IP address

Passive DNS

Tags:

IP blacklists

Threat categories

TL	Role	Category	Details
50	src	scan
25	src	—

Warden events (10)

2026-09-27: AnomalyTraffic (node.6a1878): 1
2026-09-21: AnomalyTraffic (node.6a1878): 9

DShield reports (IP summary, reports)

2026-09-20: Number of reports: 466; Distinct targets: 109
2026-09-21: Number of reports: 809; Distinct targets: 779
2026-09-22: Number of reports: 750; Distinct targets: 750
2026-09-23: Number of reports: 1126; Distinct targets: 1058
2026-09-24: Number of reports: 872; Distinct targets: 871
2026-09-25: Number of reports: 872; Distinct targets: 871
2026-09-26: Number of reports: 588; Distinct targets: 588
2026-09-27: Number of reports: 588; Distinct targets: 588
2026-09-28: Number of reports: 643; Distinct targets: 643

Origin AS: AS49581 - FerdinandZink
BGP Prefix: 80.75.212.0/24
geo: Germany, Frankfurt am Main; 🕑 Europe/Berlin
hostname: tube-hosting.com
Address block ('inetnum' or 'NetRange' in whois database): 80.75.212.0 - 80.75.212.255
last_activity: 2026-09-27 03:25:45
last_warden_event: 2026-09-27 03:25:45
rep: 0.0299953902046467
reserved_range: 0
Shodan's InternetDB: Open ports: 1337, 2211, 10000, 10001, 10003, 10005, 10009, 10012, 10013, 10016, 10025, 10028, 10029, 10031, 10034, 10038, 10043, 10047, 10068, 10084, 10089, 10134, 10176, 10201, 10205, 10225, 10243, 10250, 10328, 10348, 10399, 10443, 10444, 10480, 10554, 10909, 10911, 10934, 10935, 11000, 11002, 11007, 11101, 11111, 11112, 11182, 11184, 11210, 11211, 11288, 11300, 11371, 11380, 11434, 11443, 12000, 12082, 12108, 12113, 12114, 12115, 12116, 12126, 12129, 12131, 12133, 12134, 12139, 12149, 12151, 12152, 12155, 12156, 12160, 12162, 12164, 12169, 12170, 12174, 12180, 12181, 12182, 12195, 12197, 12199, 12200, 12211, 12215, 12220, 12224, 12225, 12228, 12229, 12230, 12231, 12233, 12247, 12250, 12252, 12256, 12268, 12271, 12272, 12273, 12280, 12281, 12282, 12285, 12286, 12287, 12288, 12292, 12298, 12304, 12308, 12309, 12312, 12314, 12316, 12318, 12320, 12323, 12324, 12325, 12328, 12329, 12331, 12332, 12333, 12334, 12338, 12352, 12358, 12360, 12363, 12367, 12370, 12372, 12386, 12387, 12388, 12389, 12391, 12392, 12393, 12395, 12399, 12400, 12401, 12406, 12407, 12409, 12410, 12411, 12412, 12427, 12428, 12433, 12442, 12443, 12445, 12446, 12450, 12452, 12453, 12454, 12468, 12473, 12474, 12475, 12484, 12497, 12499, 12502, 12505, 12509, 12517, 12521, 12525, 12526, 12531, 12535, 12540, 12542, 12545, 12546, 12551, 12558, 12559, 12561, 12562, 12563, 12569, 12571, 12572, 12574, 12575, 12583, 12584, 12586, 12615, 12962, 13579, 13616, 14026, 14147, 14182, 14265, 14276, 14330, 14344, 14403, 14523, 14707, 14895, 14897, 14901, 14907, 15038, 15040, 15042, 15044, 15151, 15326, 15555, 15673, 16000, 16002, 16003, 16009, 16010, 16011, 16014, 16019, 16020, 16023, 16024, 16027, 16030, 16031, 16035, 16042, 16045, 16046, 16050, 16052, 16060, 16061, 16063, 16064, 16065, 16067, 16071, 16076, 16089, 16094, 16098, 16401, 16403, 16433, 16888, 16992, 16993, 17001, 17010, 17082, 17084, 17319, 17589, 17773, 17775, 17777, 17778, 17780, 17785, 18000, 18001, 18002, 18008, 18009, 18010, 18014, 18021, 18023, 18025, 18029, 18030, 18031, 18035, 18041, 18048, 18049, 18054, 18056, 18061, 18063, 18067, 18072, 18074, 18076, 18080, 18081, 18084, 18087, 18088, 18093, 18096, 18099, 18107, 18110, 18113, 18245, 18443, 18789, 19000, 19013, 19016, 19071, 19082, 19090, 19091, 19443, 19998, 19999, 20000, 20018, 20030, 20060, 20256, 20440, 20500, 20599, 20600, 20821, 20880, 20892, 21025, 21082, 21083, 21116, 21231, 21236, 21239, 21242, 21245, 21247, 21260, 21265, 21267, 21285, 21287, 21288, 21289, 21295, 21296, 21298, 21302, 21304, 21305, 21311, 21315, 21319, 21320, 21322, 21327, 21329, 21330, 21379, 21381, 21400, 22107, 22380, 22403, 22556, 22603, 22609, 23023, 23084, 23182, 23757, 24181, 24316, 24510, 24708; Tags: proxy; CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
ts_added: 2026-09-21 01:14:50.740000
ts_last_update: 2026-10-05 01:15:00.175000

Warden event timeline

DShield event timeline

Presence on blacklists