IP address
Shodan(more info)

Passive DNS

Tags:
- IP blacklists
- UCEPROTECT L191.92.41.58 is listed on the UCEPROTECT L1 blacklist.Spamhaus SBL
Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)
Last checked at: 2026-04-02 07:45:01.538000
Was present on blacklist at: 2026-02-25 08:45, 2026-02-26 00:45, 2026-02-27 08:45, 2026-02-27 16:45, 2026-02-28 08:45, 2026-03-01 16:45, 2026-03-02 08:45, 2026-03-02 16:45, 2026-03-03 00:45, 2026-03-03 08:45, 2026-03-03 16:45, 2026-03-04 00:45, 2026-03-04 08:45, 2026-03-04 16:45, 2026-03-05 00:45, 2026-03-05 08:45, 2026-03-05 16:45, 2026-03-06 00:45, 2026-03-06 08:45, 2026-03-09 08:45, 2026-03-09 16:45, 2026-03-10 00:45, 2026-03-10 08:45, 2026-03-10 16:45, 2026-03-11 00:45, 2026-03-11 08:45, 2026-03-11 16:45, 2026-03-12 00:45, 2026-03-12 08:45, 2026-03-12 16:45, 2026-03-13 00:45, 2026-03-13 08:45, 2026-03-13 16:45, 2026-03-14 00:45, 2026-03-14 08:45, 2026-03-14 16:45, 2026-03-15 00:45, 2026-03-15 08:45, 2026-03-15 16:45, 2026-03-16 00:45, 2026-03-16 08:45, 2026-03-16 16:45, 2026-03-17 00:45, 2026-03-17 08:45, 2026-03-17 16:45, 2026-03-18 00:45, 2026-03-18 08:45, 2026-03-18 16:45, 2026-03-19 00:45, 2026-03-19 08:45, 2026-03-19 16:45, 2026-03-20 00:45, 2026-03-20 08:45, 2026-03-20 16:45, 2026-03-21 00:45, 2026-03-21 08:45, 2026-03-21 16:45, 2026-03-22 00:45, 2026-03-22 08:45, 2026-03-22 16:45, 2026-03-23 00:45, 2026-03-23 08:45, 2026-03-23 16:45, 2026-03-24 00:45, 2026-03-24 08:45, 2026-03-24 16:45, 2026-03-25 00:45, 2026-03-25 08:45, 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45, 2026-04-01 15:45, 2026-04-01 23:45, 2026-04-02 07:4591.92.41.58 is listed on the Spamhaus SBL blacklist.Spamhaus SBL CSS
Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-04-01 08:59:10.701000
Was present on blacklist at: 2026-02-25 08:59, 2026-03-04 08:59, 2026-03-11 08:59, 2026-03-18 08:59, 2026-03-25 08:59, 2026-04-01 08:5991.92.41.58 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.PSBL
Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-04-01 08:59:10.701000
Was present on blacklist at: 2026-02-25 08:59, 2026-03-04 08:59, 2026-03-11 08:59, 2026-03-18 08:59, 2026-03-25 08:5991.92.41.58 is listed on the PSBL blacklist.SpamCop
Description: The Passive Spam Block List uses the Spamikaze software to detect spam IPs.
Type of feed: primary (feed detail page)
Last checked at: 2026-04-02 07:45:00.205000
Was present on blacklist at: 2026-03-09 08:45, 2026-03-09 16:45, 2026-03-10 00:45, 2026-03-10 08:45, 2026-03-10 16:45, 2026-03-11 00:45, 2026-03-11 08:45, 2026-03-11 16:45, 2026-03-12 00:45, 2026-03-12 08:45, 2026-03-12 16:45, 2026-03-13 00:45, 2026-03-13 08:45, 2026-03-13 16:45, 2026-03-14 00:45, 2026-03-14 08:45, 2026-03-14 16:45, 2026-03-15 00:45, 2026-03-15 08:45, 2026-03-15 16:45, 2026-03-16 00:45, 2026-03-16 08:45, 2026-03-16 16:45, 2026-03-17 00:45, 2026-03-17 08:45, 2026-03-17 16:45, 2026-03-18 00:45, 2026-03-18 08:45, 2026-03-18 16:45, 2026-03-19 00:45, 2026-03-19 08:45, 2026-03-19 16:45, 2026-03-20 00:45, 2026-03-20 08:45, 2026-03-20 16:45, 2026-03-21 00:45, 2026-03-21 08:45, 2026-03-21 16:45, 2026-03-22 00:45, 2026-03-22 08:45, 2026-03-22 16:45, 2026-03-23 00:45, 2026-03-23 08:45, 2026-03-23 16:45, 2026-03-24 00:45, 2026-03-24 08:45, 2026-03-24 16:45, 2026-03-25 00:45, 2026-03-25 08:45, 2026-03-25 16:45, 2026-03-26 00:45, 2026-03-26 08:45, 2026-03-26 16:45, 2026-03-27 00:45, 2026-03-27 08:45, 2026-03-27 16:45, 2026-03-28 00:45, 2026-03-28 08:45, 2026-03-28 16:45, 2026-03-29 00:45, 2026-03-29 07:45, 2026-03-29 15:45, 2026-03-29 23:45, 2026-03-30 07:45, 2026-03-30 15:45, 2026-03-30 23:45, 2026-03-31 07:45, 2026-03-31 15:45, 2026-03-31 23:45, 2026-04-01 07:45, 2026-04-01 15:45, 2026-04-01 23:45, 2026-04-02 07:4591.92.41.58 was recently listed on the SpamCop blacklist, but currently it is not.
Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-04-01 08:59:10.701000
Was present on blacklist at: 2026-03-18 08:59, 2026-03-25 08:59
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 42 | src | — | |
| 42 | src | spam |
- Origin AS
- AS211443 - SINOWORLDWIDE
- BGP Prefix
- 91.92.41.0/24
- geo
- Bulgaria
- 🕑 Europe/Sofia
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 91.92.40.0 - 91.92.47.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 21, 22, 443
- Tags: self-signed, starttls
- CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx, cpe:/o:canonical:ubuntu_linux, cpe:/a:pureftpd:pure-ftpd
- ts_added
- 2026-02-25 08:59:00.769000
- ts_last_update
- 2026-04-02 08:59:11.029000
Warden event timeline
DShield event timeline
Presence on blacklists

