IP address

Passive DNS

Tags: IP in hostname

IP blacklists

CI Army

217.154.231.67 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-05-30 02:50:00.849000
Was present on blacklist at: 2026-04-03 02:50, 2026-04-04 02:50, 2026-04-05 02:50, 2026-04-06 02:50, 2026-04-07 02:50, 2026-04-08 02:50, 2026-04-09 02:50, 2026-04-10 02:50, 2026-04-16 02:50, 2026-04-17 02:50, 2026-04-18 02:50, 2026-04-19 02:50, 2026-04-20 02:50, 2026-04-21 02:50, 2026-04-22 02:50, 2026-04-23 02:50, 2026-04-24 02:50, 2026-04-26 02:50, 2026-04-28 02:50, 2026-04-29 02:50, 2026-04-30 02:50, 2026-05-01 02:50, 2026-05-02 02:50, 2026-05-03 02:50, 2026-05-04 02:50, 2026-05-05 02:50, 2026-05-06 02:50, 2026-05-07 02:50, 2026-05-08 02:50, 2026-05-09 02:50, 2026-05-10 02:50, 2026-05-11 02:50, 2026-05-12 02:50, 2026-05-13 02:50, 2026-05-14 02:50, 2026-05-15 02:50, 2026-05-16 02:50, 2026-05-17 02:50, 2026-05-18 02:50, 2026-05-19 02:50, 2026-05-20 02:50, 2026-05-21 02:50, 2026-05-22 02:50, 2026-05-24 02:50, 2026-05-25 02:50, 2026-05-26 02:50, 2026-05-27 02:50, 2026-05-28 02:50, 2026-05-29 02:50, 2026-05-30 02:50

AbuseIPDB

217.154.231.67 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-05-27 04:00:00.670000
Was present on blacklist at: 2026-04-03 04:00, 2026-04-06 04:00, 2026-04-16 04:00, 2026-04-18 04:00, 2026-04-19 04:00, 2026-04-20 04:00, 2026-04-22 04:00, 2026-04-23 04:00, 2026-04-24 04:00, 2026-04-26 04:00, 2026-04-28 04:00, 2026-04-29 04:00, 2026-05-04 04:00, 2026-05-08 04:00, 2026-05-10 04:00, 2026-05-11 04:00, 2026-05-13 04:00, 2026-05-14 04:00, 2026-05-15 04:00, 2026-05-16 04:00, 2026-05-17 04:00, 2026-05-20 04:00, 2026-05-27 04:00

UCEPROTECT L1

217.154.231.67 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-13 07:45:00.972000
Was present on blacklist at: 2026-04-03 15:45, 2026-04-03 23:45, 2026-04-04 07:45, 2026-04-04 15:45, 2026-04-04 23:45, 2026-04-05 07:45, 2026-04-05 15:45, 2026-04-05 23:45, 2026-04-06 07:45, 2026-04-06 15:45, 2026-04-06 23:45, 2026-04-07 07:45, 2026-04-07 15:45, 2026-04-07 23:45, 2026-04-08 07:45, 2026-04-08 15:45, 2026-04-08 23:45, 2026-04-09 07:45, 2026-04-09 15:45, 2026-04-09 23:45, 2026-04-10 07:45, 2026-04-10 15:45, 2026-04-10 23:45, 2026-04-11 07:45, 2026-04-11 15:45, 2026-04-11 23:45, 2026-04-12 07:45, 2026-04-12 15:45, 2026-04-12 23:45, 2026-04-13 07:45

Echelon VNC login

217.154.231.67 is listed on the Echelon VNC login blacklist.

