IP address

Search at other sites:

.17195.85.224.75

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

95.85.224.75 was recently listed on the AbuseIPDB blacklist, but currently it is not.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-10-23 04:00:00.664000
Was present on blacklist at: 2026-08-28 04:00, 2026-09-02 04:00, 2026-09-06 04:00, 2026-10-05 04:00, 2026-10-22 04:00, 2026-10-23 04:00

UCEPROTECT L1

95.85.224.75 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-11-05 16:45:00.941000
Was present on blacklist at: 2026-09-26 07:45, 2026-09-26 15:45, 2026-09-26 23:45, 2026-09-27 07:45, 2026-09-27 15:45, 2026-09-27 23:45, 2026-09-28 07:45, 2026-09-28 15:45, 2026-09-28 23:45, 2026-09-29 07:45, 2026-09-29 15:45, 2026-09-29 23:45, 2026-09-30 07:45, 2026-09-30 15:45, 2026-09-30 23:45, 2026-10-01 07:45, 2026-10-01 15:45, 2026-10-01 23:45, 2026-10-02 07:45, 2026-10-02 15:45, 2026-10-02 23:45, 2026-10-13 15:45, 2026-10-13 23:45, 2026-10-14 07:45, 2026-10-14 15:45, 2026-10-14 23:45, 2026-10-15 07:45, 2026-10-15 15:45, 2026-10-15 23:45, 2026-10-16 07:45, 2026-10-16 15:45, 2026-10-16 23:45, 2026-10-17 07:45, 2026-10-17 23:45, 2026-10-18 07:45, 2026-10-18 15:45, 2026-10-18 23:45, 2026-10-19 07:45, 2026-10-19 15:45, 2026-10-19 23:45, 2026-10-20 07:45, 2026-11-01 16:45, 2026-11-02 00:45, 2026-11-02 08:45, 2026-11-02 16:45, 2026-11-03 00:45, 2026-11-03 08:45, 2026-11-03 16:45, 2026-11-04 00:45, 2026-11-04 08:45, 2026-11-04 16:45, 2026-11-05 16:45

Threat categories

TL	Role	Category	Details
50	src	scan
36	src	—
29	src	login	protocol: ssh

---

Warden events (125)

