IP address

Passive DNS

Tags:

IP blacklists: DataPlane SMTP data
5.161.96.9 is listed on the DataPlane SMTP data blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that <br>have been identified as SMTP clients sending unsolicited DATA commands.
Type of feed: primary (feed detail page)

Last checked at: 2025-09-16 14:10:00.595000
Was present on blacklist at: 2025-09-13 22:10, 2025-09-14 02:10, 2025-09-14 06:10, 2025-09-14 10:10, 2025-09-14 14:10, 2025-09-14 18:10, 2025-09-14 22:10, 2025-09-15 02:10, 2025-09-15 06:10, 2025-09-15 10:10, 2025-09-15 14:10, 2025-09-15 18:10, 2025-09-15 22:10, 2025-09-16 02:10, 2025-09-16 06:10, 2025-09-16 10:10, 2025-09-16 14:10
Spamhaus SBL CSS
5.161.96.9 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-09-13 22:10:22.256000
Was present on blacklist at: 2025-09-13 22:10

Origin AS: AS213230 - HETZNER-CLOUD2-AS
BGP Prefix: 5.161.96.0/24
geo: United States, Ashburn; 🕑 America/New_York
hostname: contato5.curitibacidade.sbs
Address block ('inetnum' or 'NetRange' in whois database): 5.161.0.0 - 5.161.127.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 443, 5060; Tags: eol-product; CPEs: cpe:/a:jquery:jquery, cpe:/a:f5:nginx:1.22.1
ts_added: 2025-09-13 22:10:22.067000
ts_last_update: 2025-09-16 14:10:22.401000

Warden event timeline

DShield event timeline

Presence on blacklists