IP address

Shodan(more info)

Passive DNS

Tags: IP in hostname

IP blacklists: UCEPROTECT L1
104.197.92.217 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-22 23:45:00.675000
Was present on blacklist at: 2025-06-04 23:45, 2025-06-05 07:45, 2025-06-05 15:45, 2025-06-05 23:45, 2025-06-06 07:45, 2025-06-06 15:45, 2025-06-06 23:45, 2025-06-07 07:45, 2025-06-07 15:45, 2025-06-07 23:45, 2025-06-08 07:45, 2025-06-08 15:45, 2025-06-08 23:45, 2025-06-09 07:45, 2025-06-09 15:45, 2025-06-09 23:45, 2025-06-10 07:45, 2025-06-10 15:45, 2025-06-10 23:45, 2025-06-11 07:45, 2025-06-11 15:45, 2025-06-11 23:45, 2025-06-12 07:45, 2025-06-12 15:45, 2025-06-12 23:45, 2025-06-13 07:45, 2025-06-13 15:45, 2025-06-13 23:45, 2025-06-14 07:45, 2025-06-14 15:45, 2025-06-14 23:45, 2025-06-15 07:45, 2025-06-15 15:45, 2025-06-16 23:45, 2025-06-17 07:45, 2025-06-17 15:45, 2025-06-17 23:45, 2025-06-18 07:45, 2025-06-18 15:45, 2025-06-18 23:45, 2025-06-19 07:45, 2025-06-19 15:45, 2025-06-19 23:45, 2025-06-20 07:45, 2025-06-20 15:45, 2025-06-20 23:45, 2025-06-21 07:45, 2025-06-21 15:45, 2025-06-21 23:45, 2025-06-22 07:45, 2025-06-22 15:45, 2025-06-22 23:45
Spamhaus SBL CSS
104.197.92.217 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-06-18 23:45:40.512000
Was present on blacklist at: 2025-06-04 23:45, 2025-06-11 23:45, 2025-06-18 23:45

Origin AS: AS396982 - GOOGLE-PRIVATE-CLOUD
BGP Prefix: 104.197.80.0/20
geo: United States, Council Bluffs; 🕑 America/Chicago
hostname: 217.92.197.104.bc.googleusercontent.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 104.196.0.0 - 104.199.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 25, 80, 443, 1988; Tags: self-signed, cloud, eol-product, starttls; CPEs: cpe:/a:f5:nginx:1.6.2, cpe:/a:openbsd:openssh:6.7p1, cpe:/o:debian:debian_linux, cpe:/a:postfix:postfix, cpe:/o:linux:linux_kernel, cpe:/a:jquery:jquery:3.6.0
ts_added: 2025-06-04 23:45:36.646000
ts_last_update: 2025-06-22 23:46:22.708000

Warden event timeline

DShield event timeline

Presence on blacklists