IP address

Search at other sites:

.00095.85.227.122

Shodan(more info)

Passive DNS

IP blacklists

Echelon TLS/SSL crawler

95.85.227.122 was recently listed on the Echelon TLS/SSL crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-09-17 09:40:00.469000
Was present on blacklist at: 2026-09-09 09:40, 2026-09-10 09:40, 2026-09-11 09:40, 2026-09-12 09:40, 2026-09-13 09:40, 2026-09-14 09:40, 2026-09-15 09:40, 2026-09-16 09:40, 2026-09-17 09:40

Echelon web crawler

95.85.227.122 was recently listed on the Echelon web crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-09-17 09:50:00.535000
Was present on blacklist at: 2026-09-09 09:50, 2026-09-10 09:50, 2026-09-11 09:50, 2026-09-12 09:50, 2026-09-13 09:50, 2026-09-14 09:50, 2026-09-15 09:50, 2026-09-16 09:50, 2026-09-17 09:50

Threat categories

TL	Role	Category	Details
50	src	scan

---

Warden events (81)

2026-09-10

AnomalyTraffic (node.6a1878): 5

ReconScanning (node.4dc198): 4

ReconScanning (node.368407): 3

2026-09-09

AnomalyTraffic (node.6a1878): 4

AnomalyTraffic (node.ce2b59): 2

ReconScanning (node.ce2b59): 2

ReconScanning (node.4dc198): 2

2026-09-08

AnomalyTraffic (node.6a1878): 3

ReconScanning (node.368407): 6

ReconScanning (node.4dc198): 1

ReconScanning (node.9c1411): 1

2026-08-27

ReconScanning (node.9c1411): 1

2026-08-25

ReconScanning (node.368407): 1

AnomalyTraffic (node.ce2b59): 2

AnomalyTraffic (node.6a1878): 5

ReconScanning (node.ce2b59): 1

ReconScanning (node.4dc198): 2

2026-08-24

ReconScanning (node.9c1411): 1

ReconScanning (node.368407): 5

AnomalyTraffic (node.6a1878): 2

ReconScanning (node.4dc198): 1

2026-08-22

ReconScanning (node.9c1411): 1

2026-08-21

ReconScanning (node.368407): 1

ReconScanning (node.4dc198): 1

2026-08-20

AnomalyTraffic (node.6a1878): 6

ReconScanning (node.4dc198): 5

ReconScanning (node.368407): 4

2026-08-19

AnomalyTraffic (node.6a1878): 3

AnomalyTraffic (node.ce2b59): 2

ReconScanning (node.ce2b59): 1

ReconScanning (node.4dc198): 2

2026-08-18

ReconScanning (node.368407): 1

DShield reports (IP summary, reports)

2026-08-13

Number of reports: 16

Distinct targets: 16

2026-08-18

Number of reports: 22

Distinct targets: 15

2026-08-19

Number of reports: 22

Distinct targets: 15

2026-08-20

Number of reports: 44

Distinct targets: 27

2026-08-21

Number of reports: 44

Distinct targets: 27

2026-08-24

Number of reports: 145

Distinct targets: 99

2026-08-25

Number of reports: 145

Distinct targets: 99

2026-08-26

Number of reports: 34

Distinct targets: 27

2026-08-31

Number of reports: 55

Distinct targets: 30

2026-09-09

Number of reports: 301

Distinct targets: 123

2026-09-10

Number of reports: 109

Distinct targets: 71

2026-09-11

Number of reports: 109

Distinct targets: 71

2026-09-21

Number of reports: 54

Distinct targets: 31

Origin AS

AS209693 - OC-NETWORK

BGP Prefix

95.85.227.0/24

geo

Poland, Warsaw

🕑 Europe/Warsaw

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

95.85.192.0 - 95.85.255.255

last_activity

2026-09-10 13:11:07

last_warden_event

2026-09-10 13:11:07

rep

6.828652944124158e-05

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443

Tags: –

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:apache:http_server:2.4.58

ts_added

2026-08-14 05:00:46.869000

ts_last_update

2026-10-01 05:01:25.933000

Warden event timeline

DShield event timeline

Presence on blacklists