IP address

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
198.38.84.109 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-06-20 15:45:00.728000
Was present on blacklist at: 2025-06-14 23:45, 2025-06-15 07:45, 2025-06-15 15:45, 2025-06-15 23:45, 2025-06-16 07:45, 2025-06-16 15:45, 2025-06-16 23:45, 2025-06-17 07:45, 2025-06-17 15:45, 2025-06-17 23:45, 2025-06-18 07:45, 2025-06-18 15:45, 2025-06-18 23:45, 2025-06-19 07:45, 2025-06-19 15:45, 2025-06-19 23:45, 2025-06-20 07:45, 2025-06-20 15:45
Spamhaus SBL CSS
198.38.84.109 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-06-14 23:58:14.389000
Was present on blacklist at: 2025-06-14 23:58

Origin AS: AS199404 - WHG-IN
BGP Prefix: 198.38.84.0/24
geo: India, Mumbai; 🕑 Asia/Kolkata
hostname: 598103-rnawebsoft.securehostdns.com
Address block ('inetnum' or 'NetRange' in whois database): 198.38.80.0 - 198.38.95.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 25, 53, 80, 110, 135, 443, 445, 465, 993, 995, 3306, 5985, 8443, 8880; Tags: starttls, self-signed, database, eol-product; CPEs: cpe:/a:microsoft:internet_information_services:10.0, cpe:/a:parallels:parallels_plesk_panel, cpe:/a:prototypejs:prototype, cpe:/a:microsoft:internet_information_services, cpe:/a:jquery:jquery:2.2.4, cpe:/a:oracle:mysql:5.7.30, cpe:/a:getbootstrap:bootstrap, cpe:/o:microsoft:windows
ts_added: 2025-06-14 23:58:14.208000
ts_last_update: 2025-06-20 15:57:23.530000

Warden event timeline

DShield event timeline

Presence on blacklists