IP address


.32351.158.204.2103be0b5f8-50cc-4736-8c13-85c15f565135.nl-ams-1.baremetal.scw.cloud
Shodan(more info)
Passive DNS
Tags:
IP blacklists
CI Army
51.158.204.210 was recently listed on the CI Army blacklist, but currently it is not.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-10-12 02:50:00.783000
Was present on blacklist at: 2026-10-11 02:50, 2026-10-12 02:50
FireHOL anonymizers
51.158.204.210 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-10-13 00:05:16
Was present on blacklist at: 2026-10-11 00:05, 2026-10-12 00:05, 2026-10-13 00:05
Echelon SIP register scanner
51.158.204.210 is listed on the Echelon SIP register scanner blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SIP VoIP registration scanning on port 5060
Type of feed: primary (feed detail page)

Last checked at: 2026-10-13 09:30:00.764000
Was present on blacklist at: 2026-10-11 09:30, 2026-10-12 09:30, 2026-10-13 09:30
AbuseIPDB
51.158.204.210 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-10-12 04:00:00.635000
Was present on blacklist at: 2026-10-12 04:00

Threat categories

TLRoleCategoryDetails
42 src scan
32 src —

DShield reports (IP summary, reports)
2026-10-10
Number of reports: 1207
Distinct targets: 202
2026-10-11
Number of reports: 2210
Distinct targets: 494
Origin AS
AS12876 - AS12876
BGP Prefix
51.158.128.0/17
geo
Netherlands, Haarlem
🕑 Europe/Amsterdam
hostname
3be0b5f8-50cc-4736-8c13-85c15f565135.nl-ams-1.baremetal.scw.cloud
Address block ('inetnum' or 'NetRange' in whois database)
51.158.0.0 - 51.159.255.255
rep
0.32334981764328374
reserved_range
0
Shodan's InternetDB
Open ports: 80, 3333, 5432
Tags: eol-product
CPEs: cpe:/a:f5:nginx:1.18.0, cpe:/o:canonical:ubuntu_linux, cpe:/o:linux:linux_kernel
ts_added
2026-10-11 02:51:17.210000
ts_last_update
2026-10-13 09:30:04.628000

Warden event timeline

DShield event timeline

Presence on blacklists