IP address
Shodan(more info)

Passive DNS

- Warden events (25)
- 2026-06-24
-
- ReconScanning (node.86eb21): 1
- 2026-06-17
-
- ReconScanning (node.86eb21): 1
- 2026-06-15
-
- ReconScanning (node.86eb21): 1
- 2026-06-14
-
- ReconScanning (node.86eb21): 1
- 2026-06-13
-
- ReconScanning (node.86eb21): 1
- 2026-06-08
-
- ReconScanning (node.86eb21): 1
- 2026-05-22
-
- ReconScanning (node.f90c6b): 3
- 2026-05-15
-
- ReconScanning (node.86eb21): 1
- 2026-05-03
-
- ReconScanning (node.86eb21): 1
- 2026-04-24
-
- ReconScanning (node.86eb21): 1
- 2026-04-21
-
- ReconScanning (node.86eb21): 1
- 2026-04-19
-
- ReconScanning (node.86eb21): 1
- 2026-04-18
-
- ReconScanning (node.86eb21): 1
- 2026-04-10
-
- ReconScanning (node.86eb21): 2
- 2026-04-08
-
- ReconScanning (node.f90c6b): 3
- 2026-04-05
-
- ReconScanning (node.86eb21): 1
- 2026-04-03
-
- ReconScanning (node.f90c6b): 3
- ReconScanning (node.86eb21): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan |
- Origin AS
- AS3214 - XTOM
- BGP Prefix
- 192.109.228.0/24
- dshield
- []
- geo
- Netherlands
- 🕑 Europe/Amsterdam
- hostname
- s20135.vps.hosting
- Address block ('inetnum' or 'NetRange' in whois database)
- 192.109.228.0 - 192.109.229.255
- last_activity
- 2026-06-24 02:23:59
- last_warden_event
- 2026-06-24 02:23:59
- rep
- 0.004296440011915426
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 17, 26, 70, 80, 87, 102, 135, 139, 179, 221, 465, 486, 503, 515, 587, 789, 873, 1153, 1234, 1337, 1577, 1660, 1801, 1925, 1965, 2021, 2087, 2121, 2211, 2250, 2353, 2375, 2404, 2628, 2762, 3001, 3030, 3054, 3063, 3139, 3154, 3161, 3192, 3260, 3310, 3333, 3388, 3403, 3410, 3551, 3560, 3562, 3749, 3808, 3918, 3951, 4022, 4282, 4444, 4488, 4500, 4786, 4840, 4911, 4949, 4993, 5010, 5025, 5241, 5250, 5277, 5435, 5443, 5542, 5592, 5601, 5609, 5800, 5918, 5985, 5986, 6001, 6004, 6262, 6348, 6513, 6605, 6606, 6650, 6667, 6697, 7000, 7071, 7100, 7434, 7547, 7634, 7778, 8008, 8009, 8010, 8086, 8161, 8181, 8183, 8193, 8200, 8230, 8284, 8333, 8343, 8513, 8573, 8575, 8607, 8641, 8791, 8807, 8822, 8855, 8888, 8943, 9002, 9079, 9090, 9110, 9112, 9124, 9139, 9147, 9160, 9191, 9213, 9226, 9236, 9291, 9306, 9376, 9811, 9885, 9928, 9955, 9981, 9999
- Tags: honeypot
- CPEs: –
- ts_added
- 2025-02-28 05:06:53.248000
- ts_last_update
- 2026-06-26 05:08:41.512000
Warden event timeline
DShield event timeline

