IP address

Passive DNS

Tags: IP in hostname

IP blacklists: UCEPROTECT L1
192.176.117.225 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-04-06 23:45:01.255000
Was present on blacklist at: 2026-04-02 07:45, 2026-04-02 15:45, 2026-04-02 23:45, 2026-04-03 07:45, 2026-04-03 15:45, 2026-04-03 23:45, 2026-04-04 07:45, 2026-04-04 15:45, 2026-04-04 23:45, 2026-04-05 07:45, 2026-04-05 15:45, 2026-04-05 23:45, 2026-04-06 07:45, 2026-04-06 15:45, 2026-04-06 23:45
Spamhaus SBL CSS
192.176.117.225 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-02 08:07:37.666000
Was present on blacklist at: 2026-04-02 08:07

TL	Role	Category	Details
44	src	—

Origin AS: AS197623 - Kopings-Kabel-TV
BGP Prefix: 192.176.116.0/22
geo: Sweden, Köping; 🕑 Europe/Stockholm
hostname: ip225.net-192-176-117.koping.net
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 192.176.0.0 - 192.176.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 22, 80, 443, 1723, 3000, 5000, 12000, 16001; Tags: vpn, self-signed; CPEs: cpe:/a:f5:nginx, cpe:/o:linux:linux_kernel
ts_added: 2026-04-02 08:07:36.398000
ts_last_update: 2026-04-07 00:06:40.760000

Warden event timeline

DShield event timeline

Presence on blacklists