CI Army
172.104.217.5 is listed on the CI Army blacklist.
Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed:
primary (
feed detail page)
Last checked at:
2025-02-18 03:50:01.487000
Was present on blacklist at:
2025-01-28 03:50,
2025-01-30 03:50,
2025-02-01 03:50,
2025-02-02 03:50,
2025-02-04 03:50,
2025-02-05 03:50,
2025-02-06 03:50,
2025-02-07 03:50,
2025-02-08 03:50,
2025-02-09 03:50,
2025-02-10 03:50,
2025-02-12 03:50,
2025-02-13 03:50,
2025-02-14 03:50,
2025-02-15 03:50,
2025-02-16 03:50,
2025-02-17 03:50,
2025-02-18 03:50
DataPlane VNC RFB
172.104.217.5 is listed on the DataPlane VNC RFB blacklist.
Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed:
primary (
feed detail page)
Last checked at:
2025-02-17 11:10:00.882000
Was present on blacklist at:
2025-02-10 15:10,
2025-02-10 19:10,
2025-02-10 23:10,
2025-02-11 03:10,
2025-02-11 07:10,
2025-02-11 11:10,
2025-02-11 15:10,
2025-02-11 19:10,
2025-02-11 23:10,
2025-02-12 03:10,
2025-02-12 07:10,
2025-02-12 11:10,
2025-02-12 15:10,
2025-02-12 19:10,
2025-02-12 23:10,
2025-02-13 03:10,
2025-02-13 07:10,
2025-02-13 11:10,
2025-02-13 15:10,
2025-02-13 19:10,
2025-02-13 23:10,
2025-02-14 03:10,
2025-02-14 07:10,
2025-02-14 11:10,
2025-02-14 15:10,
2025-02-14 19:10,
2025-02-14 23:10,
2025-02-15 03:10,
2025-02-15 07:10,
2025-02-15 11:10,
2025-02-15 15:10,
2025-02-15 19:10,
2025-02-15 23:10,
2025-02-16 03:10,
2025-02-16 07:10,
2025-02-16 11:10,
2025-02-16 15:10,
2025-02-16 19:10,
2025-02-16 23:10,
2025-02-17 03:10,
2025-02-17 07:10,
2025-02-17 11:10
Spamhaus XBL CBL
172.104.217.5 is listed on the Spamhaus XBL CBL blacklist.
Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed:
secondary (DNSBL) (
feed detail page)
Last checked at:
2025-04-21 17:33:10.652000
Was present on blacklist at:
2025-02-03 17:33,
2025-02-10 17:33,
2025-04-21 17:33
Turris greylist
172.104.217.5 is listed on the Turris greylist blacklist.
Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed:
primary (
feed detail page)
Last checked at:
2025-02-08 22:15:00.157000
Was present on blacklist at:
2025-02-05 22:15,
2025-02-08 22:15
DataPlane SSH conn
172.104.217.5 is listed on the DataPlane SSH conn blacklist.
Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed:
primary (
feed detail page)
Last checked at:
2025-02-14 19:10:01.753000
Was present on blacklist at:
2025-02-07 15:10,
2025-02-07 19:10,
2025-02-07 23:10,
2025-02-08 03:10,
2025-02-08 07:10,
2025-02-08 11:10,
2025-02-08 15:10,
2025-02-08 19:10,
2025-02-08 23:10,
2025-02-09 03:10,
2025-02-09 07:10,
2025-02-09 11:10,
2025-02-09 15:10,
2025-02-09 19:10,
2025-02-09 23:10,
2025-02-10 03:10,
2025-02-10 07:10,
2025-02-10 11:10,
2025-02-10 15:10,
2025-02-10 19:10,
2025-02-10 23:10,
2025-02-11 03:10,
2025-02-11 07:10,
2025-02-11 11:10,
2025-02-11 15:10,
2025-02-11 19:10,
2025-02-11 23:10,
2025-02-12 03:10,
2025-02-12 07:10,
2025-02-12 11:10,
2025-02-12 15:10,
2025-02-12 19:10,
2025-02-12 23:10,
2025-02-13 03:10,
2025-02-13 07:10,
2025-02-13 11:10,
2025-02-13 15:10,
2025-02-13 19:10,
2025-02-13 23:10,
2025-02-14 03:10,
2025-02-14 07:10,
2025-02-14 11:10,
2025-02-14 15:10,
2025-02-14 19:10
blocklist.de SSH
172.104.217.5 is listed on the blocklist.de SSH blacklist.
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed:
primary (
feed detail page)
Last checked at:
2025-02-09 17:05:05.302000
Was present on blacklist at:
2025-02-07 23:05,
2025-02-08 05:05,
2025-02-08 11:05,
2025-02-08 17:05,
2025-02-08 23:05,
2025-02-09 05:05,
2025-02-09 11:05,
2025-02-09 17:05
Spamhaus SBL CSS
172.104.217.5 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.
Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed:
secondary (DNSBL) (
feed detail page)
Last checked at:
2025-04-21 17:33:10.652000
Was present on blacklist at:
2025-03-31 17:33
