IP address

Passive DNS

Tags: IP in hostname

IP blacklists

UCEPROTECT L1

104.168.34.172 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-01 15:45:01.026000
Was present on blacklist at: 2024-02-16 16:45, 2024-02-17 00:45, 2024-02-17 08:45, 2024-02-17 16:45, 2024-02-18 00:45, 2024-02-18 08:45, 2024-02-18 16:45, 2024-02-19 00:45, 2024-02-19 08:45, 2024-02-19 16:45, 2024-02-20 00:45, 2024-02-20 08:45, 2024-02-20 16:45, 2024-02-21 00:45, 2024-02-21 08:45, 2024-02-21 16:45, 2024-02-22 00:45, 2024-02-22 08:45, 2024-02-22 16:45, 2024-02-23 00:45, 2024-02-23 08:45, 2024-02-23 16:45, 2024-02-24 00:45, 2024-02-24 08:45, 2024-02-24 16:45, 2024-02-25 00:45, 2024-02-25 08:45, 2024-02-25 16:45, 2024-02-26 00:45, 2024-02-26 16:45, 2024-02-27 00:45, 2024-02-27 08:45, 2024-02-27 16:45, 2024-03-08 00:45, 2024-03-08 08:45, 2024-03-08 16:45, 2024-03-09 00:45, 2024-03-09 08:45, 2024-03-09 16:45, 2024-03-10 00:45, 2024-03-10 08:45, 2024-03-10 16:45, 2024-03-11 00:45, 2024-03-11 08:45, 2024-03-11 16:45, 2024-03-12 00:45, 2024-03-12 08:45, 2024-03-12 16:45, 2024-03-13 00:45, 2024-03-13 08:45, 2024-03-13 16:45, 2024-03-14 00:45, 2024-03-14 08:45, 2024-03-14 16:45, 2024-03-29 00:45, 2024-03-29 08:45, 2024-03-29 16:45, 2024-03-30 00:45, 2024-03-30 08:45, 2024-03-30 16:45, 2024-03-31 00:45, 2024-03-31 07:45, 2024-03-31 15:45, 2024-03-31 23:45, 2024-04-01 07:45, 2024-04-01 15:45, 2024-04-01 23:45, 2024-04-02 07:45, 2024-04-02 15:45, 2024-04-02 23:45, 2024-04-03 07:45, 2024-04-03 15:45, 2024-04-03 23:45, 2024-04-04 07:45, 2024-04-04 15:45, 2024-04-16 23:45, 2024-04-17 07:45, 2024-04-17 15:45, 2024-04-17 23:45, 2024-04-18 07:45, 2024-04-18 15:45, 2024-04-18 23:45, 2024-04-19 07:45, 2024-04-19 15:45, 2024-04-19 23:45, 2024-04-20 07:45, 2024-04-20 15:45, 2024-04-20 23:45, 2024-04-21 07:45, 2024-04-21 15:45, 2024-04-21 23:45, 2024-04-22 07:45, 2024-04-22 15:45, 2024-04-22 23:45, 2024-04-23 07:45, 2024-04-23 15:45, 2024-04-29 23:45, 2024-04-30 07:45, 2024-04-30 15:45, 2024-04-30 23:45, 2024-05-01 07:45, 2024-05-01 15:45

Spamhaus SBL CSS

104.168.34.172 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-26 16:46:30.587000
Was present on blacklist at: 2024-02-16 16:46, 2024-02-23 16:46, 2024-03-01 16:46, 2024-03-08 16:46, 2024-03-15 16:46, 2024-03-22 16:46, 2024-03-29 16:46, 2024-04-05 16:46, 2024-04-12 16:46

Spamhaus XBL CBL

104.168.34.172 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-26 16:46:30.587000
Was present on blacklist at: 2024-02-16 16:46, 2024-02-23 16:46, 2024-03-01 16:46, 2024-03-08 16:46, 2024-03-15 16:46, 2024-03-22 16:46, 2024-03-29 16:46, 2024-04-12 16:46, 2024-04-19 16:46, 2024-04-26 16:46

SpamCop

104.168.34.172 was recently listed on the SpamCop blacklist, but currently it is not.

Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-04-26 16:46:30.587000
Was present on blacklist at: 2024-04-19 16:46

Warden events (28)

2024-04-29: AttemptLogin (node.7d83c0): 1
2024-04-18: AttemptLogin (node.7d83c0): 3
2024-04-15: AttemptLogin (node.7d83c0): 1
2024-04-10: AttemptLogin (node.7d83c0): 2
2024-04-05: AttemptLogin (node.7d83c0): 1
2024-03-24: AttemptLogin (node.7d83c0): 2
2024-03-16: AttemptLogin (node.7d83c0): 1
2024-03-08: AttemptLogin (node.7d83c0): 1
2024-03-07: AttemptLogin (node.7d83c0): 1
2024-03-01: AttemptLogin (node.7d83c0): 3
2024-02-29: AttemptLogin (node.7d83c0): 1
2024-02-28: AttemptLogin (node.7d83c0): 1
2024-02-23: AttemptLogin (node.7d83c0): 1
2024-02-21: AttemptLogin (node.7d83c0): 1
2024-02-20: AttemptLogin (node.7d83c0): 5
2024-02-19: AttemptLogin (node.7d83c0): 3

Origin AS: AS36352 - AS-COLOCROSSING
BGP Prefix: 104.168.32.0/21
geo: Canada; 🕑 America/Toronto
hostname: 104-168-34-172-host.colocrossing.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 104.168.0.0 - 104.168.127.255
last_activity: 2024-04-29 16:30:26
last_warden_event: 2024-04-29 16:30:26
rep: 0.03273809523809524
reserved_range: 0
Shodan's InternetDB: Open ports: 139, 445, 5357; Tags: –; CPEs: –
ts_added: 2024-02-16 16:46:26.600000
ts_last_update: 2024-05-01 16:46:30.723000

Warden event timeline

DShield event timeline

Presence on blacklists