IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
203.160.55.97 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-01-09 08:45:00.596000
Was present on blacklist at: 2025-01-01 08:45, 2025-01-01 16:45, 2025-01-02 00:45, 2025-01-02 08:45, 2025-01-02 16:45, 2025-01-03 00:45, 2025-01-03 08:45, 2025-01-03 16:45, 2025-01-04 00:45, 2025-01-04 08:45, 2025-01-04 16:45, 2025-01-05 00:45, 2025-01-05 08:45, 2025-01-05 16:45, 2025-01-06 00:45, 2025-01-06 08:45, 2025-01-06 16:45, 2025-01-07 00:45, 2025-01-07 08:45, 2025-01-07 16:45, 2025-01-08 00:45, 2025-01-08 08:45, 2025-01-08 16:45, 2025-01-09 00:45, 2025-01-09 08:45
Spamhaus SBL CSS
203.160.55.97 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-01-08 08:56:23.233000
Was present on blacklist at: 2025-01-01 08:56
SpamCop
203.160.55.97 was recently listed on the SpamCop blacklist, but currently it is not.

Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-01-08 08:56:23.233000
Was present on blacklist at: 2025-01-01 08:56
PSBL
203.160.55.97 is listed on the PSBL blacklist.

Description: The Passive Spam Block List uses the Spamikaze software to detect spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-01-09 08:45:00.449000
Was present on blacklist at: 2025-01-02 08:45, 2025-01-02 16:45, 2025-01-03 00:45, 2025-01-03 08:45, 2025-01-03 16:45, 2025-01-04 00:45, 2025-01-04 08:45, 2025-01-04 16:45, 2025-01-05 00:45, 2025-01-05 08:45, 2025-01-05 16:45, 2025-01-06 00:45, 2025-01-06 08:45, 2025-01-06 16:45, 2025-01-07 00:45, 2025-01-07 08:45, 2025-01-07 16:45, 2025-01-08 00:45, 2025-01-08 08:45, 2025-01-08 16:45, 2025-01-09 00:45, 2025-01-09 08:45

Origin AS: AS55933 - CLOUDIE-AS-AP
BGP Prefix: 203.160.54.0/23
geo: China; 🕑 Asia/Shanghai
hostname: unknown.itsidc.com
Address block ('inetnum' or 'NetRange' in whois database): 203.160.52.0 - 203.160.55.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 135, 443, 445, 3306, 3389, 8888; Tags: eol-os, self-signed, database, eol-product; CPEs: cpe:/a:apache:http_server:2.4.54, cpe:/a:oracle:mysql:5.7.38-log, cpe:/a:f5:nginx, cpe:/a:openssl:openssl:1.1.1p
ts_added: 2025-01-01 08:56:10.573000
ts_last_update: 2025-01-09 09:02:31.102000

Warden event timeline

DShield event timeline

Presence on blacklists