IP address

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
107.189.4.50 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-09-16 23:45:00.636000
Was present on blacklist at: 2025-09-10 07:45, 2025-09-10 15:45, 2025-09-10 23:45, 2025-09-11 07:45, 2025-09-11 15:45, 2025-09-11 23:45, 2025-09-12 07:45, 2025-09-12 15:45, 2025-09-12 23:45, 2025-09-13 07:45, 2025-09-13 15:45, 2025-09-13 23:45, 2025-09-14 07:45, 2025-09-14 15:45, 2025-09-14 23:45, 2025-09-15 07:45, 2025-09-15 15:45, 2025-09-15 23:45, 2025-09-16 07:45, 2025-09-16 15:45, 2025-09-16 23:45
FireHOL anonymizers
107.189.4.50 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2025-09-17 06:05:08
Was present on blacklist at: 2025-09-10 06:05, 2025-09-11 06:05, 2025-09-12 06:05, 2025-09-13 06:05, 2025-09-14 06:05, 2025-09-15 06:05, 2025-09-16 06:05, 2025-09-17 06:05

Origin AS: AS53667 - PONYNET
BGP Prefix: 107.189.0.0/21
geo: Luxembourg, Luxembourg; 🕑 Europe/Luxembourg
hostname: mail.fraudemail.com
Address block ('inetnum' or 'NetRange' in whois database): 107.189.0.0 - 107.189.31.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 3128; Tags: eol-product; CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:squid-cache:squid:5.7, cpe:/o:linux:linux_kernel, cpe:/a:f5:nginx:1.18.0
ts_added: 2025-09-10 07:47:05.216000
ts_last_update: 2025-09-17 07:47:11.761000

Warden event timeline

DShield event timeline

Presence on blacklists