IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
211.41.79.16 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-07 07:45:01.332000
Was present on blacklist at: 2026-03-13 16:45, 2026-03-14 00:45, 2026-03-14 08:45, 2026-03-14 16:45, 2026-03-15 00:45, 2026-03-15 08:45, 2026-03-15 16:45, 2026-03-16 00:45, 2026-03-16 08:45, 2026-03-16 16:45, 2026-03-17 00:45, 2026-03-17 08:45, 2026-03-17 16:45, 2026-03-18 00:45, 2026-03-18 08:45, 2026-03-18 16:45, 2026-03-19 00:45, 2026-03-19 08:45, 2026-03-19 16:45, 2026-03-20 00:45, 2026-03-20 08:45, 2026-03-20 16:45, 2026-03-21 00:45, 2026-03-21 08:45, 2026-03-21 16:45, 2026-03-22 00:45, 2026-03-22 08:45, 2026-03-22 16:45, 2026-03-23 00:45, 2026-03-23 08:45, 2026-03-23 16:45, 2026-03-24 00:45, 2026-03-24 08:45, 2026-03-24 16:45, 2026-03-25 00:45, 2026-03-25 08:45, 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45, 2026-04-01 15:45, 2026-04-01 23:45, 2026-04-02 07:45, 2026-04-02 15:45, 2026-04-02 23:45, 2026-04-03 07:45, 2026-04-03 15:45, 2026-04-03 23:45, 2026-04-04 07:45, 2026-04-04 15:45, 2026-04-04 23:45, 2026-04-05 07:45, 2026-04-05 15:45, 2026-04-05 23:45, 2026-04-06 07:45, 2026-04-06 15:45, 2026-04-06 23:45, 2026-04-07 07:45
Spamhaus SBL CSS
211.41.79.16 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-03 17:01:10.820000
Was present on blacklist at: 2026-03-13 17:01, 2026-03-20 17:01, 2026-03-27 17:01, 2026-04-03 17:01
SpamCop
211.41.79.16 is listed on the SpamCop blacklist.

Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-03 17:01:10.820000
Was present on blacklist at: 2026-03-20 17:01, 2026-03-27 17:01, 2026-04-03 17:01

TL	Role	Category	Details
41	src	—

Origin AS: AS4766 - KIXS-AS-KR KIXS-AS-KR-KR
BGP Prefix: 211.41.64.0/19
geo: South Korea; 🕑 Asia/Seoul
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 211.41.64.0 - 211.41.95.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 25, 80, 110, 443, 446, 587, 3306, 40471, 40892, 40894, 41800, 42208, 42424, 42901, 44100, 44158, 44301, 44303, 44307, 44308, 44310, 44320, 44337, 44350, 44365, 44500, 44510, 44818, 45001, 45002, 45005, 45555, 45666, 45667, 45677, 45777, 45786, 45788, 45821, 45886, 46000, 46001, 46443, 47000, 47080, 47534, 48000, 48001, 48002, 48012, 48013, 48018, 48019, 49080, 49152, 49153, 49200, 49210, 49443, 49502, 49682, 49684, 49688, 49694, 49767, 50000, 50001, 50002, 50003, 50007, 50008, 50010, 50012, 50042, 50050, 50070, 50080, 50102, 50103, 50107, 50202, 50257, 50500, 50995, 50997, 50998, 51000, 51003, 51005, 51106, 51201, 51235, 51434, 52010, 52200, 52311, 52536, 52869, 53400, 53480, 53483, 53484, 53485, 53490, 53805, 53806, 54022, 54138, 54490, 54545, 55000, 55080, 55081, 55350, 55388, 55442, 55443, 55470, 55475, 55481, 55553, 57778, 57779, 57781, 57782, 57783, 57785, 57786, 58392, 59012; Tags: database; CPEs: cpe:/a:oracle:mysql, cpe:/a:apache:http_server, cpe:/a:openbsd:openssh:8.7, cpe:/a:f5:nginx
ts_added: 2026-03-13 17:01:02.360000
ts_last_update: 2026-04-07 08:09:26.286000

Warden event timeline

DShield event timeline

Presence on blacklists