IP address

Passive DNS

Tags: Research scanner Whitelisted Scanner

IP blacklists

CI Army

109.105.210.100 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:50:00.961000
Was present on blacklist at: 2025-10-22 02:50, 2025-10-29 03:50, 2025-10-30 03:50, 2025-11-01 03:50, 2025-11-02 03:50, 2025-11-03 03:50, 2025-11-04 03:50, 2025-11-05 03:50, 2025-11-06 03:50, 2025-11-07 03:50, 2025-11-08 03:50, 2025-11-09 03:50, 2025-11-10 03:50, 2025-12-04 03:50, 2025-12-05 03:50, 2025-12-06 03:50, 2025-12-07 03:50, 2025-12-08 03:50, 2025-12-09 03:50, 2025-12-10 03:50, 2025-12-11 03:50, 2025-12-12 03:50, 2025-12-13 03:50, 2025-12-14 03:50, 2025-12-16 03:50

AbuseIPDB

109.105.210.100 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-12-13 05:00:00.699000
Was present on blacklist at: 2025-11-01 05:00, 2025-11-02 05:00, 2025-12-04 05:00, 2025-12-05 05:00, 2025-12-10 05:00, 2025-12-12 05:00, 2025-12-13 05:00

Turris greylist

109.105.210.100 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-13 22:15:00.183000
Was present on blacklist at: 2025-11-02 22:15, 2025-11-03 22:15, 2025-11-07 22:15, 2025-11-09 22:15, 2025-12-04 22:15, 2025-12-05 22:15, 2025-12-11 22:15, 2025-12-12 22:15, 2025-12-13 22:15

UCEPROTECT L1

109.105.210.100 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 08:45:00.697000
Was present on blacklist at: 2025-12-11 00:45, 2025-12-11 08:45, 2025-12-11 16:45, 2025-12-12 00:45, 2025-12-12 08:45, 2025-12-12 16:45, 2025-12-13 00:45, 2025-12-13 08:45, 2025-12-13 16:45, 2025-12-14 00:45, 2025-12-14 08:45, 2025-12-14 16:45, 2025-12-15 00:45, 2025-12-15 08:45, 2025-12-15 16:45, 2025-12-16 00:45, 2025-12-16 08:45

Warden events (778)

2025-12-16: ReconScanning (node.4dc198): 3
2025-12-15: ReconScanning (node.9c1411): 36
2025-12-14: ReconScanning (node.9c1411): 39
2025-12-10: ReconScanning (node.4dc198): 9
2025-12-09: ReconScanning (node.9c1411): 60
2025-12-08: ReconScanning (node.9c1411): 75
2025-12-07: ReconScanning (node.9c1411): 77
2025-12-06: ReconScanning (node.9c1411): 73
2025-12-05: ReconScanning (node.4dc198): 4; ReconScanning (node.9c1411): 1
2025-12-04: ReconScanning (node.4dc198): 1
2025-12-03: ReconScanning (node.4dc198): 23
2025-11-21: ReconScanning (node.9c1411): 9
2025-11-20: ReconScanning (node.9c1411): 8
2025-11-19: ReconScanning (node.4dc198): 11
2025-11-14: ReconScanning (node.9c1411): 13
2025-11-13: ReconScanning (node.9c1411): 46
2025-11-12: ReconScanning (node.9c1411): 26
2025-11-10: ReconScanning (node.9c1411): 41
2025-11-09: ReconScanning (node.9c1411): 48
2025-11-08: ReconScanning (node.9c1411): 8; ReconScanning (node.4dc198): 11
2025-11-07: ReconScanning (node.4dc198): 1; ReconScanning (node.9c1411): 18
2025-11-02: ReconScanning (node.9c1411): 24; ReconScanning (node.4dc198): 3
2025-11-01: ReconScanning (node.9c1411): 68; ReconScanning (node.4dc198): 5
2025-10-31: ReconScanning (node.9c1411): 24
2025-10-21: ReconScanning (node.9c1411): 10; ReconScanning (node.4dc198): 3

DShield reports (IP summary, reports)

2025-10-21: Number of reports: 59; Distinct targets: 48
2025-10-31: Number of reports: 82; Distinct targets: 60
2025-11-01: Number of reports: 194; Distinct targets: 139
2025-11-02: Number of reports: 194; Distinct targets: 139
2025-11-07: Number of reports: 54; Distinct targets: 40
2025-11-08: Number of reports: 64; Distinct targets: 49
2025-12-04: Number of reports: 77; Distinct targets: 62
2025-12-05: Number of reports: 61; Distinct targets: 57
2025-12-10: Number of reports: 58; Distinct targets: 45
2025-12-11: Number of reports: 46; Distinct targets: 35
2025-12-12: Number of reports: 46; Distinct targets: 35
2025-12-13: Number of reports: 26; Distinct targets: 20

Origin AS: AS21859 - ZNET
BGP Prefix: 109.105.210.0/24
geo: Portugal; 🕑 Europe/Lisbon
hostname: zl-dfwc-us-gd10-wk102d.internet-census.org
hostname_class: ['research_scanner']
Address block ('inetnum' or 'NetRange' in whois database): 109.105.208.0 - 109.105.215.255
last_activity: 2025-12-16 13:54:25
last_warden_event: 2025-12-16 13:54:25
rep: 0.35044642857142855
reserved_range: 0
ts_added: 2025-10-21 13:11:14.939000
ts_last_update: 2025-12-16 13:54:53.742000

Warden event timeline

DShield event timeline

Presence on blacklists