IP address

Passive DNS

Tags:

IP blacklists

CI Army

212.8.251.106 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-06-18 02:50:00.816000
Was present on blacklist at: 2026-05-09 02:50, 2026-05-10 02:50, 2026-05-11 02:50, 2026-05-12 02:50, 2026-05-13 02:50, 2026-05-14 02:50, 2026-05-15 02:50, 2026-05-16 02:50, 2026-05-17 02:50, 2026-05-18 02:50, 2026-05-19 02:50, 2026-06-06 02:50, 2026-06-07 02:50, 2026-06-08 02:50, 2026-06-09 02:50, 2026-06-10 02:50, 2026-06-11 02:50, 2026-06-12 02:50, 2026-06-13 02:50, 2026-06-14 02:50, 2026-06-15 02:50, 2026-06-17 02:50, 2026-06-18 02:50

AbuseIPDB

212.8.251.106 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-07 04:00:00.602000
Was present on blacklist at: 2026-05-09 04:00, 2026-05-17 04:00, 2026-05-18 04:00, 2026-06-04 04:00, 2026-06-07 04:00

UCEPROTECT L1

212.8.251.106 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-22 15:45:00.608000
Was present on blacklist at: 2026-05-13 07:45, 2026-05-13 15:45, 2026-05-13 23:45, 2026-05-14 07:45, 2026-05-14 15:45, 2026-05-14 23:45, 2026-05-15 07:45, 2026-05-15 15:45, 2026-05-15 23:45, 2026-05-16 07:45, 2026-05-16 15:45, 2026-05-16 23:45, 2026-05-17 07:45, 2026-05-17 15:45, 2026-05-17 23:45, 2026-05-18 07:45, 2026-05-18 15:45, 2026-05-18 23:45, 2026-05-19 07:45, 2026-06-15 23:45, 2026-06-16 07:45, 2026-06-16 15:45, 2026-06-16 23:45, 2026-06-17 07:45, 2026-06-17 15:45, 2026-06-17 23:45, 2026-06-18 15:45, 2026-06-18 23:45, 2026-06-19 07:45, 2026-06-19 15:45, 2026-06-19 23:45, 2026-06-20 07:45, 2026-06-20 15:45, 2026-06-20 23:45, 2026-06-21 07:45, 2026-06-21 15:45, 2026-06-21 23:45, 2026-06-22 07:45, 2026-06-22 15:45

Echelon port scan

212.8.251.106 is listed on the Echelon port scan blacklist.

Description: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-06-12 09:25:00.268000
Was present on blacklist at: 2026-05-08 09:25, 2026-05-09 09:25, 2026-05-10 09:25, 2026-05-11 09:25, 2026-05-12 09:25, 2026-05-18 09:25, 2026-05-19 09:25, 2026-05-20 09:25, 2026-05-21 09:25, 2026-05-22 09:25, 2026-05-24 09:25, 2026-05-25 09:25, 2026-06-03 09:25, 2026-06-04 09:25, 2026-06-05 09:25, 2026-06-06 09:25, 2026-06-07 09:25, 2026-06-08 09:25, 2026-06-09 09:25, 2026-06-10 09:25, 2026-06-11 09:25, 2026-06-12 09:25

Echelon VNC login

212.8.251.106 is listed on the Echelon VNC login blacklist.

Description: VNC remote desktop login attempt on port 5900/5901
Type of feed: primary (feed detail page)

Last checked at: 2026-06-11 09:45:00.271000
Was present on blacklist at: 2026-05-08 09:45, 2026-05-09 09:45, 2026-05-10 09:45, 2026-05-11 09:45, 2026-05-12 09:45, 2026-06-03 09:45, 2026-06-04 09:45, 2026-06-05 09:45, 2026-06-06 09:45, 2026-06-07 09:45, 2026-06-08 09:45, 2026-06-09 09:45, 2026-06-10 09:45, 2026-06-11 09:45

Threat categories

TL	Role	Category	Details
No threat category tags assigned

Warden events (505)

