IP address

Shodan(more info)

Passive DNS

Tags: IP in hostname Static IP

IP blacklists: UCEPROTECT L1
96.70.52.227 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-09-29 23:45:00.778000
Was present on blacklist at: 2024-09-27 15:45, 2024-09-27 23:45, 2024-09-28 07:45, 2024-09-28 15:45, 2024-09-28 23:45, 2024-09-29 07:45, 2024-09-29 15:45, 2024-09-29 23:45
Spamhaus SBL CSS
96.70.52.227 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-09-27 16:08:05.761000
Was present on blacklist at: 2024-09-27 16:08
Spamhaus XBL CBL
96.70.52.227 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-09-27 16:08:05.761000
Was present on blacklist at: 2024-09-27 16:08
SpamCop
96.70.52.227 is listed on the SpamCop blacklist.

Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-09-27 16:08:05.761000
Was present on blacklist at: 2024-09-27 16:08
FireHOL anonymizers
96.70.52.227 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2024-09-29 12:08:17
Was present on blacklist at: 2024-09-27 12:09, 2024-09-28 12:10, 2024-09-29 12:08

Origin AS: AS7922 - COMCAST-7922
BGP Prefix: 96.64.0.0/11
geo: United States, Chicago; 🕑 America/Chicago
hostname: 96-70-52-227-static.hfc.comcastbusiness.net
hostname_class: ['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database): 96.64.0.0 - 96.95.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 53, 1701, 1723, 2000; Tags: vpn; CPEs: –
ts_added: 2024-09-27 16:08:05.481000
ts_last_update: 2024-09-30 00:03:33.292000

Warden event timeline

DShield event timeline

Presence on blacklists