IP address

Passive DNS

Tags:

IP blacklists

Turris greylist

51.159.105.180 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-09-08 21:15:00.165000
Was present on blacklist at: 2025-07-29 21:15, 2025-08-01 21:15, 2025-08-06 21:15, 2025-08-11 21:15, 2025-08-15 21:15, 2025-08-21 21:15, 2025-08-28 21:15, 2025-09-02 21:15, 2025-09-08 21:15

DataPlane TELNET login

51.159.105.180 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-08-13 06:10:02.526000
Was present on blacklist at: 2025-08-03 02:10, 2025-08-03 06:10, 2025-08-03 10:10, 2025-08-03 14:10, 2025-08-03 18:10, 2025-08-03 22:10, 2025-08-04 02:10, 2025-08-04 06:10, 2025-08-04 10:10, 2025-08-04 14:10, 2025-08-04 18:10, 2025-08-04 22:10, 2025-08-05 02:10, 2025-08-05 06:10, 2025-08-05 10:10, 2025-08-05 14:10, 2025-08-05 18:10, 2025-08-05 22:10, 2025-08-06 02:10, 2025-08-06 06:10, 2025-08-06 10:10, 2025-08-06 14:10, 2025-08-06 18:10, 2025-08-06 22:10, 2025-08-07 02:10, 2025-08-07 06:10, 2025-08-07 10:10, 2025-08-07 14:10, 2025-08-07 18:10, 2025-08-07 22:10, 2025-08-08 02:10, 2025-08-08 06:10, 2025-08-08 10:10, 2025-08-08 14:10, 2025-08-08 18:10, 2025-08-08 22:10, 2025-08-09 02:10, 2025-08-09 06:10, 2025-08-09 10:10, 2025-08-09 14:10, 2025-08-09 18:10, 2025-08-09 22:10, 2025-08-10 02:10, 2025-08-10 06:10, 2025-08-10 10:10, 2025-08-10 14:10, 2025-08-10 18:10, 2025-08-10 22:10, 2025-08-11 02:10, 2025-08-11 06:10, 2025-08-11 10:10, 2025-08-11 14:10, 2025-08-11 18:10, 2025-08-11 22:10, 2025-08-12 02:10, 2025-08-12 06:10, 2025-08-12 10:10, 2025-08-12 14:10, 2025-08-12 18:10, 2025-08-12 22:10, 2025-08-13 02:10, 2025-08-13 06:10

AbuseIPDB

51.159.105.180 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-09-11 04:00:00.618000
Was present on blacklist at: 2025-08-11 04:00, 2025-08-13 04:00, 2025-08-15 04:00, 2025-09-11 04:00

DShield reports (IP summary, reports)

2025-07-28: Number of reports: 26; Distinct targets: 4
2025-07-29: Number of reports: 16; Distinct targets: 4
2025-07-30: Number of reports: 24; Distinct targets: 3
2025-08-02: Number of reports: 24; Distinct targets: 4
2025-08-05: Number of reports: 13; Distinct targets: 3
2025-08-08: Number of reports: 17; Distinct targets: 5
2025-08-12: Number of reports: 41; Distinct targets: 5
2025-08-16: Number of reports: 25; Distinct targets: 4
2025-08-23: Number of reports: 34; Distinct targets: 3
2025-08-27: Number of reports: 15; Distinct targets: 4
2025-08-28: Number of reports: 15; Distinct targets: 4

Origin AS: AS12876 - AS12876
BGP Prefix: 51.158.0.0/15
geo: France, Paris; 🕑 Europe/Paris
hostname: 2f70d92c-3b29-44e5-a6a0-79059949aad2.fr-par-2.baremetal.scw.cloud
Address block ('inetnum' or 'NetRange' in whois database): 51.158.0.0 - 51.159.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80; Tags: –; CPEs: cpe:/a:getbootstrap:bootstrap, cpe:/a:apache:http_server, cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:jquery:jquery
ts_added: 2025-07-29 05:05:59.396000
ts_last_update: 2025-09-12 05:15:01.502000

Warden event timeline

DShield event timeline

Presence on blacklists