, 88, 92, 98, 102, 110, 111, 119, 143, 175, 177, 179, 195, 221, 264, 389, 427, 440, 444, 446, 447, 450, 451, 465, 513, 541, 548, 554, 555, 593, 631, 636, 666, 771, 789, 873, 887, 902, 971, 987, 992, 993, 995, 1012, 1025, 1080, 1099, 1103, 1153, 1177, 1200, 1224, 1232, 1234, 1283, 1290, 1291, 1311, 1337, 1370, 1388, 1400, 1433, 1450, 1455, 1471, 1494, 1500, 1515, 1521, 1527, 1599, 1604, 1605, 1720, 1723, 1800, 1801, 1883, 1911, 1925, 1962, 1965, 1972, 1975, 1978, 1981, 2000, 2008, 2055, 2067, 2069, 2081, 2083, 2086, 2087, 2095, 2103, 2109, 2121, 2154, 2181, 2201, 2209, 2210, 2222, 2223, 2226, 2345, 2375, 2379, 2404, 2444, 2480, 2550, 2552, 2554, 2555, 2568, 2569, 2628, 2761, 2762, 3001, 3008, 3009, 3011, 3042, 3051, 3052, 3066, 3069, 3088, 3097, 3105, 3115, 3133, 3140, 3147, 3149, 3151, 3157, 3185, 3189, 3190, 3192, 3196, 3197, 3221, 3260, 3268, 3269, 3310, 3388, 3389, 3407, 3432, 3443, 3460, 3541, 3550, 3561, 3690, 3749, 3780, 3790, 3794, 3838, 3841, 3922, 3950, 3954, 4000, 4021, 4040, 4043, 4063, 4064, 4148, 4150, 4157, 4159, 4242, 4282, 4321, 4344, 4369, 4433, 4434, 4443, 4444, 4445, 4482, 4488, 4500, 4505, 4506, 4550, 4572, 4664, 4693, 4782, 4786, 4848, 4899, 4911, 5002, 5005, 5006, 5007, 5009, 5025, 5090, 5222, 5237, 5239, 5252, 5255, 5256, 5258, 5269, 5357, 5432, 5435, 5555, 5556, 5593, 5594, 5601, 5603, 5630, 5672, 5800, 5801, 5858, 5900, 5901, 5906, 5907, 5920, 5938, 5984, 5986, 5991, 5992, 6001, 6004, 6008, 6020, 6021, 6134, 6379, 6432, 6443, 6556, 6581, 6633, 6653, 6664, 6666, 6667, 6668, 6688, 6955, 7001, 7057, 7071, 7080, 7088, 7171, 7415, 7434, 7443, 7474, 7510, 7548, 7613, 7634, 7777, 7778, 7779, 7878, 7887, 7989, 7998, 8001, 8008, 8009, 8010, 8011, 8018, 8019, 8024, 8027, 8028, 8033, 8046, 8047, 8052, 8074, 8077, 8078, 8081, 8083, 8085, 8089, 8090, 8096, 8098, 8099, 8104, 8123, 8126, 8130, 8140, 8142, 8144, 8149, 8155, 8167, 8186, 8188, 8192, 8200, 8291, 8317, 8334, 8343, 8384, 8418, 8425, 8429, 8432, 8465, 8472, 8480, 8524, 8525, 8545, 8550, 8554, 8567, 8569, 8574, 8575, 8581, 8583, 8584, 8600, 8606, 8640, 8641, 8649, 8702, 8707, 8724, 8728, 8745, 8801, 8811, 8812, 8821, 8829, 8833, 8839, 8841, 8844, 8848, 8850, 8854, 8863, 8870, 8875, 8882, 8883, 8889, 8991, 9000, 9001, 9002, 9008, 9009, 9014, 9017, 9022, 9035, 9042, 9051, 9072, 9076, 9080, 9090, 9095, 9096, 9100, 9119, 9133, 9142, 9143, 9159, 9160, 9170, 9172, 9178, 9191, 9200, 9223, 9249, 9250, 9257, 9273, 9295, 9306, 9308, 9315, 9333, 9345, 9398, 9399, 9418, 9441, 9443, 9446, 9507, 9527, 9530, 9600, 9633, 9674, 9682, 9797, 9800, 9869, 9876, 9902, 9943, 9977

Tags: honeypot

CPEs: –

ts_added

2025-02-28 05:06:53.248000

ts_last_update

2026-10-03 05:11:22.174000

Warden event timeline

DShield event timeline