IP address


.004109.61.17.108
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
65 src scan

Warden events (2)
2026-09-30
ReconScanning (node.368407): 1
2026-09-03
ReconScanning (node.368407): 1
DShield reports (IP summary, reports)
2026-09-03
Number of reports: 1458
Distinct targets: 66
2026-09-10
Number of reports: 100
Distinct targets: 61
2026-09-11
Number of reports: 100
Distinct targets: 61
2026-09-18
Number of reports: 20
Distinct targets: 12
2026-09-19
Number of reports: 20
Distinct targets: 12
2026-09-22
Number of reports: 35
Distinct targets: 26
2026-09-30
Number of reports: 195
Distinct targets: 42
Origin AS
AS199524 - GCORE
BGP Prefix
109.61.17.0/24
geo
Finland, Helsinki
🕑 Europe/Helsinki
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
109.61.16.0 - 109.61.19.255
last_activity
2026-09-30 21:26:10
last_warden_event
2026-09-30 21:26:10
rep
0.0035027924393427057
reserved_range
0
Shodan's InternetDB
Open ports: 22, 8081
Tags: –
CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
ts_added
2026-09-03 21:24:15.686000
ts_last_update
2026-10-01 21:24:20.182000

Warden event timeline

DShield event timeline