IP address

Passive DNS

Tags: IP in hostname

IP blacklists: DataPlane SIP query
208.85.18.104 is listed on the DataPlane SIP query blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SIP OPTIONS query to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-16 02:10:00.977000
Was present on blacklist at: 2025-10-15 22:10, 2025-10-16 02:10

Origin AS: AS20473 - AS-CHOOPA
BGP Prefix: 208.85.16.0/21
geo: Spain, Madrid; 🕑 Europe/Madrid
hostname: 208.85.18.104.vultrusercontent.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 208.85.16.0 - 208.85.23.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 3389, 5985; Tags: self-signed, cloud; CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1
ts_added: 2025-10-15 22:11:18.688000
ts_last_update: 2025-10-16 02:11:11.436000

Warden event timeline

DShield event timeline

Presence on blacklists