IP address


.05391.108.254.220
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
91.108.254.220 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-06-18 02:50:00.816000
Was present on blacklist at: 2026-06-18 02:50

Threat categories

TLRoleCategoryDetails
50 src scan port: 2323
25 src

Warden events (40)
2026-06-17
ReconScanning (node.ce2b59): 14
ReconScanning (node.9c1411): 12
2026-06-16
ReconScanning (node.9c1411): 5
ReconScanning (node.ce2b59): 9
Origin AS
AS26383 - ASNET
BGP Prefix
91.108.254.0/24
geo
United Kingdom, London
🕑 Europe/London
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
91.108.192.0 - 91.108.255.255
last_activity
2026-06-17 12:47:23
last_warden_event
2026-06-17 12:47:23
rep
0.052514229037304294
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags:
CPEs: cpe:/o:linux:linux_kernel, cpe:/o:debian:debian_linux, cpe:/a:openbsd:openssh:9.2p1
ts_added
2026-06-16 15:25:54.773000
ts_last_update
2026-06-23 15:26:00.820000

Warden event timeline

DShield event timeline

Presence on blacklists