IP address

Search at other sites:

.00251.159.198.23351-159-198-233.rev.poneytelecom.eu

Shodan(more info)

Passive DNS

IP blacklists

blocklist.de SSH

51.159.198.233 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-08-13 04:05:00.364000
Was present on blacklist at: 2026-08-10 10:05, 2026-08-10 16:05, 2026-08-10 22:05, 2026-08-11 04:05, 2026-08-11 10:05, 2026-08-11 16:05, 2026-08-11 22:05, 2026-08-12 04:05, 2026-08-12 10:05, 2026-08-12 16:05, 2026-08-12 22:05, 2026-08-13 04:05

Threat categories

TL	Role	Category	Details
50	src	scan
48	src	login	protocol: ssh

---

Warden events (3)

2026-08-11

IntrusionUserCompromise (node.40929a): 1

2026-08-10

AttemptLogin (node.70e749): 1

AttemptLogin (node.40929a): 1

DShield reports (IP summary, reports)

2026-08-11

Number of reports: 34

Distinct targets: 9

Origin AS

AS12876 - AS12876

BGP Prefix

51.158.0.0/15

geo

France, Paris

🕑 Europe/Paris

hostname

51-159-198-233.rev.poneytelecom.eu

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

51.158.0.0 - 51.159.255.255

last_activity

2026-08-11 10:30:56.465000

last_warden_event

2026-08-11 10:30:56.465000

rep

0.001803359585023534

reserved_range

0

Shodan's InternetDB

Open ports: 3000, 5672, 8069

Tags: –

CPEs: cpe:/a:gitea:gitea:1.24.5, cpe:/a:vmware:rabbitmq:4.1.3

ts_added

2026-08-10 10:09:28.915000

ts_last_update

2026-08-22 10:09:31.315000

Warden event timeline

DShield event timeline

Presence on blacklists