IP address


.85095.214.55.71
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
95.214.55.71 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-12-26 03:50:01.028000
Was present on blacklist at: 2025-12-16 03:50, 2025-12-17 03:50, 2025-12-18 03:50, 2025-12-19 03:50, 2025-12-20 03:50, 2025-12-21 03:50, 2025-12-22 03:50, 2025-12-23 03:50, 2025-12-24 03:50, 2025-12-25 03:50, 2025-12-26 03:50
AbuseIPDB
95.214.55.71 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-12-27 05:00:00.709000
Was present on blacklist at: 2025-12-16 05:00, 2025-12-17 05:00, 2025-12-18 05:00, 2025-12-19 05:00, 2025-12-20 05:00, 2025-12-21 05:00, 2025-12-22 05:00, 2025-12-23 05:00, 2025-12-24 05:00, 2025-12-25 05:00, 2025-12-26 05:00, 2025-12-27 05:00
blocklist.de Apache
95.214.55.71 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-17 23:05:05.270000
Was present on blacklist at: 2025-12-16 05:05, 2025-12-16 11:05, 2025-12-16 17:05, 2025-12-16 23:05, 2025-12-17 05:05, 2025-12-17 11:05, 2025-12-17 17:05, 2025-12-17 23:05
Turris greylist
95.214.55.71 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-27 22:15:00.160000
Was present on blacklist at: 2025-12-17 22:15, 2025-12-18 22:15, 2025-12-19 22:15, 2025-12-20 22:15, 2025-12-21 22:15, 2025-12-22 22:15, 2025-12-23 22:15, 2025-12-24 22:15, 2025-12-25 22:15, 2025-12-26 22:15, 2025-12-27 22:15
DShield Block
95.214.55.71 was recently listed on the DShield Block blacklist, but currently it is not.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2025-12-26 04:50:00
Was present on blacklist at: 2025-12-21 04:50, 2025-12-22 04:50, 2025-12-24 04:50, 2025-12-25 04:50
Spamhaus XBL CBL
95.214.55.71 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-23 01:27:00.242000
Was present on blacklist at: 2025-12-23 01:27
DataPlane SIP query
95.214.55.71 is listed on the DataPlane SIP query blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SIP OPTIONS query to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-27 23:10:01.354000
Was present on blacklist at: 2025-12-27 23:10
Warden events (4237)
2025-12-27
AnomalyTraffic (node.ffe95c): 49
ReconScanning (node.4dc198): 156
ReconScanning (node.368407): 74
2025-12-26
ReconScanning (node.4dc198): 134
ReconScanning (node.368407): 67
AnomalyTraffic (node.ffe95c): 36
2025-12-25
AnomalyTraffic (node.ffe95c): 53
ReconScanning (node.4dc198): 212
ReconScanning (node.368407): 109
2025-12-24
ReconScanning (node.4dc198): 233
AnomalyTraffic (node.ffe95c): 51
ReconScanning (node.368407): 141
2025-12-23
AnomalyTraffic (node.ffe95c): 68
ReconScanning (node.368407): 109
ReconScanning (node.4dc198): 224
2025-12-22
ReconScanning (node.4dc198): 201
ReconScanning (node.368407): 93
AnomalyTraffic (node.ffe95c): 60
2025-12-21
ReconScanning (node.368407): 104
ReconScanning (node.4dc198): 218
AnomalyTraffic (node.ffe95c): 60
2025-12-20
ReconScanning (node.4dc198): 226
AnomalyTraffic (node.ffe95c): 64
ReconScanning (node.368407): 115
2025-12-19
ReconScanning (node.4dc198): 224
AnomalyTraffic (node.ffe95c): 68
ReconScanning (node.368407): 102
2025-12-18
AnomalyTraffic (node.ffe95c): 65
ReconScanning (node.4dc198): 211
ReconScanning (node.368407): 115
2025-12-17
ReconScanning (node.4dc198): 214
ReconScanning (node.368407): 98
AnomalyTraffic (node.ffe95c): 76
2025-12-16
AnomalyTraffic (node.ffe95c): 43
ReconScanning (node.4dc198): 131
ReconScanning (node.368407): 33
DShield reports (IP summary, reports)
2025-12-16
Number of reports: 2058
Distinct targets: 513
2025-12-17
Number of reports: 8958
Distinct targets: 2538
2025-12-18
Number of reports: 8958
Distinct targets: 2538
2025-12-19
Number of reports: 13626
Distinct targets: 2816
2025-12-20
Number of reports: 16358
Distinct targets: 3282
2025-12-21
Number of reports: 15460
Distinct targets: 3171
2025-12-22
Number of reports: 13152
Distinct targets: 2909
2025-12-23
Number of reports: 15099
Distinct targets: 3367
2025-12-24
Number of reports: 15099
Distinct targets: 3367
2025-12-25
Number of reports: 12975
Distinct targets: 3148
2025-12-26
Number of reports: 12975
Distinct targets: 3148
Origin AS
AS201814 - PL-SKYTECH-AS
BGP Prefix
95.214.54.0/23
geo
Poland
🕑 Europe/Warsaw
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
95.214.52.0 - 95.214.55.255
last_activity
2025-12-27 18:16:39
last_warden_event
2025-12-27 18:16:39
rep
0.85
reserved_range
0
Shodan's InternetDB
Open ports: 22, 4085, 5901
Tags:
CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:f5:nginx, cpe:/o:canonical:ubuntu_linux
ts_added
2025-12-16 01:26:58.807000
ts_last_update
2025-12-27 23:13:00.937000

Warden event timeline

DShield event timeline

Presence on blacklists