IP address


.178138.249.149.185
Shodan(more info)
Passive DNS
Tags:

Threat categories

TLRoleCategoryDetails
62 src scan port: 22, 23, 80, 443, 2222, 2375
50 src login protocol: ssh, telnet
port: 22, 23

Warden events (2140)
2026-04-11
ReconScanning (node.9c1411): 10
2026-04-10
ReconScanning (node.ce2b59): 7
IntrusionUserCompromise (node.cfb4f7): 2093
AttemptLogin (node.ce2b59): 1
2026-04-01
ReconScanning (node.9c1411): 5
2026-03-31
ReconScanning (node.9c1411): 6
2026-03-30
ReconScanning (node.ce2b59): 6
IntrusionUserCompromise (node.cfb4f7): 12
DShield reports (IP summary, reports)
2026-03-30
Number of reports: 13
Distinct targets: 3
2026-03-31
Number of reports: 13
Distinct targets: 3
2026-04-10
Number of reports: 24
Distinct targets: 5
Origin AS
AS57043 - HOSTKEY-AS
BGP Prefix
138.249.149.0/24
geo
Netherlands, Oudorp
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
138.249.0.0 - 138.249.255.255
last_activity
2026-04-11 09:53:08
last_warden_event
2026-04-11 09:53:08
rep
0.17791570935930523
reserved_range
0
ts_added
2026-03-30 06:38:15.274000
ts_last_update
2026-04-12 06:38:20.138000

Warden event timeline

DShield event timeline