IP address

Passive DNS

Tags: Scanner

IP blacklists

CI Army

83.168.95.235 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-21 03:50:00.989000
Was present on blacklist at: 2026-01-28 03:50, 2026-01-29 03:50, 2026-01-30 03:50, 2026-02-01 03:50, 2026-02-02 03:50, 2026-02-03 03:50, 2026-02-06 03:50, 2026-02-07 03:50, 2026-02-08 03:50, 2026-02-09 03:50, 2026-02-23 03:50, 2026-02-24 03:50, 2026-02-25 03:50, 2026-02-26 03:50, 2026-02-28 03:50, 2026-03-01 03:50, 2026-03-02 03:50, 2026-03-16 03:50, 2026-03-18 03:50, 2026-03-19 03:50, 2026-03-20 03:50, 2026-03-21 03:50

ThreatFox

83.168.95.235 is listed on the ThreatFox blacklist.

Description: ThreatFox is a free platform from abuse.ch with the goal of sharing indicators of compromise (IOCs) associated with malware with the infosec community, AV vendors and threat intelligence providers.
Type of feed: primary (feed detail page)

Last checked at: 2026-02-10 07:10:00.177000
Was present on blacklist at: 2026-02-01 15:10, 2026-02-01 19:10, 2026-02-01 23:10, 2026-02-02 03:10, 2026-02-02 07:10, 2026-02-02 15:10, 2026-02-02 19:10, 2026-02-03 03:10, 2026-02-03 07:10, 2026-02-08 15:10, 2026-02-08 19:10, 2026-02-09 03:10, 2026-02-09 07:10, 2026-02-09 15:10, 2026-02-09 19:10, 2026-02-10 03:10, 2026-02-10 07:10

Spamhaus XBL CBL

83.168.95.235 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-31 19:10:30.472000
Was present on blacklist at: 2026-02-03 19:10, 2026-02-24 19:10, 2026-03-17 19:10

AbuseIPDB

83.168.95.235 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-02-22 05:00:00.556000
Was present on blacklist at: 2026-02-06 05:00, 2026-02-22 05:00

Threat categories

TL	Role	Category	Details
No threat category tags assigned

Warden events (306)

2026-03-18: ReconScanning (node.9c1411): 3; ReconScanning (node.368407): 1
2026-03-17: ReconScanning (node.4dc198): 9; ReconScanning (node.9c1411): 4
2026-03-15: ReconScanning (node.9c1411): 13; ReconScanning (node.4dc198): 19
2026-03-14: ReconScanning (node.4dc198): 8; ReconScanning (node.9c1411): 5
2026-02-28: ReconScanning (node.4dc198): 9; ReconScanning (node.9c1411): 8; ReconScanning (node.368407): 2
2026-02-27: ReconScanning (node.4dc198): 2
2026-02-25: ReconScanning (node.9c1411): 1
2026-02-24: ReconScanning (node.4dc198): 21; ReconScanning (node.9c1411): 5; ReconScanning (node.368407): 5
2026-02-22: ReconScanning (node.4dc198): 38; ReconScanning (node.368407): 6; ReconScanning (node.9c1411): 9
2026-02-20: ReconScanning (node.9c1411): 1
2026-02-18: ReconScanning (node.9c1411): 17
2026-02-17: ReconScanning (node.4dc198): 17; ReconScanning (node.9c1411): 5; ReconScanning (node.368407): 2
2026-02-06: ReconScanning (node.4dc198): 21; ReconScanning (node.9c1411): 7
2026-02-05: ReconScanning (node.9c1411): 4; ReconScanning (node.4dc198): 14
2026-01-28: ReconScanning (node.4dc198): 33
2026-01-27: ReconScanning (node.368407): 1; ReconScanning (node.4dc198): 16

DShield reports (IP summary, reports)

2026-02-24: Number of reports: 31; Distinct targets: 24
2026-02-25: Number of reports: 31; Distinct targets: 24
2026-03-14: Number of reports: 15; Distinct targets: 9
2026-03-15: Number of reports: 23; Distinct targets: 15
2026-03-17: Number of reports: 16; Distinct targets: 12
2026-03-18: Number of reports: 29; Distinct targets: 12

Origin AS: AS202520 - skypass-as
BGP Prefix: 83.168.95.0/24
geo: Poland; 🕑 Europe/Warsaw
hostname: hosted-by.skillhost.pl
Address block ('inetnum' or 'NetRange' in whois database): 83.168.64.0 - 83.168.127.255
last_activity: 2026-03-18 22:47:04
last_warden_event: 2026-03-18 22:47:04
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 80, 2222; Tags: open-dir; CPEs: cpe:/a:openbsd:openssh:8.9p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:apache:http_server:2.4.52
ts_added: 2026-01-27 19:10:29.199000
ts_last_update: 2026-04-05 19:10:30.083000

Warden event timeline

DShield event timeline

Presence on blacklists