IP address

Search at other sites:

--185.91.54.249

Shodan(more info)

Passive DNS

IP blacklists

UCEPROTECT L1

185.91.54.249 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-07-12 23:45:00.811000
Was present on blacklist at: 2025-07-06 07:45, 2025-07-06 15:45, 2025-07-06 23:45, 2025-07-07 07:45, 2025-07-07 15:45, 2025-07-07 23:45, 2025-07-08 07:45, 2025-07-08 15:45, 2025-07-08 23:45, 2025-07-09 07:45, 2025-07-09 15:45, 2025-07-09 23:45, 2025-07-10 07:45, 2025-07-10 15:45, 2025-07-10 23:45, 2025-07-11 07:45, 2025-07-11 15:45, 2025-07-11 23:45, 2025-07-12 07:45, 2025-07-12 15:45, 2025-07-12 23:45

Spamhaus SBL CSS

185.91.54.249 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-07-13 07:56:51.076000
Was present on blacklist at: 2025-07-06 07:56

Origin AS

AS49505 - SELECTEL

BGP Prefix

185.91.52.0/22

geo

Russia, St Petersburg

🕑 Europe/Moscow

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

185.91.52.0 - 185.91.55.255

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443

Tags: eol-product, self-signed

CPEs: cpe:/a:php:php:7.1.33, cpe:/a:openbsd:openssh:7.4, cpe:/a:f5:nginx:1.16.1

ts_added

2025-07-06 07:56:44.705000

ts_last_update

2025-07-13 07:56:51.351000

Warden event timeline

DShield event timeline

Presence on blacklists