2026-11-04

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-11-03

AttemptLogin (node.40929a): 1

2026-11-01

AttemptLogin (node.40929a): 1

2026-10-31

IntrusionUserCompromise (node.40929a): 1

2026-10-30

AttemptLogin (node.40929a): 1

2026-10-25

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-10-24

AttemptLogin (node.40929a): 1

2026-10-23

IntrusionUserCompromise (node.40929a): 1

AttemptLogin (node.40929a): 1

2026-10-22

AttemptLogin (node.40929a): 1

2026-10-21

AttemptLogin (node.40929a): 1

2026-10-13

AttemptLogin (node.40929a): 1

2026-10-12

AttemptLogin (node.ce2b59): 2

AttemptLogin (node.40929a): 1

2026-10-11

AttemptLogin (node.40929a): 1

2026-10-10

AttemptLogin (node.40929a): 1

2026-10-09

AttemptLogin (node.ce2b59): 2

AttemptLogin (node.40929a): 1

2026-10-08

AttemptLogin (node.ce2b59): 13

AttemptLogin (node.40929a): 1

2026-10-07

AttemptLogin (node.ce2b59): 11

AttemptLogin (node.40929a): 1

2026-10-06

AttemptLogin (node.ce2b59): 13

AttemptLogin (node.40929a): 1

2026-10-05

AttemptLogin (node.ce2b59): 11

AttemptLogin (node.40929a): 1

2026-10-04

AttemptLogin (node.ce2b59): 2

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-10-03

AttemptLogin (node.ce2b59): 4

AttemptLogin (node.40929a): 1

2026-10-01

AttemptLogin (node.40929a): 1

2026-09-30

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-29

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-28

AttemptLogin (node.40929a): 1

2026-09-27

AttemptLogin (node.40929a): 1

2026-09-26

AttemptLogin (node.40929a): 1

2026-09-25

AttemptLogin (node.40929a): 1

2026-09-24

AttemptLogin (node.40929a): 1

2026-09-23

AttemptLogin (node.40929a): 1

2026-09-22

AttemptLogin (node.40929a): 1

2026-09-21

AttemptLogin (node.40929a): 1

2026-09-20

AttemptLogin (node.40929a): 1

2026-09-19

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-18

AttemptLogin (node.40929a): 1

2026-09-17

IntrusionUserCompromise (node.40929a): 1

2026-09-16

AttemptLogin (node.40929a): 1

2026-09-14

AttemptLogin (node.40929a): 1

2026-09-13

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-12

IntrusionUserCompromise (node.40929a): 1

AttemptLogin (node.40929a): 1

2026-09-11

AttemptLogin (node.40929a): 1

2026-09-06

AttemptLogin (node.40929a): 1

2026-09-05

AttemptLogin (node.40929a): 1

2026-09-04

AttemptLogin (node.40929a): 1

2026-09-03

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-02

AttemptLogin (node.40929a): 1

2026-08-31

AttemptLogin (node.40929a): 1

2026-08-30

AttemptLogin (node.40929a): 1

2026-08-29

AttemptLogin (node.40929a): 1

2026-08-28

AttemptLogin (node.ce2b59): 1

AttemptLogin (node.40929a): 1

2026-08-27

IntrusionUserCompromise (node.40929a): 1

2026-08-26

AttemptLogin (node.40929a): 1

2026-08-24

AttemptLogin (node.40929a): 1

2026-08-23

AttemptLogin (node.40929a): 1

2026-08-21

AttemptLogin (node.ce2b59): 1

AttemptLogin (node.40929a): 1

DShield reports (IP summary, reports)

2026-08-24

Number of reports: 14

Distinct targets: 8

2026-08-25

Number of reports: 14

Distinct targets: 8

2026-08-26

Number of reports: 16

Distinct targets: 11

2026-08-27

Number of reports: 31

Distinct targets: 16

2026-08-29

Number of reports: 29

Distinct targets: 8

2026-08-30

Number of reports: 29

Distinct targets: 8

2026-09-01

Number of reports: 24

Distinct targets: 13

2026-09-02

Number of reports: 24

Distinct targets: 13

2026-09-03

Number of reports: 19

Distinct targets: 10

2026-09-04

Number of reports: 13

Distinct targets: 9

2026-09-05

Number of reports: 13

Distinct targets: 7

2026-09-06

Number of reports: 14

Distinct targets: 5

2026-09-07

Number of reports: 14

Distinct targets: 5

2026-09-10

Number of reports: 28

Distinct targets: 16

2026-09-11

Number of reports: 28

Distinct targets: 16

2026-09-12

Number of reports: 42

Distinct targets: 15

2026-09-13

Number of reports: 27

Distinct targets: 13

2026-09-14

Number of reports: 14

Distinct targets: 5

2026-09-15

Number of reports: 14

Distinct targets: 5

2026-09-16

Number of reports: 31

Distinct targets: 14

2026-09-17

Number of reports: 29

Distinct targets: 14

2026-09-18

Number of reports: 34

Distinct targets: 12

2026-09-19

Number of reports: 34

Distinct targets: 12

2026-09-21

Number of reports: 19

Distinct targets: 10

2026-09-23

Number of reports: 30

Distinct targets: 16

2026-09-24

Number of reports: 15

Distinct targets: 6

2026-09-25

Number of reports: 15

Distinct targets: 6

2026-09-26

Number of reports: 24

Distinct targets: 10

2026-09-27

Number of reports: 24

Distinct targets: 10

2026-09-28

Number of reports: 17

Distinct targets: 8

2026-09-29

Number of reports: 10

Distinct targets: 6

2026-09-30

Number of reports: 18

Distinct targets: 10

2026-10-02

Number of reports: 39

Distinct targets: 8

2026-10-03

Number of reports: 20

Distinct targets: 10

2026-10-05

Number of reports: 25

Distinct targets: 14

2026-10-06

Number of reports: 20

Distinct targets: 12

2026-10-07

Number of reports: 39

Distinct targets: 15

2026-10-08

Number of reports: 29

Distinct targets: 10

2026-10-09

Number of reports: 35

Distinct targets: 8

2026-10-10

Number of reports: 15

Distinct targets: 9

2026-10-11

Number of reports: 11

Distinct targets: 6

2026-10-12

Number of reports: 16

Distinct targets: 5

2026-10-24

Number of reports: 10

Distinct targets: 7

2026-10-25

Number of reports: 16

Distinct targets: 7

2026-10-27

Number of reports: 10

Distinct targets: 5

2026-10-28

Number of reports: 10

Distinct targets: 5

2026-10-29

Number of reports: 10

Distinct targets: 6

2026-10-30

Number of reports: 10

Distinct targets: 6

2026-11-03

Number of reports: 16

Distinct targets: 8

Origin AS

AS209693 - OC-NETWORK

BGP Prefix

95.85.224.0/24

geo

Estonia, Tallinn

🕑 Europe/Tallinn

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

95.85.192.0 - 95.85.255.255

last_activity

2026-11-04 15:39:28.451000

last_warden_event

2026-11-04 15:39:28.451000

rep

0.17073782640399282

reserved_range

0

Shodan's InternetDB

Open ports: 21, 22, 443, 3389, 6000, 6001, 7000, 8080

Tags: –

CPEs: cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:for_Windows_9.5

ts_added

2026-08-21 06:19:20.514000

ts_last_update

2026-11-05 17:10:51.538000

Warden event timeline

DShield event timeline

Presence on blacklists