IP address
Shodan(more info)

Passive DNS

- MISP events
-
[8034] 2026-06-05 00:00:00 | APVA phishing/scam indicators 2026-06-05 21:40 (49 indicators)
Reporting org.: APVA TLP: clear Tags: ecsirt:fraud="phishing"enisa:nefarious-activity-abuse="phishing-attacks"veris:action:social:variety="Phishing"osint:source-type="technical-report"admiralty-scale:source-reliability="b"misp:automation-level="reviewed"admiralty-scale:information-credibility="2"Phishingcircl:incident-classification="phishing"kill-chain:Deliverymisp-galaxy:sector="Banking"misp-galaxy:sector="Finance"cryptocurrencymisp-galaxy:country="united states"misp-galaxy:country="switzerland"misp-galaxy:country="germany"misp-galaxy:country="the netherlands"misp-galaxy:mitre-attack-pattern="Phishing - T1566"misp-galaxy:mitre-attack-pattern="Domains - T1583.001"misp-galaxy:mitre-attack-pattern="Masquerading - T1036"misp-galaxy:mitre-attack-pattern="Web Portal Capture - T1056.003"misp-galaxy:mitre-attack-pattern="Phishing for Information - T1598" Sightings: positive: 0 | false positive: 0 | expired attribute: 0 Last change: 2026-06-05 21:42:34 Threat level: Medium Role of this IP: dst
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS210457 - KYONIX
- BGP Prefix
- 2.27.63.0/24
- geo
- United States
- 🕑 America/Chicago
- hostname
- kyonix.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 2.24.0.0 - 2.31.255.255
- last_activity
- 2026-10-29 17:34:03.952000
- rep
- 0.0
- reserved_range
- 0
- ts_added
- 2026-08-28 08:43:35.727000
- ts_last_update
- 2026-11-14 08:43:40.353000
Warden event timeline
DShield event timeline

