IP address


--103.104.198.1return.1949idc.cn
Shodan(more info)
Passive DNS
Tags:
IP blacklists
UCEPROTECT L1
103.104.198.1 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-01-09 08:45:00.596000
Was present on blacklist at: 2025-01-06 08:45, 2025-01-06 16:45, 2025-01-07 00:45, 2025-01-07 08:45, 2025-01-07 16:45, 2025-01-08 00:45, 2025-01-08 08:45, 2025-01-08 16:45, 2025-01-09 00:45, 2025-01-09 08:45
Spamhaus SBL CSS
103.104.198.1 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-01-06 08:45:22.652000
Was present on blacklist at: 2025-01-06 08:45
Origin AS
AS55933 - CLOUDIE-AS-AP
BGP Prefix
103.104.198.0/23
geo
China
🕑 Asia/Shanghai
hostname
return.1949idc.cn
Address block ('inetnum' or 'NetRange' in whois database)
103.104.198.0 - 103.104.199.255
reserved_range
0
Shodan's InternetDB
Open ports: 22, 23, 25, 80, 110, 143, 443, 587, 993, 995, 9998
Tags: starttls
CPEs: cpe:/a:openbsd:openssh:8.7, cpe:/a:postfix:postfix, cpe:/a:f5:nginx
ts_added
2025-01-06 08:45:22.149000
ts_last_update
2025-01-09 08:45:52.093000

Warden event timeline

DShield event timeline

Presence on blacklists