IP address


.000109.205.213.105
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Spamhaus PBL ISP
109.205.213.105 is listed on the Spamhaus PBL ISP blacklist.

Description: The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-23 06:30:21.020000
Was present on blacklist at: 2025-02-05 06:30, 2025-02-12 06:30, 2025-02-19 06:30, 2025-02-26 06:30, 2025-03-05 06:30, 2025-03-12 06:30, 2025-03-19 06:30, 2025-03-26 06:30, 2025-04-02 06:30, 2025-04-09 06:30, 2025-04-16 06:30, 2025-04-23 06:30
CI Army
109.205.213.105 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-04-05 02:50:01.003000
Was present on blacklist at: 2025-02-06 03:50, 2025-02-07 03:50, 2025-02-08 03:50, 2025-02-09 03:50, 2025-02-10 03:50, 2025-02-11 03:50, 2025-02-12 03:50, 2025-02-13 03:50, 2025-02-14 03:50, 2025-02-15 03:50, 2025-02-16 03:50, 2025-02-17 03:50, 2025-02-18 03:50, 2025-02-19 03:50, 2025-02-20 03:50, 2025-02-21 03:50, 2025-02-22 03:50, 2025-02-23 03:50, 2025-02-24 03:50, 2025-02-25 03:50, 2025-02-26 03:50, 2025-02-27 03:50, 2025-02-28 03:50, 2025-03-12 03:50, 2025-03-13 03:50, 2025-03-14 03:50, 2025-03-15 03:50, 2025-03-16 03:50, 2025-03-17 03:50, 2025-03-18 03:50, 2025-03-19 03:50, 2025-03-20 03:50, 2025-03-21 03:50, 2025-03-22 03:50, 2025-03-23 03:50, 2025-03-24 03:50, 2025-03-27 03:50, 2025-03-28 03:50, 2025-03-29 03:50, 2025-03-30 02:50, 2025-03-31 02:50, 2025-04-01 02:50, 2025-04-02 02:50, 2025-04-03 02:50, 2025-04-04 02:50, 2025-04-05 02:50
AbuseIPDB
109.205.213.105 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-02 04:00:00.433000
Was present on blacklist at: 2025-02-06 05:00, 2025-02-07 05:00, 2025-02-08 05:00, 2025-02-09 05:00, 2025-02-10 05:00, 2025-02-11 05:00, 2025-02-12 05:00, 2025-02-13 05:00, 2025-02-14 05:00, 2025-02-15 05:00, 2025-02-16 05:00, 2025-02-17 05:00, 2025-02-22 05:00, 2025-02-23 05:00, 2025-02-24 05:00, 2025-02-25 05:00, 2025-02-26 05:00, 2025-02-27 05:00, 2025-03-11 05:00, 2025-03-12 05:00, 2025-03-13 05:00, 2025-03-14 05:00, 2025-03-15 05:00, 2025-03-16 05:00, 2025-03-17 05:00, 2025-03-18 05:00, 2025-03-19 05:00, 2025-03-27 05:00, 2025-03-28 05:00, 2025-03-29 05:00, 2025-03-30 04:00, 2025-03-31 04:00, 2025-04-01 04:00, 2025-04-02 04:00
Turris greylist
109.205.213.105 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-02 21:15:00.208000
Was present on blacklist at: 2025-02-07 22:15, 2025-02-08 22:15, 2025-02-10 22:15, 2025-02-11 22:15, 2025-02-12 22:15, 2025-02-14 22:15, 2025-02-15 22:15, 2025-02-16 22:15, 2025-02-17 22:15, 2025-02-25 22:15, 2025-02-28 22:15, 2025-03-12 22:15, 2025-03-15 22:15, 2025-03-16 22:15, 2025-03-17 22:15, 2025-03-19 22:15, 2025-03-20 22:15, 2025-03-29 22:15, 2025-03-30 21:15, 2025-03-31 21:15, 2025-04-02 21:15
DShield Block
109.205.213.105 was recently listed on the DShield Block blacklist, but currently it is not.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2025-04-29 04:50:00
Was present on blacklist at: 2025-02-15 04:50, 2025-03-24 04:50, 2025-03-25 04:50
Warden events (14813)
2025-04-01
ReconScanning (node.368407): 121
ReconScanning (node.4dc198): 143
ReconScanning (node.9c1411): 16
2025-03-31
ReconScanning (node.4dc198): 282
ReconScanning (node.368407): 256
ReconScanning (node.9c1411): 67
2025-03-30
ReconScanning (node.4dc198): 285
ReconScanning (node.368407): 283
ReconScanning (node.9c1411): 43
2025-03-29
ReconScanning (node.368407): 287
ReconScanning (node.4dc198): 287
ReconScanning (node.9c1411): 1
2025-03-28
ReconScanning (node.368407): 282
ReconScanning (node.4dc198): 285
ReconScanning (node.9c1411): 1
2025-03-27
ReconScanning (node.4dc198): 286
ReconScanning (node.368407): 279
ReconScanning (node.9c1411): 68
2025-03-26
ReconScanning (node.4dc198): 49
ReconScanning (node.368407): 49
ReconScanning (node.9c1411): 13
2025-03-24
ReconScanning (node.86eb21): 1
2025-03-19
ReconScanning (node.368407): 259
ReconScanning (node.4dc198): 258
ReconScanning (node.9c1411): 78
ReconScanning (node.5f02e7): 2
2025-03-18
ReconScanning (node.368407): 287
ReconScanning (node.4dc198): 283
ReconScanning (node.9c1411): 23
2025-03-17
ReconScanning (node.368407): 286
ReconScanning (node.4dc198): 284
2025-03-16
ReconScanning (node.4dc198): 283
ReconScanning (node.368407): 284
ReconScanning (node.9c1411): 1
2025-03-15
ReconScanning (node.4dc198): 284
ReconScanning (node.368407): 287
2025-03-14
ReconScanning (node.4dc198): 282
ReconScanning (node.368407): 287
