IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (1027)
- 2026-05-27
-
- ReconScanning (node.4dc198): 35
- ReconScanning (node.368407): 34
- ReconScanning (node.ce2b59): 7
- 2026-05-26
-
- ReconScanning (node.ce2b59): 36
- ReconScanning (node.4dc198): 187
- ReconScanning (node.368407): 186
- 2026-05-25
-
- ReconScanning (node.ce2b59): 41
- ReconScanning (node.4dc198): 252
- ReconScanning (node.368407): 249
- DShield reports (IP summary, reports)
- 2026-05-26
- Number of reports: 156
- Distinct targets: 156
- 2026-05-27
- Number of reports: 156
- Distinct targets: 156
- 2026-05-28
- Number of reports: 151
- Distinct targets: 98
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 62 | src | scan | port: 465, 587, 2525, 3389 |
| 32 | src | — |
- Origin AS
- AS8560 - ONEANDONE-AS
- BGP Prefix
- 217.154.156.0/24
- geo
- Germany
- 🕑 Europe/Berlin
- hostname
- ip217-154-156-206.pbiaas.com
- hostname_class
- ['ip_in_hostname']
- Address block ('inetnum' or 'NetRange' in whois database)
- 217.154.156.0 - 217.154.156.255
- last_activity
- 2026-05-27 02:47:06
- last_warden_event
- 2026-05-27 02:47:06
- rep
- 0.0757669162138418
- reserved_range
- 0
- ts_added
- 2026-05-25 03:38:01.527000
- ts_last_update
- 2026-06-05 03:38:10.390000
Warden event timeline
DShield event timeline
Presence on blacklists

