IP address


.00491.92.40.240
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL
91.92.40.240 was recently listed on the Spamhaus SBL blacklist, but currently it is not.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-28 05:04:10.027000
Was present on blacklist at: 2026-10-21 05:01, 2026-10-28 05:04
Spamhaus DROP
91.92.40.240 was recently listed on the Spamhaus DROP blacklist, but currently it is not.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-28 05:04:10.027000
Was present on blacklist at: 2026-10-21 05:01, 2026-10-28 05:04
Echelon web crawler
91.92.40.240 was recently listed on the Echelon web crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-10-31 10:50:00.689000
Was present on blacklist at: 2026-10-21 09:50, 2026-10-22 09:50, 2026-10-23 09:50, 2026-10-24 09:50, 2026-10-25 10:50, 2026-10-26 10:50, 2026-10-27 10:50, 2026-10-28 10:50, 2026-10-29 10:50, 2026-10-30 10:50, 2026-10-31 10:50
Echelon TLS/SSL crawler
91.92.40.240 was recently listed on the Echelon TLS/SSL crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-10-31 10:40:00.915000
Was present on blacklist at: 2026-10-25 10:40, 2026-10-26 10:40, 2026-10-27 10:40, 2026-10-28 10:40, 2026-10-29 10:40, 2026-10-30 10:40, 2026-10-31 10:40

Threat categories

TLRoleCategoryDetails
43 src scan port: 80, 443

Warden events (2)
2026-10-31
ReconScanning (node.ce2b59): 2
DShield reports (IP summary, reports)
2026-10-20
Number of reports: 243
Distinct targets: 28
2026-10-21
Number of reports: 183
Distinct targets: 98
2026-11-01
Number of reports: 149
Distinct targets: 18
Origin AS
AS209630 - KREDIT-AS
AS197170 - TECHTIES-AS
BGP Prefix
91.92.40.0/24
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
91.92.40.0 - 91.92.47.255
last_activity
2026-10-31 18:53:27
last_warden_event
2026-10-31 18:53:27
rep
0.004451733904185962
reserved_range
0
ts_added
2026-10-21 05:01:52.258000
ts_last_update
2026-11-03 05:03:23.514000

Warden event timeline

DShield event timeline

Presence on blacklists