IP address

Search at other sites:
.00080.82.68.53
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
DataPlane TELNET login
80.82.68.53 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-08 19:10:02.986000
Was present on blacklist at: 2025-11-18 19:10, 2025-11-18 23:10, 2025-11-19 03:10, 2025-11-19 07:10, 2025-11-19 11:10, 2025-11-19 15:10, 2025-11-19 19:10, 2025-11-19 23:10, 2025-11-20 03:10, 2025-11-20 07:10, 2025-11-20 11:10, 2025-11-20 15:10, 2025-11-20 19:10, 2025-11-20 23:10, 2025-11-21 03:10, 2025-11-21 07:10, 2025-11-21 11:10, 2025-11-21 15:10, 2025-11-21 19:10, 2025-11-21 23:10, 2025-11-22 03:10, 2025-11-22 07:10, 2025-11-22 11:10, 2025-11-22 15:10, 2025-11-22 19:10, 2025-11-22 23:10, 2025-11-23 03:10, 2025-11-23 07:10, 2025-11-23 11:10, 2025-11-23 15:10, 2025-11-23 19:10, 2025-11-23 23:10, 2025-11-24 03:10, 2025-11-24 07:10, 2025-11-24 11:10, 2025-11-24 15:10, 2025-11-24 19:10, 2025-11-24 23:10, 2025-11-25 03:10, 2025-11-25 07:10, 2025-11-25 11:10, 2025-12-09 19:10, 2025-12-09 23:10, 2025-12-10 03:10, 2025-12-10 07:10, 2025-12-10 11:10, 2025-12-10 15:10, 2025-12-10 19:10, 2025-12-10 23:10, 2025-12-11 03:10, 2025-12-11 07:10, 2025-12-11 11:10, 2025-12-11 15:10, 2025-12-11 19:10, 2025-12-11 23:10, 2025-12-12 03:10, 2025-12-12 07:10, 2025-12-12 11:10, 2025-12-12 15:10, 2025-12-12 19:10, 2025-12-12 23:10, 2025-12-13 03:10, 2025-12-13 07:10, 2025-12-13 11:10, 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10, 2025-12-16 07:10, 2025-12-16 11:10, 2025-12-16 15:10, 2025-12-16 19:10, 2026-01-01 15:10, 2026-01-01 19:10, 2026-01-01 23:10, 2026-01-02 03:10, 2026-01-02 07:10, 2026-01-02 11:10, 2026-01-02 15:10, 2026-01-02 19:10, 2026-01-02 23:10, 2026-01-03 03:10, 2026-01-03 07:10, 2026-01-03 11:10, 2026-01-03 15:10, 2026-01-03 19:10, 2026-01-03 23:10, 2026-01-04 03:10, 2026-01-04 07:10, 2026-01-04 11:10, 2026-01-04 15:10, 2026-01-04 19:10, 2026-01-04 23:10, 2026-01-05 03:10, 2026-01-05 07:10, 2026-01-05 11:10, 2026-01-05 15:10, 2026-01-05 19:10, 2026-01-05 23:10, 2026-01-06 03:10, 2026-01-06 11:10, 2026-01-06 15:10, 2026-01-06 19:10, 2026-01-06 23:10, 2026-01-07 03:10, 2026-01-07 07:10, 2026-01-07 11:10, 2026-01-07 15:10, 2026-01-07 19:10, 2026-01-07 23:10, 2026-01-08 03:10, 2026-01-08 07:10, 2026-01-08 15:10, 2026-01-08 19:10
Spamhaus XBL CBL
80.82.68.53 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-01-20 19:50:32.852000
Was present on blacklist at: 2025-11-18 19:50, 2025-11-25 19:50, 2025-12-02 19:50, 2025-12-09 19:50
Spamhaus PBL
80.82.68.53 is listed on the Spamhaus PBL blacklist.