2026-07-11: ReconScanning (node.f90c6b): 3
2026-06-15: ReconScanning (node.368407): 10; ReconScanning (node.f90c6b): 5
2026-06-14: ReconScanning (node.ce2b59): 9; ReconScanning (node.9c1411): 2; ReconScanning (node.4dc198): 11; AnomalyTraffic (node.ce2b59): 5; AnomalyTraffic (node.6a1878): 2; ReconScanning (node.86eb21): 28
2026-06-13: ReconScanning (node.368407): 16; ReconScanning (node.f90c6b): 20
2026-06-12: ReconScanning (node.86eb21): 9; ReconScanning (node.4dc198): 10; ReconScanning (node.368407): 10; ReconScanning (node.f90c6b): 15
2026-06-11: AnomalyTraffic (node.6a1878): 3; ReconScanning (node.4dc198): 16
2026-06-09: AnomalyTraffic (node.6a1878): 3; ReconScanning (node.4dc198): 19; ReconScanning (node.ce2b59): 5; AnomalyTraffic (node.ce2b59): 9
2026-06-06: ReconScanning (node.f90c6b): 3
2026-06-05: AnomalyTraffic (node.ce2b59): 4; AnomalyTraffic (node.6a1878): 2; ReconScanning (node.ce2b59): 4; ReconScanning (node.4dc198): 10; ReconScanning (node.86eb21): 29
2026-06-03: ReconScanning (node.86eb21): 1; AnomalyTraffic (node.6a1878): 1; ReconScanning (node.4dc198): 2
2026-05-22: ReconScanning (node.9c1411): 1
2026-05-18: AnomalyTraffic (node.ce2b59): 9; ReconScanning (node.ce2b59): 2; AnomalyTraffic (node.6a1878): 2; ReconScanning (node.4dc198): 10; ReconScanning (node.86eb21): 24
2026-05-17: AnomalyTraffic (node.6a1878): 2; ReconScanning (node.4dc198): 10; ReconScanning (node.86eb21): 9; ReconScanning (node.368407): 10; ReconScanning (node.f90c6b): 4
2026-05-16: ReconScanning (node.86eb21): 2
2026-05-15: AnomalyTraffic (node.6a1878): 2; ReconScanning (node.4dc198): 9; ReconScanning (node.86eb21): 1
2026-05-14: ReconScanning (node.368407): 14; ReconScanning (node.f90c6b): 16
2026-05-10: AnomalyTraffic (node.6a1878): 3; ReconScanning (node.4dc198): 10; ReconScanning (node.86eb21): 87
2026-05-08: ReconScanning (node.f90c6b): 3; ReconScanning (node.4dc198): 7; ReconScanning (node.86eb21): 2

DShield reports (IP summary, reports)

2026-05-08: Number of reports: 746; Distinct targets: 639
2026-05-09: Number of reports: 994; Distinct targets: 893
2026-05-10: Number of reports: 141; Distinct targets: 141
2026-05-11: Number of reports: 207; Distinct targets: 207
2026-05-12: Number of reports: 723; Distinct targets: 513
2026-05-13: Number of reports: 411; Distinct targets: 307
2026-05-14: Number of reports: 528; Distinct targets: 369
2026-05-15: Number of reports: 1743; Distinct targets: 1208
2026-05-16: Number of reports: 811; Distinct targets: 579
2026-05-17: Number of reports: 811; Distinct targets: 579
2026-05-18: Number of reports: 1086; Distinct targets: 796
2026-05-19: Number of reports: 1086; Distinct targets: 796
2026-06-04: Number of reports: 988; Distinct targets: 691
2026-06-05: Number of reports: 1145; Distinct targets: 753
2026-06-06: Number of reports: 393; Distinct targets: 371
2026-06-07: Number of reports: 393; Distinct targets: 371
2026-06-08: Number of reports: 202; Distinct targets: 101
2026-06-09: Number of reports: 450; Distinct targets: 248
2026-06-10: Number of reports: 450; Distinct targets: 248
2026-06-12: Number of reports: 1031; Distinct targets: 650
2026-06-13: Number of reports: 1031; Distinct targets: 650
2026-06-14: Number of reports: 32; Distinct targets: 16
2026-06-16: Number of reports: 482; Distinct targets: 432
2026-06-17: Number of reports: 619; Distinct targets: 501

Origin AS: AS60117 - HS
BGP Prefix: 212.8.251.0/24
geo: Netherlands, Naaldwijk; 🕑 Europe/Amsterdam
hostname: digitisedserver1.hostsailor.com
Address block ('inetnum' or 'NetRange' in whois database): 212.8.251.0 - 212.8.251.255
last_activity: 2026-07-11 23:53:56
last_warden_event: 2026-07-11 23:53:56
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 80; Tags: –; CPEs: cpe:/a:f5:nginx
ts_added: 2026-04-24 05:04:37.751000
ts_last_update: 2026-08-06 05:07:51.426000

Warden event timeline

DShield event timeline

Presence on blacklists