IP address

Search at other sites:
--172.104.10.21
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL CSS
172.104.10.21 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-13 05:02:02.807000
Was present on blacklist at: 2026-03-13 05:02
Echelon TLS/SSL crawler
172.104.10.21 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-03-17 10:40:00.512000
Was present on blacklist at: 2026-03-14 10:40, 2026-03-15 10:40, 2026-03-16 10:40, 2026-03-17 10:40

Threat categories

TLRoleCategoryDetails
40 src scan
DShield reports (IP summary, reports)
2026-03-12
Number of reports: 39
Distinct targets: 22
2026-03-13
Number of reports: 39
Distinct targets: 22
2026-03-15
Number of reports: 45
Distinct targets: 28
Origin AS
AS63949 - LINODE-AP
BGP Prefix
172.104.8.0/21
geo
United States, Cedar Knolls
🕑 America/New_York
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
172.104.0.0 - 172.105.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 80, 443, 8880
Tags: cloud
CPEs: –
ts_added
2026-03-13 05:02:02.597000
ts_last_update
2026-03-18 05:02:36.110000

Warden event timeline

DShield event timeline

Presence on blacklists