IP address

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
185.212.128.229 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-04 23:45:01.191000
Was present on blacklist at: 2026-03-25 08:45, 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45, 2026-04-01 15:45, 2026-04-01 23:45, 2026-04-02 07:45, 2026-04-02 15:45, 2026-04-02 23:45, 2026-04-03 07:45, 2026-04-03 15:45, 2026-04-03 23:45, 2026-04-04 07:45, 2026-04-04 15:45, 2026-04-04 23:45
Spamhaus SBL CSS
185.212.128.229 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-01 08:55:51.853000
Was present on blacklist at: 2026-03-25 08:55, 2026-04-01 08:55

TL	Role	Category	Details
44	src	—

Origin AS: AS57043 - HOSTKEY-AS; AS200313 - internet-it
BGP Prefix: 185.212.128.0/23
geo: British Virgin Islands; 🕑 America/Tortola
hostname: hguy.intro.com
Address block ('inetnum' or 'NetRange' in whois database): 185.212.128.0 - 185.212.131.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 143, 389, 443, 465, 587, 993, 995, 11211; Tags: starttls, self-signed; CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:postfix:postfix, cpe:/a:f5:nginx, cpe:/a:apache:http_server:2.4.41
ts_added: 2026-03-25 08:55:45.549000
ts_last_update: 2026-04-05 00:02:36.758000

Warden event timeline

DShield event timeline

Presence on blacklists