@bwDraco , so far I've linked that IP to
scan-03j.shadowserver.org - The Shadowserver Foundation
The Shadowserver Foundation. If you are looking at this page, then more than likely, you noticed a scan coming from this server across your network and/or poking at a