IP address

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
38.107.215.41 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-30 23:45:00.545000
Was present on blacklist at: 2025-04-21 15:45, 2025-04-21 23:45, 2025-04-22 07:45, 2025-04-22 15:45, 2025-04-22 23:45, 2025-04-23 07:45, 2025-04-23 15:45, 2025-04-23 23:45, 2025-04-24 07:45, 2025-04-24 15:45, 2025-04-24 23:45, 2025-04-25 07:45, 2025-04-25 15:45, 2025-04-25 23:45, 2025-04-26 07:45, 2025-04-26 15:45, 2025-04-26 23:45, 2025-04-27 07:45, 2025-04-27 15:45, 2025-04-27 23:45, 2025-04-28 07:45, 2025-04-28 15:45, 2025-04-28 23:45, 2025-04-29 07:45, 2025-04-29 15:45, 2025-04-29 23:45, 2025-04-30 07:45, 2025-04-30 15:45, 2025-04-30 23:45
Spamhaus SBL CSS
38.107.215.41 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-28 16:00:10.827000
Was present on blacklist at: 2025-04-21 16:00, 2025-04-28 16:00

Origin AS: AS973 - REVIVE-IT-NETWORK
BGP Prefix: 38.107.215.0/24
geo: United States, Dallas; 🕑 America/Chicago
hostname: mail.mirapetrol.com
Address block ('inetnum' or 'NetRange' in whois database): 38.0.0.0 - 38.255.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 25, 53, 80, 110, 135, 139, 443, 445, 465, 993, 995, 3306, 3389, 5357, 5432, 5985, 8443, 8880, 47001; Tags: starttls, database, self-signed; CPEs: cpe:/a:microsoft:internet_information_services, cpe:/a:microsoft:internet_information_services:10.0, cpe:/a:postgresql:postgresql, cpe:/a:mariadb:mariadb, cpe:/o:microsoft:windows, cpe:/a:parallels:parallels_plesk_panel, cpe:/a:prototypejs:prototype
ts_added: 2025-04-21 16:00:00.531000
ts_last_update: 2025-05-01 16:00:12.738000

Warden event timeline

DShield event timeline

Presence on blacklists