IP address

Search at other sites:

.00193.152.221.227

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL

93.152.221.227 was recently listed on the Spamhaus SBL blacklist, but currently it is not.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-30 07:35:52.303000
Was present on blacklist at: 2026-09-04 07:35, 2026-09-11 07:35, 2026-09-18 07:35, 2026-09-25 07:35, 2026-10-02 07:35, 2026-10-09 07:35, 2026-10-16 07:35, 2026-10-23 07:35, 2026-10-30 07:35

Spamhaus DROP

93.152.221.227 was recently listed on the Spamhaus DROP blacklist, but currently it is not.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-30 07:35:52.303000
Was present on blacklist at: 2026-09-04 07:35, 2026-09-11 07:35, 2026-09-18 07:35, 2026-09-25 07:35, 2026-10-02 07:35, 2026-10-09 07:35, 2026-10-16 07:35, 2026-10-23 07:35, 2026-10-30 07:35

SpamCop

93.152.221.227 was recently listed on the SpamCop blacklist, but currently it is not.

Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-30 07:35:52.303000
Was present on blacklist at: 2026-10-09 07:35, 2026-10-23 07:35

UCEPROTECT L1

93.152.221.227 was recently listed on the UCEPROTECT L1 blacklist, but currently it is not.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-21 23:45:00.665000
Was present on blacklist at: 2026-10-15 07:45, 2026-10-15 15:45, 2026-10-15 23:45, 2026-10-16 07:45, 2026-10-16 15:45, 2026-10-16 23:45, 2026-10-17 07:45, 2026-10-17 23:45, 2026-10-18 07:45, 2026-10-18 15:45, 2026-10-18 23:45, 2026-10-19 07:45, 2026-10-19 15:45, 2026-10-19 23:45, 2026-10-20 07:45, 2026-10-20 23:45, 2026-10-21 07:45, 2026-10-21 15:45, 2026-10-21 23:45

Threat categories

TL	Role	Category	Details
44	src	—
25	src	login	protocol: smtp port: 25

---

Warden events (6)

2026-10-24

IntrusionUserCompromise (node.cfb4f7): 1

2026-10-17

IntrusionUserCompromise (node.cfb4f7): 2

2026-10-16

IntrusionUserCompromise (node.cfb4f7): 2

2026-10-03

IntrusionUserCompromise (node.cfb4f7): 1

MISP events

[7407] 2026-08-26 00:00:00 | ThreatFox IOCs for 2026-08-26

Reporting org.:	abuse.ch
TLP:	clear
Tags:	type:OSINT
Sightings:	positive: 0 | false positive: 0 | expired attribute: 0
Last change:	2026-08-27 00:03:07
Threat level:	Medium
Role of this IP:	dst

Origin AS

AS197170 - TECHTIES-AS

BGP Prefix

93.152.221.0/24

geo

Germany, Frankfurt am Main

🕑 Europe/Berlin

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

93.152.208.0 - 93.152.223.255

last_activity

2026-10-24 21:02:25

last_warden_event

2026-10-24 21:02:25

rep

0.0007472069585939822

reserved_range

0

Shodan's InternetDB

Open ports: 3389, 5986

Tags: self-signed

CPEs: –

ts_added

2026-08-28 07:35:47.312000

ts_last_update

2026-11-03 07:35:51.506000

Warden event timeline

DShield event timeline

Presence on blacklists