IP address
Search at other sites: 
.40581.17.28.95hostedby.privatelayer.com
Shodan(more info)
Passive DNS
Tags:
- IP blacklists
- Spamhaus SBL CSS81.17.28.95 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.Spamhaus XBL CBL
Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-09-26 22:04:50.513000
Was present on blacklist at: 2026-08-22 22:04, 2026-09-05 22:0481.17.28.95 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.TorProject
Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-09-26 22:04:50.513000
Was present on blacklist at: 2026-08-22 22:04, 2026-08-29 22:04, 2026-09-05 22:04, 2026-09-12 22:04, 2026-09-19 22:04, 2026-09-26 22:0481.17.28.95 is listed on the TorProject blacklist.FireHOL anonymizers
Description: TorProject.org list of all current TOR exit points (TorDNSEL)
Type of feed: secondary (feed detail page)
Last checked at: 2026-10-01 20:10:00
Was present on blacklist at: 2026-08-22 20:10, 2026-08-23 20:10, 2026-08-24 20:10, 2026-08-25 20:10, 2026-08-26 20:10, 2026-08-27 20:10, 2026-08-28 20:10, 2026-08-29 20:10, 2026-08-30 20:10, 2026-08-31 20:10, 2026-09-01 20:10, 2026-09-02 20:10, 2026-09-03 20:10, 2026-09-04 20:10, 2026-09-05 20:10, 2026-09-07 16:10, 2026-09-08 00:10, 2026-09-08 20:10, 2026-09-09 20:10, 2026-09-10 20:10, 2026-09-11 20:10, 2026-09-12 20:10, 2026-09-13 20:10, 2026-09-14 20:10, 2026-09-15 20:10, 2026-09-16 20:10, 2026-09-17 20:10, 2026-09-18 20:10, 2026-09-19 20:10, 2026-09-20 20:10, 2026-09-21 20:10, 2026-09-22 20:10, 2026-09-23 20:10, 2026-09-24 20:10, 2026-09-25 20:10, 2026-09-26 20:10, 2026-09-27 20:10, 2026-09-28 20:10, 2026-09-29 20:10, 2026-09-30 20:10, 2026-10-01 20:1081.17.28.95 is listed on the FireHOL anonymizers blacklist.dan.me.uk TOR Nodes
Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)
Last checked at: 2026-10-01 18:05:18
Was present on blacklist at: 2026-08-22 18:05, 2026-08-23 18:05, 2026-08-24 18:05, 2026-08-25 18:05, 2026-08-26 18:05, 2026-08-27 18:05, 2026-08-28 18:05, 2026-08-29 18:05, 2026-08-30 18:05, 2026-08-31 18:05, 2026-09-01 18:05, 2026-09-02 18:05, 2026-09-03 18:05, 2026-09-04 18:05, 2026-09-05 18:05, 2026-09-07 18:05, 2026-09-08 00:05, 2026-09-08 18:05, 2026-09-09 18:05, 2026-09-10 18:05, 2026-09-11 18:05, 2026-09-12 18:05, 2026-09-13 18:05, 2026-09-14 18:05, 2026-09-15 18:05, 2026-09-16 18:05, 2026-09-17 18:05, 2026-09-18 18:05, 2026-09-19 18:05, 2026-09-20 18:05, 2026-09-21 18:05, 2026-09-22 18:05, 2026-09-23 18:05, 2026-09-24 18:05, 2026-09-25 18:05, 2026-09-26 18:05, 2026-09-27 18:05, 2026-09-28 18:05, 2026-09-29 18:05, 2026-09-30 18:05, 2026-10-01 18:0581.17.28.95 is listed on the dan.me.uk TOR Nodes blacklist.SpamCop
Description: List of TOR node IPs by dan.me.uk.
Type of feed: secondary (feed detail page)
Last checked at: 2026-10-01 20:10:00
Was present on blacklist at: 2026-08-22 20:10, 2026-08-23 20:10, 2026-08-24 20:10, 2026-08-25 20:10, 2026-08-26 20:10, 2026-08-27 20:10, 2026-08-28 20:10, 2026-08-29 20:10, 2026-08-30 20:10, 2026-08-31 20:10, 2026-09-01 20:10, 2026-09-02 20:10, 2026-09-03 20:10, 2026-09-04 20:10, 2026-09-05 20:10, 2026-09-07 16:10, 2026-09-08 00:10, 2026-09-08 20:10, 2026-09-09 20:10, 2026-09-10 20:10, 2026-09-11 20:10, 2026-09-12 20:10, 2026-09-13 20:10, 2026-09-14 20:10, 2026-09-15 20:10, 2026-09-16 20:10, 2026-09-17 20:10, 2026-09-18 20:10, 2026-09-19 20:10, 2026-09-20 20:10, 2026-09-21 20:10, 2026-09-22 20:10, 2026-09-23 20:10, 2026-09-24 20:10, 2026-09-25 20:10, 2026-09-26 20:10, 2026-09-27 20:10, 2026-09-28 20:10, 2026-09-29 20:10, 2026-09-30 20:10, 2026-10-01 20:1081.17.28.95 was recently listed on the SpamCop blacklist, but currently it is not.blocklist.de web-login
Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-09-26 22:04:50.513000
Was present on blacklist at: 2026-08-29 22:0481.17.28.95 was recently listed on the blocklist.de web-login blacklist, but currently it is not.blocklist.de Apache
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)
Last checked at: 2026-09-19 16:05:00.127000
Was present on blacklist at: 2026-09-17 22:05, 2026-09-18 04:05, 2026-09-18 10:05, 2026-09-18 16:05, 2026-09-18 22:05, 2026-09-19 04:05, 2026-09-19 10:05, 2026-09-19 16:0581.17.28.95 was recently listed on the blocklist.de Apache blacklist, but currently it is not.
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)
Last checked at: 2026-09-19 16:05:00.363000
Was present on blacklist at: 2026-09-17 22:05, 2026-09-18 04:05, 2026-09-18 10:05, 2026-09-18 16:05, 2026-09-18 22:05, 2026-09-19 04:05, 2026-09-19 10:05, 2026-09-19 16:05 - Warden events (1)
- 2026-08-22
-
- ReconScanning (node.9c1411): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 45 | src | — | |
| 45 | src | login |
- Origin AS
- AS51852 - PLI-AS
- BGP Prefix
- 81.17.16.0/20
- geo
- Switzerland, Zurich
- 🕑 Europe/Zurich
- hostname
- hostedby.privatelayer.com
- Address block ('inetnum' or 'NetRange' in whois database)
- 81.17.16.0 - 81.17.31.255
- last_activity
- 2026-08-22 21:48:53
- last_warden_event
- 2026-08-22 21:48:53
- rep
- 0.4053964424986395
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 9001
- Tags: tor
- CPEs: –
- ts_added
- 2026-08-22 22:04:41.057000
- ts_last_update
- 2026-10-01 22:04:50.102000
Warden event timeline
DShield event timeline
Presence on blacklists