IP address

Passive DNS

Tags: IP in hostname

IP blacklists: Echelon port scan
217.154.201.105 is listed on the Echelon port scan blacklist.

Description: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-06-04 09:25:00.281000
Was present on blacklist at: 2026-06-01 09:25, 2026-06-02 09:25, 2026-06-03 09:25, 2026-06-04 09:25
Echelon TLS/SSL crawler
217.154.201.105 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-06-04 09:40:00.370000
Was present on blacklist at: 2026-06-01 09:40, 2026-06-02 09:40, 2026-06-03 09:40, 2026-06-04 09:40

TL	Role	Category	Details
38	src	scan

Origin AS: AS8560 - ONEANDONE-AS
BGP Prefix: 217.154.192.0/20
geo: Germany; 🕑 Europe/Berlin
hostname: ip217.154.201-105.pbiaas.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 217.154.192.0 - 217.154.207.255
rep: 0.2928932188134524
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 443, 8443, 9090; Tags: eol-product; CPEs: cpe:/a:apache:http_server:2.4.52, cpe:/o:linux:linux_kernel, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx:1.18.0
ts_added: 2026-06-01 09:25:02.069000
ts_last_update: 2026-06-04 09:40:33.588000

Warden event timeline

DShield event timeline

Presence on blacklists