ReconScanning (node.9c1411): 6
2025-03-13
ReconScanning (node.368407): 148
ReconScanning (node.4dc198): 148
ReconScanning (node.9c1411): 8
2025-03-12
ReconScanning (node.4dc198): 284
ReconScanning (node.368407): 283
ReconScanning (node.9c1411): 53
2025-03-11
ReconScanning (node.4dc198): 286
ReconScanning (node.368407): 287
ReconScanning (node.9c1411): 34
2025-03-10
ReconScanning (node.368407): 28
ReconScanning (node.4dc198): 28
ReconScanning (node.9c1411): 7
2025-02-17
ReconScanning (node.4dc198): 187
ReconScanning (node.368407): 187
ReconScanning (node.5f02e7): 1
2025-02-16
ReconScanning (node.368407): 282
ReconScanning (node.4dc198): 288
ReconScanning (node.5f02e7): 2
2025-02-15
ReconScanning (node.4dc198): 283
ReconScanning (node.368407): 261
ReconScanning (node.5f02e7): 1
2025-02-14
ReconScanning (node.4dc198): 285
ReconScanning (node.368407): 284
2025-02-13
ReconScanning (node.4dc198): 281
ReconScanning (node.368407): 243
2025-02-12
ReconScanning (node.4dc198): 285
ReconScanning (node.368407): 278
ReconScanning (node.5f02e7): 1
2025-02-11
ReconScanning (node.4dc198): 287
ReconScanning (node.368407): 276
2025-02-10
ReconScanning (node.4dc198): 285
ReconScanning (node.368407): 272
ReconScanning (node.5f02e7): 2
2025-02-09
ReconScanning (node.368407): 103
ReconScanning (node.4dc198): 20
ReconScanning (node.5f02e7): 2
2025-02-08
ReconScanning (node.4dc198): 225
ReconScanning (node.368407): 193
2025-02-07
ReconScanning (node.4dc198): 283
ReconScanning (node.368407): 288
2025-02-06
ReconScanning (node.4dc198): 285
ReconScanning (node.368407): 280
2025-02-05
ReconScanning (node.4dc198): 210
ReconScanning (node.368407): 200
ReconScanning (node.5f02e7): 1
DShield reports (IP summary, reports)
2025-02-05
Number of reports: 1818
Distinct targets: 1686
2025-02-06
Number of reports: 3859
Distinct targets: 2596
2025-02-07
Number of reports: 4258
Distinct targets: 2767
2025-02-08
Number of reports: 3825
Distinct targets: 2508
2025-02-09
Number of reports: 3979
Distinct targets: 2639
2025-02-10
Number of reports: 5199
Distinct targets: 3401
2025-02-11
Number of reports: 3559
Distinct targets: 2367
2025-02-12
Number of reports: 3972
Distinct targets: 2597
2025-02-13
Number of reports: 4046
Distinct targets: 2731
2025-02-14
Number of reports: 5258
Distinct targets: 3509
2025-02-15
Number of reports: 3697
Distinct targets: 2464
2025-02-16
Number of reports: 4188
Distinct targets: 2680
2025-02-17
Number of reports: 2391
Distinct targets: 1569
2025-02-22
Number of reports: 6122
Distinct targets: 3769
2025-02-24
Number of reports: 5897
Distinct targets: 3747
2025-02-25
Number of reports: 6436
Distinct targets: 3942
2025-02-26
Number of reports: 5878
Distinct targets: 3545
2025-02-27
Number of reports: 3759
Distinct targets: 2247
2025-03-10
Number of reports: 421
Distinct targets: 306
2025-03-11
Number of reports: 4690
Distinct targets: 3155
2025-03-12
Number of reports: 4680
Distinct targets: 3072
2025-03-13
Number of reports: 2112
Distinct targets: 1368
2025-03-14
Number of reports: 4824
Distinct targets: 3170
2025-03-15
Number of reports: 3128
Distinct targets: 2762
2025-03-16
Number of reports: 4359
Distinct targets: 2865
2025-03-17
Number of reports: 2754
Distinct targets: 2308
2025-03-18
Number of reports: 4465
Distinct targets: 2926
2025-03-19
Number of reports: 4413
Distinct targets: 3005
2025-03-26
Number of reports: 546
Distinct targets: 506
2025-03-27
Number of reports: 3692
Distinct targets: 3027
2025-03-28
Number of reports: 3466
Distinct targets: 2812
2025-03-29
Number of reports: 3391
Distinct targets: 2781
2025-03-30
Number of reports: 4735
Distinct targets: 3041
2025-03-31
Number of reports: 4426
Distinct targets: 2924
2025-04-01
Number of reports: 2251
Distinct targets: 1412
Origin AS
AS23470 - RELIABLESITE
AS19318 - NJIIX-AS-1
BGP Prefix
109.205.213.0/24
geo
Azerbaijan
🕑 Asia/Baku
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
109.205.208.0 - 109.205.215.255
last_activity
2025-04-01 12:12:00
last_warden_event
2025-04-01 12:12:00
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 443
Tags: scanner
CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:jquery:jquery:3.3.1, cpe:/a:getbootstrap:bootstrap, cpe:/a:f5:nginx, cpe:/o:canonical:ubuntu_linux
ts_added
2025-02-05 06:30:13.878000
ts_last_update
2025-04-29 06:30:21.921000

Warden event timeline

DShield event timeline

Presence on blacklists