Description: VNC remote desktop login attempt on port 5900/5901
Type of feed: primary (feed detail page)

Last checked at: 2026-05-22 09:45:00.269000
Was present on blacklist at: 2026-04-06 09:45, 2026-04-07 09:45, 2026-04-08 09:45, 2026-04-09 09:45, 2026-04-10 09:45, 2026-04-11 09:45, 2026-04-12 09:45, 2026-05-18 09:45, 2026-05-19 09:45, 2026-05-20 09:45, 2026-05-21 09:45, 2026-05-22 09:45

Threat categories

TL	Role	Category	Details
50	src	scan
27	src	—
25	src	login	protocol: vnc

DShield reports (IP summary, reports)

2026-04-02: Number of reports: 75; Distinct targets: 53
2026-04-03: Number of reports: 130; Distinct targets: 97
2026-04-04: Number of reports: 155; Distinct targets: 109
2026-04-05: Number of reports: 138; Distinct targets: 98
2026-04-06: Number of reports: 101; Distinct targets: 76
2026-04-16: Number of reports: 117; Distinct targets: 83
2026-04-17: Number of reports: 144; Distinct targets: 101
2026-04-18: Number of reports: 144; Distinct targets: 101
2026-04-19: Number of reports: 159; Distinct targets: 108
2026-04-20: Number of reports: 146; Distinct targets: 104
2026-04-21: Number of reports: 129; Distinct targets: 92
2026-04-22: Number of reports: 122; Distinct targets: 83
2026-04-23: Number of reports: 150; Distinct targets: 106
2026-04-24: Number of reports: 105; Distinct targets: 75
2026-04-25: Number of reports: 142; Distinct targets: 104
2026-04-26: Number of reports: 148; Distinct targets: 108
2026-04-27: Number of reports: 148; Distinct targets: 108
2026-04-28: Number of reports: 118; Distinct targets: 91
2026-04-29: Number of reports: 141; Distinct targets: 100
2026-04-30: Number of reports: 141; Distinct targets: 100
2026-05-01: Number of reports: 125; Distinct targets: 90
2026-05-02: Number of reports: 134; Distinct targets: 89
2026-05-03: Number of reports: 134; Distinct targets: 89
2026-05-04: Number of reports: 96; Distinct targets: 90
2026-05-05: Number of reports: 109; Distinct targets: 85
2026-05-06: Number of reports: 130; Distinct targets: 98
2026-05-07: Number of reports: 119; Distinct targets: 92
2026-05-08: Number of reports: 119; Distinct targets: 92
2026-05-09: Number of reports: 117; Distinct targets: 88
2026-05-10: Number of reports: 92; Distinct targets: 85
2026-05-11: Number of reports: 40; Distinct targets: 40
2026-05-12: Number of reports: 121; Distinct targets: 88
2026-05-13: Number of reports: 110; Distinct targets: 80
2026-05-14: Number of reports: 126; Distinct targets: 93
2026-05-15: Number of reports: 106; Distinct targets: 79
2026-05-16: Number of reports: 128; Distinct targets: 100
2026-05-17: Number of reports: 128; Distinct targets: 100
2026-05-18: Number of reports: 111; Distinct targets: 79
2026-05-19: Number of reports: 111; Distinct targets: 79
2026-05-20: Number of reports: 105; Distinct targets: 82
2026-05-21: Number of reports: 113; Distinct targets: 81
2026-05-23: Number of reports: 119; Distinct targets: 80
2026-05-24: Number of reports: 119; Distinct targets: 80
2026-05-25: Number of reports: 145; Distinct targets: 103
2026-05-26: Number of reports: 18; Distinct targets: 18
2026-05-27: Number of reports: 18; Distinct targets: 18
2026-05-28: Number of reports: 120; Distinct targets: 84
2026-05-29: Number of reports: 121; Distinct targets: 86

Origin AS: AS8560 - ONEANDONE-AS
BGP Prefix: 217.154.231.0/24
geo: Germany; 🕑 Europe/Berlin
hostname: ip217.154.231-67.pbiaas.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 217.154.231.0 - 217.154.231.255
rep: 0.16390709895634703
reserved_range: 0
Shodan's InternetDB: Open ports: 135, 445, 3389, 5357, 5985; Tags: scanner, self-signed; CPEs: –
ts_added: 2026-04-03 02:53:31.255000
ts_last_update: 2026-05-30 05:03:07.531000

Warden event timeline

DShield event timeline

Presence on blacklists