IP address
Shodan(more info)

Passive DNS

- Warden events (118)
- 2026-11-12
-
- ReconScanning (node.9c1411): 6
- AnomalyTraffic (node.ce2b59): 5
- ReconScanning (node.ce2b59): 1
- 2026-11-05
-
- ReconScanning (node.9c1411): 6
- AnomalyTraffic (node.ce2b59): 6
- ReconScanning (node.ce2b59): 2
- 2026-10-29
-
- AnomalyTraffic (node.ce2b59): 7
- ReconScanning (node.ce2b59): 2
- 2026-10-22
-
- AnomalyTraffic (node.ce2b59): 5
- ReconScanning (node.ce2b59): 1
- 2026-10-15
-
- AnomalyTraffic (node.ce2b59): 5
- ReconScanning (node.ce2b59): 1
- 2026-10-08
-
- AnomalyTraffic (node.ce2b59): 7
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.9c1411): 6
- 2026-10-02
-
- ReconScanning (node.9c1411): 1
- 2026-10-01
-
- AnomalyTraffic (node.ce2b59): 7
- ReconScanning (node.ce2b59): 1
- ReconScanning (node.9c1411): 5
- 2026-09-10
-
- AnomalyTraffic (node.ce2b59): 1
- ReconScanning (node.9c1411): 2
- 2026-08-30
-
- ReconScanning (node.9c1411): 1
- 2026-08-29
-
- ReconScanning (node.9c1411): 12
- 2026-08-27
-
- AnomalyTraffic (node.ce2b59): 4
- ReconScanning (node.ce2b59): 1
- 2026-08-23
-
- ReconScanning (node.9c1411): 1
- 2026-08-22
-
- ReconScanning (node.9c1411): 12
- 2026-08-20
-
- AnomalyTraffic (node.ce2b59): 8
- ReconScanning (node.ce2b59): 1
- DShield reports (IP summary, reports)
- 2026-08-20
- Number of reports: 37
- Distinct targets: 37
- 2026-08-21
- Number of reports: 37
- Distinct targets: 37
- 2026-10-08
- Number of reports: 35
- Distinct targets: 35
- 2026-10-15
- Number of reports: 32
- Distinct targets: 32
- 2026-10-29
- Number of reports: 33
- Distinct targets: 33
- 2026-10-30
- Number of reports: 33
- Distinct targets: 33
- 2026-11-05
- Number of reports: 33
- Distinct targets: 33
- 2026-11-12
- Number of reports: 34
- Distinct targets: 34
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 75 | src | scan | port: 0 |
| 49 | src | — |
- Origin AS
- AS397423 - TIER-NET
- BGP Prefix
- 154.30.3.0/24
- bl
- []
- geo
- United States, Ashburn
- 🕑 America/New_York
- hostname
- kub002.idyschool.de.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 154.30.0.0 - 154.30.255.255
- last_activity
- 2026-11-12 10:10:54
- last_warden_event
- 2026-11-12 10:10:54
- rep
- 0.04157669100473593
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 443
- Tags: eol-product, self-signed, pqc
- CPEs: cpe:/a:f5:nginx:1.29.7
- ts_added
- 2026-04-06 02:56:25.379000
- ts_last_update
- 2026-11-15 02:56:30.127000
Warden event timeline
DShield event timeline