Description: The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server except those provided for specifically by an ISP for that customer's use.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-01-20 19:50:32.852000
Was present on blacklist at: 2025-11-18 19:50, 2025-11-25 19:50, 2025-12-02 19:50, 2025-12-09 19:50, 2025-12-16 19:50, 2025-12-23 19:50, 2025-12-30 19:50, 2026-01-06 19:50, 2026-01-13 19:50, 2026-01-20 19:50
CI Army
80.82.68.53 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-01-06 03:50:00.957000
Was present on blacklist at: 2025-11-24 03:50, 2025-11-25 03:50, 2025-11-26 03:50, 2025-11-27 03:50, 2025-12-09 03:50, 2025-12-10 03:50, 2025-12-11 03:50, 2025-12-12 03:50, 2025-12-13 03:50, 2025-12-14 03:50, 2025-12-15 03:50, 2025-12-16 03:50, 2025-12-17 03:50, 2025-12-18 03:50, 2025-12-19 03:50, 2025-12-20 03:50, 2025-12-21 03:50, 2025-12-22 03:50, 2025-12-23 03:50, 2026-01-01 03:50, 2026-01-02 03:50, 2026-01-03 03:50, 2026-01-04 03:50, 2026-01-05 03:50, 2026-01-06 03:50
AbuseIPDB
80.82.68.53 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-01-01 05:00:00.618000
Was present on blacklist at: 2025-12-10 05:00, 2025-12-11 05:00, 2025-12-12 05:00, 2025-12-13 05:00, 2025-12-14 05:00, 2025-12-15 05:00, 2025-12-16 05:00, 2025-12-17 05:00, 2026-01-01 05:00
Turris greylist
80.82.68.53 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-03 22:15:00.153000
Was present on blacklist at: 2025-12-10 22:15, 2025-12-14 22:15, 2025-12-15 22:15, 2025-12-17 22:15, 2026-01-02 22:15, 2026-01-03 22:15
blocklist.de bots
80.82.68.53 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-03 05:05:05.240000
Was present on blacklist at: 2025-12-31 23:05, 2026-01-01 05:05, 2026-01-01 11:05, 2026-01-01 17:05, 2026-01-01 23:05, 2026-01-02 05:05, 2026-01-02 11:05, 2026-01-02 17:05, 2026-01-02 23:05, 2026-01-03 05:05
UCEPROTECT L1
80.82.68.53 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-08 00:45:00.397000
Was present on blacklist at: 2026-01-01 08:45, 2026-01-01 16:45, 2026-01-02 00:45, 2026-01-02 08:45, 2026-01-02 16:45, 2026-01-03 00:45, 2026-01-03 08:45, 2026-01-03 16:45, 2026-01-04 00:45, 2026-01-04 08:45, 2026-01-04 16:45, 2026-01-05 00:45, 2026-01-05 08:45, 2026-01-05 16:45, 2026-01-06 00:45, 2026-01-06 08:45, 2026-01-06 16:45, 2026-01-07 00:45, 2026-01-07 08:45, 2026-01-07 16:45, 2026-01-08 00:45
Warden events (6214)
2026-01-05
ReconScanning (node.4dc198): 1
ReconScanning (node.9c1411): 1
2026-01-02
ReconScanning (node.4dc198): 35
ReconScanning (node.368407): 34
2026-01-01
ReconScanning (node.4dc198): 288
ReconScanning (node.368407): 286
IntrusionUserCompromise (node.cfb4f7): 12
2025-12-31
ReconScanning (node.368407): 61
ReconScanning (node.4dc198): 61
IntrusionUserCompromise (node.cfb4f7): 2
2025-12-17
ReconScanning (node.4dc198): 67
ReconScanning (node.368407): 66
2025-12-16
ReconScanning (node.4dc198): 285
ReconScanning (node.368407): 285
2025-12-15
ReconScanning (node.368407): 286
ReconScanning (node.9c1411): 50
ReconScanning (node.4dc198): 286
2025-12-14
ReconScanning (node.4dc198): 288
ReconScanning (node.368407): 286
ReconScanning (node.9c1411): 87
2025-12-13
ReconScanning (node.4dc198): 286
ReconScanning (node.368407): 286
ReconScanning (node.9c1411): 42
2025-12-12
ReconScanning (node.368407): 286
ReconScanning (node.4dc198): 287
2025-12-11
ReconScanning (node.368407): 286
ReconScanning (node.4dc198): 288
2025-12-10
ReconScanning (node.4dc198): 289
ReconScanning (node.368407): 286
2025-12-09
ReconScanning (node.368407): 206
ReconScanning (node.4dc198): 206
IntrusionUserCompromise (node.cfb4f7): 2
2025-12-08
ReconScanning (node.4dc198): 81
ReconScanning (node.368407): 80
IntrusionUserCompromise (node.cfb4f7): 2
2025-11-30
ReconScanning (node.f90c6b): 33
ReconScanning (node.86eb21): 28
2025-11-29
ReconScanning (node.86eb21): 32
ReconScanning (node.f90c6b): 36
2025-11-28
ReconScanning (node.f90c6b): 72
ReconScanning (node.86eb21): 60
2025-11-27
ReconScanning (node.f90c6b): 89
ReconScanning (node.86eb21): 67
2025-11-26
ReconScanning (node.f90c6b): 68
ReconScanning (node.86eb21): 49
DShield reports (IP summary, reports)
2025-11-19
Number of reports: 1503
Distinct targets: 1503
2025-11-20
Number of reports: 1503
Distinct targets: 1503
2025-11-21
Number of reports: 4000
Distinct targets: 4000
2025-11-22
Number of reports: 4395
Distinct targets: 4395
2025-11-24
Number of reports: 7996
Distinct targets: 3998
2025-11-25
Number of reports: 7996
Distinct targets: 3998
2025-11-26
Number of reports: 4680
Distinct targets: 4000
2025-11-27
Number of reports: 9478
Distinct targets: 4739
2025-11-28
Number of reports: 7994
Distinct targets: 3997
2025-11-29
Number of reports: 7994
Distinct targets: 3997
2025-11-30
Number of reports: 1770
Distinct targets: 1770
2025-12-08
Number of reports: 314
Distinct targets: 257
2025-12-09
Number of reports: 916
Distinct targets: 709
2025-12-10
Number of reports: 1111
Distinct targets: 851
2025-12-11
Number of reports: 770
Distinct targets: 649
2025-12-12
Number of reports: 770
Distinct targets: 649
2025-12-13
Number of reports: 917
Distinct targets: 750
2025-12-14
Number of reports: 874
Distinct targets: 682
2025-12-15
Number of reports: 396
Distinct targets: 349
2025-12-16
Number of reports: 327
Distinct targets: 295
2025-12-17
Number of reports: 235
Distinct targets: 187
2025-12-18
Number of reports: 235
Distinct targets: 187
2025-12-31
Number of reports: 288
Distinct targets: 231
2026-01-01
Number of reports: 1421
Distinct targets: 1059
2026-01-02
Number of reports: 1421
Distinct targets: 1059
2026-01-03
Number of reports: 152
Distinct targets: 116
Origin AS
AS202425 - INT-NETWORK
BGP Prefix
80.82.68.0/24
geo
Netherlands
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
80.82.64.0 - 80.82.79.255
last_activity
2026-01-05 14:18:16
last_warden_event
2026-01-05 14:18:16
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 80
Tags: scanner
CPEs: cpe:/a:apache:http_server:2.4.65, cpe:/o:debian:debian_linux
ts_added
2025-11-18 19:50:22.548000
ts_last_update
2026-01-20 19:50:33.186000

Warden event timeline

DShield event timeline

Presence on blacklists