IP address

Shodan(more info)

Passive DNS

Tags: Static IP IP in hostname

IP blacklists: PSBL
59.82.0.52 is listed on the PSBL blacklist.

Description: The Passive Spam Block List uses the Spamikaze software to detect spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-07-03 15:45:00.528000
Was present on blacklist at: 2025-06-15 15:45, 2025-06-15 23:45, 2025-06-16 07:45, 2025-06-16 15:45, 2025-06-16 23:45, 2025-06-17 07:45, 2025-06-17 15:45, 2025-06-17 23:45, 2025-06-18 07:45, 2025-06-18 15:45, 2025-06-18 23:45, 2025-06-19 07:45, 2025-06-19 15:45, 2025-06-19 23:45, 2025-06-20 07:45, 2025-06-20 15:45, 2025-06-20 23:45, 2025-06-21 07:45, 2025-06-21 15:45, 2025-06-21 23:45, 2025-06-22 07:45, 2025-06-22 15:45, 2025-06-22 23:45, 2025-06-23 07:45, 2025-06-23 15:45, 2025-06-23 23:45, 2025-06-24 07:45, 2025-06-24 15:45, 2025-06-24 23:45, 2025-06-25 07:45, 2025-06-25 15:45, 2025-06-25 23:45, 2025-06-26 07:45, 2025-06-26 15:45, 2025-06-26 23:45, 2025-06-27 07:45, 2025-06-27 15:45, 2025-06-27 23:45, 2025-06-28 07:45, 2025-06-28 15:45, 2025-06-28 23:45, 2025-06-29 07:45, 2025-06-29 15:45, 2025-06-29 23:45, 2025-06-30 07:45, 2025-06-30 15:45, 2025-06-30 23:45, 2025-07-01 07:45, 2025-07-01 15:45, 2025-07-01 23:45, 2025-07-02 07:45, 2025-07-02 15:45, 2025-07-02 23:45, 2025-07-03 07:45, 2025-07-03 15:45
UCEPROTECT L1
59.82.0.52 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-22 07:45:00.736000
Was present on blacklist at: 2025-06-15 15:45, 2025-06-15 23:45, 2025-06-16 07:45, 2025-06-16 15:45, 2025-06-16 23:45, 2025-06-17 07:45, 2025-06-17 15:45, 2025-06-17 23:45, 2025-06-18 07:45, 2025-06-18 15:45, 2025-06-18 23:45, 2025-06-19 07:45, 2025-06-19 15:45, 2025-06-19 23:45, 2025-06-20 07:45, 2025-06-20 15:45, 2025-06-20 23:45, 2025-06-21 07:45, 2025-06-21 15:45, 2025-06-21 23:45, 2025-06-22 07:45

