IP address

Search at other sites:

.17795.85.224.75

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

95.85.224.75 was recently listed on the AbuseIPDB blacklist, but currently it is not.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-09-06 04:00:00.693000
Was present on blacklist at: 2026-08-28 04:00, 2026-09-02 04:00, 2026-09-06 04:00

UCEPROTECT L1

95.85.224.75 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-09-30 23:45:00.549000
Was present on blacklist at: 2026-09-26 07:45, 2026-09-26 15:45, 2026-09-26 23:45, 2026-09-27 07:45, 2026-09-27 15:45, 2026-09-27 23:45, 2026-09-28 07:45, 2026-09-28 15:45, 2026-09-28 23:45, 2026-09-29 07:45, 2026-09-29 15:45, 2026-09-29 23:45, 2026-09-30 07:45, 2026-09-30 15:45, 2026-09-30 23:45

Threat categories

TL	Role	Category	Details
50	src	scan
44	src	—
29	src	login	protocol: ssh

---

Warden events (41)

2026-09-30

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-29

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-28

AttemptLogin (node.40929a): 1

2026-09-27

AttemptLogin (node.40929a): 1

2026-09-26

AttemptLogin (node.40929a): 1

2026-09-25

AttemptLogin (node.40929a): 1

2026-09-24

AttemptLogin (node.40929a): 1

2026-09-23

AttemptLogin (node.40929a): 1

2026-09-22

AttemptLogin (node.40929a): 1

2026-09-21

AttemptLogin (node.40929a): 1

2026-09-20

AttemptLogin (node.40929a): 1

2026-09-19

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-18

AttemptLogin (node.40929a): 1

2026-09-17

IntrusionUserCompromise (node.40929a): 1

2026-09-16

AttemptLogin (node.40929a): 1

2026-09-14

AttemptLogin (node.40929a): 1

2026-09-13

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-12

IntrusionUserCompromise (node.40929a): 1

AttemptLogin (node.40929a): 1

2026-09-11

AttemptLogin (node.40929a): 1

2026-09-06

AttemptLogin (node.40929a): 1

2026-09-05

AttemptLogin (node.40929a): 1

2026-09-04

AttemptLogin (node.40929a): 1

2026-09-03

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-09-02

AttemptLogin (node.40929a): 1

2026-08-31

AttemptLogin (node.40929a): 1

2026-08-30

AttemptLogin (node.40929a): 1

2026-08-29

AttemptLogin (node.40929a): 1

2026-08-28

AttemptLogin (node.ce2b59): 1

AttemptLogin (node.40929a): 1

2026-08-27

IntrusionUserCompromise (node.40929a): 1

2026-08-26

AttemptLogin (node.40929a): 1

2026-08-24

AttemptLogin (node.40929a): 1

2026-08-23

AttemptLogin (node.40929a): 1

2026-08-21

AttemptLogin (node.ce2b59): 1

AttemptLogin (node.40929a): 1

DShield reports (IP summary, reports)

2026-08-24

Number of reports: 14

Distinct targets: 8

2026-08-25

Number of reports: 14

Distinct targets: 8

2026-08-26

Number of reports: 16

Distinct targets: 11

2026-08-27

Number of reports: 31

Distinct targets: 16

2026-08-29

Number of reports: 29

Distinct targets: 8

2026-08-30

Number of reports: 29

Distinct targets: 8

2026-09-01

Number of reports: 24

Distinct targets: 13

2026-09-02

Number of reports: 24

Distinct targets: 13

2026-09-03

Number of reports: 19

Distinct targets: 10

2026-09-04

Number of reports: 13

Distinct targets: 9

2026-09-05

Number of reports: 13

Distinct targets: 7

2026-09-06

Number of reports: 14

Distinct targets: 5

2026-09-07

Number of reports: 14

Distinct targets: 5

2026-09-10

Number of reports: 28

Distinct targets: 16

2026-09-11

Number of reports: 28

Distinct targets: 16

2026-09-12

Number of reports: 42

Distinct targets: 15

2026-09-13

Number of reports: 27

Distinct targets: 13

2026-09-14

Number of reports: 14

Distinct targets: 5

2026-09-15

Number of reports: 14

Distinct targets: 5

2026-09-16

Number of reports: 31

Distinct targets: 14

2026-09-17

Number of reports: 29

Distinct targets: 14

2026-09-18

Number of reports: 34

Distinct targets: 12

2026-09-19

Number of reports: 34

Distinct targets: 12

2026-09-21

Number of reports: 19

Distinct targets: 10

2026-09-23

Number of reports: 30

Distinct targets: 16

2026-09-24

Number of reports: 15

Distinct targets: 6

2026-09-25

Number of reports: 15

Distinct targets: 6

2026-09-26

Number of reports: 24

Distinct targets: 10

2026-09-27

Number of reports: 24

Distinct targets: 10

2026-09-28

Number of reports: 17

Distinct targets: 8

2026-09-29

Number of reports: 10

Distinct targets: 6

2026-09-30

Number of reports: 18

Distinct targets: 10

Origin AS

AS209693 - OC-NETWORK

BGP Prefix

95.85.224.0/24

geo

Estonia, Tallinn

🕑 Europe/Tallinn

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

95.85.192.0 - 95.85.255.255

last_activity

2026-09-30 21:38:22.808000

last_warden_event

2026-09-30 21:38:22.808000

rep

0.17749369469039356

reserved_range

0

Shodan's InternetDB

Open ports: 21, 22, 443, 3389, 7000, 8080

Tags: –

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:9.6p1

ts_added

2026-08-21 06:19:20.514000

ts_last_update

2026-10-01 06:19:30.418000

Warden event timeline

DShield event timeline

Presence on blacklists