IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (998)
- 2026-10-04
-
- ReconScanning (node.4dc198): 30
- ReconScanning (node.368407): 29
- ReconScanning (node.ce2b59): 12
- ReconScanning (node.9c1411): 34
- 2026-10-03
-
- ReconScanning (node.ce2b59): 7
- ReconScanning (node.4dc198): 19
- ReconScanning (node.368407): 19
- ReconScanning (node.9c1411): 4
- 2026-09-23
-
- ReconScanning (node.4dc198): 27
- ReconScanning (node.368407): 27
- ReconScanning (node.ce2b59): 4
- 2026-09-22
-
- ReconScanning (node.ce2b59): 3
- ReconScanning (node.368407): 24
- ReconScanning (node.4dc198): 23
- 2026-09-19
-
- AnomalyTraffic (node.6a1878): 13
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.368407): 35
- ReconScanning (node.4dc198): 35
- 2026-09-18
-
- ReconScanning (node.4dc198): 188
- ReconScanning (node.368407): 28
- ReconScanning (node.ce2b59): 23
- 2026-09-17
-
- ReconScanning (node.4dc198): 16
- ReconScanning (node.368407): 15
- ReconScanning (node.ce2b59): 3
- 2026-09-16
-
- ReconScanning (node.ce2b59): 8
- ReconScanning (node.4dc198): 39
- ReconScanning (node.368407): 39
- 2026-09-13
-
- ReconScanning (node.ce2b59): 14
- ReconScanning (node.368407): 61
- ReconScanning (node.4dc198): 59
- ReconScanning (node.9c1411): 38
- 2026-09-12
-
- ReconScanning (node.ce2b59): 4
- AnomalyTraffic (node.6a1878): 6
- ReconScanning (node.4dc198): 24
- ReconScanning (node.368407): 24
- AttemptLogin (node.40929a): 1
- ReconScanning (node.9c1411): 13
- 2026-09-11
-
- ReconScanning (node.368407): 11
- ReconScanning (node.4dc198): 11
- ReconScanning (node.ce2b59): 5
- ReconScanning (node.9c1411): 10
- 2026-09-10
-
- ReconScanning (node.ce2b59): 2
- ReconScanning (node.368407): 5
- ReconScanning (node.4dc198): 5
- DShield reports (IP summary, reports)
- 2026-09-10
- Number of reports: 49
- Distinct targets: 41
- 2026-09-11
- Number of reports: 49
- Distinct targets: 41
- 2026-09-12
- Number of reports: 153
- Distinct targets: 103
- 2026-09-13
- Number of reports: 950
- Distinct targets: 644
- 2026-09-16
- Number of reports: 261
- Distinct targets: 194
- 2026-09-17
- Number of reports: 101
- Distinct targets: 72
- 2026-09-18
- Number of reports: 418
- Distinct targets: 283
- 2026-09-19
- Number of reports: 418
- Distinct targets: 283
- 2026-09-20
- Number of reports: 52
- Distinct targets: 29
- 2026-09-22
- Number of reports: 124
- Distinct targets: 94
- 2026-09-23
- Number of reports: 197
- Distinct targets: 124
- 2026-10-03
- Number of reports: 190
- Distinct targets: 144
- 2026-10-05
- Number of reports: 255
- Distinct targets: 187
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 1881, 8021 |
- Origin AS
- AS133398 - TELE-AS
- AS209605 - hostbaltic
- BGP Prefix
- 141.98.10.0/24
- geo
- Lithuania
- 🕑 Europe/Vilnius
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 141.98.8.0 - 141.98.11.255
- last_activity
- 2026-10-04 21:34:27
- last_warden_event
- 2026-10-04 21:34:27
- rep
- 0.007718926793215619
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 3389
- Tags: self-signed
- CPEs: –
- ts_added
- 2026-09-10 23:33:27.494000
- ts_last_update
- 2026-10-17 23:33:30.455000
Warden event timeline
DShield event timeline
Presence on blacklists