Origin AS: AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix: 59.82.0.0/22
geo: China; 🕑 Asia/Shanghai
hostname: out0-52.static.mail.aliyun.com
hostname_class: ['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database): 59.82.0.0 - 59.83.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 11, 17, 19, 22, 26, 43, 49, 53, 70, 89, 97, 100, 102, 104, 111, 121, 143, 195, 221, 263, 264, 311, 343, 427, 444, 449, 462, 465, 491, 502, 515, 548, 554, 602, 632, 646, 689, 771, 772, 789, 801, 811, 832, 873, 886, 992, 995, 1000, 1023, 1025, 1026, 1080, 1099, 1153, 1177, 1195, 1200, 1234, 1344, 1433, 1515, 1521, 1599, 1723, 1800, 1801, 1950, 1954, 1959, 1962, 1965, 1969, 1978, 2003, 2006, 2008, 2062, 2067, 2068, 2081, 2087, 2090, 2100, 2109, 2111, 2121, 2130, 2154, 2181, 2222, 2248, 2323, 2344, 2352, 2404, 2455, 2506, 2551, 2560, 2567, 2570, 2806, 3001, 3022, 3048, 3050, 3053, 3062, 3069, 3083, 3084, 3085, 3090, 3104, 3105, 3127, 3145, 3163, 3169, 3175, 3184, 3196, 3269, 3299, 3306, 3341, 3388, 3389, 3410, 3521, 3551, 3569, 3780, 3922, 3950, 4063, 4150, 4157, 4200, 4282, 4321, 4343, 4344, 4369, 4438, 4443, 4506, 4602, 4643, 4786, 4899, 4949, 5001, 5006, 5009, 5011, 5025, 5226, 5249, 5253, 5266, 5274, 5280, 5440, 5443, 5454, 5567, 5569, 5672, 5858, 5938, 5984, 5986, 5988, 6000, 6002, 6022, 6081, 6102, 6433, 6440, 6510, 6543, 6561, 6622, 6666, 6697, 6775, 7000, 7001, 7011, 7021, 7171, 7218, 7373, 7415, 7434, 7443, 7548, 7778, 7887, 8009, 8056, 8073, 8079, 8081, 8087, 8093, 8099, 8102, 8105, 8126, 8139, 8140, 8142, 8154, 8164, 8165, 8173, 8198, 8238, 8243, 8280, 8284, 8291, 8333, 8403, 8419, 8422, 8429, 8431, 8454, 8500, 8505, 8510, 8567, 8579, 8582, 8649, 8663, 8771, 8779, 8791, 8814, 8839, 8853, 8858, 8865, 8876, 8878, 8880, 8889, 8901, 8905, 9001, 9002, 9029, 9043, 9049, 9051, 9056, 9079, 9084, 9093, 9095, 9100, 9124, 9130, 9135, 9137, 9140, 9149, 9151, 9152, 9158, 9162, 9165, 9169, 9176, 9192, 9199, 9200, 9203, 9216, 9257, 9299, 9306, 9312, 9333, 9351, 9418, 9441, 9515, 9530, 9600, 9633, 9663, 9898, 9900, 9926, 9929, 9966, 9994, 9998, 10000, 10001, 10027, 10041, 10042, 10084, 10093, 10134, 10443, 10810, 10909, 10911, 10934, 11007, 11027, 11112, 11211, 11288, 11300, 12103, 12123, 12125, 12129, 12145, 12154, 12166, 12209, 12228, 12232, 12233, 12242, 12247, 12252, 12267, 12292, 12298, 12312, 12334, 12339, 12345, 12362, 12370, 12416, 12439, 12444, 12445, 12465, 12482, 12490, 12495, 12496, 12497, 12504, 12520, 12525, 12528, 12535, 12539, 12541, 12545, 12557, 12559, 12563, 12565, 12576, 14101, 14147, 14265, 14344, 14406, 14523, 14875, 14897, 14901, 14905, 15018, 15503, 15831, 16000, 16001, 16003, 16015, 16036, 16071, 16076, 16083, 16103, 17001, 17775, 17778, 18010, 18015, 18030, 18050, 18054, 18056, 18057, 18058, 18061, 18066, 18068, 18081, 18097, 18104, 18245, 18368, 19000, 20000, 20018, 20030, 20080, 20090, 20208, 20256, 20500, 20880, 21025, 21234, 21235, 21238, 21248, 21271, 21292, 21294, 21302, 21312, 21379, 21935, 22222, 23023, 25001, 25002, 25007, 25565, 27017, 29840, 29984, 30000, 30002, 30003, 30468, 31210, 32001, 32444, 32764, 33060, 35000, 35100, 35101, 35531, 37777, 42420, 44100, 44158, 44301, 44818, 45821, 47984, 49502, 50000, 50007, 50042, 50805, 50995, 50998, 52200, 54138, 55000, 55443, 55475, 55490, 55553, 55554, 57779, 61613, 61616, 62078, 62080, 62443, 63210, 63260, 65000, 65432; Tags: honeypot, proxy; CPEs: cpe:/a:openbsd:openssh:X.X, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:realvnc:realvnc:::enterprise, cpe:/o:canonical:ubuntu_linux, cpe:/a:eset:nod32_antivirus:99, cpe:/a:openbsd:openssh, cpe:/a:mysql:mysql, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:7.2p2, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.9, cpe:/a:apache:subversion, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:5.3
ts_added: 2025-06-15 15:48:35.463000
ts_last_update: 2025-07-03 15:49:30.165000

Warden event timeline

DShield event timeline

Presence on blacklists