IP address


.16495.85.252.96
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
spamhaus-pbl
95.85.252.96 is listed on the spamhaus-pbl blacklist.

Description:
Type of feed: (feed detail page)

Last checked at: 2026-06-01 00:00:10.690000
Was present on blacklist at: 2026-05-25 00:00, 2026-06-01 00:00
FireHOL anonymizers
95.85.252.96 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-06-05 00:05:13
Was present on blacklist at: 2026-05-25 00:05, 2026-05-26 00:05, 2026-05-27 00:05, 2026-05-28 00:05, 2026-05-29 00:05, 2026-05-30 00:05, 2026-05-31 00:05, 2026-06-01 00:05, 2026-06-02 00:05, 2026-06-03 00:05, 2026-06-04 00:05, 2026-06-05 00:05

Threat categories

TLRoleCategoryDetails
50 src scan port: 23

Warden events (16)
2026-05-25
ReconScanning (node.ce2b59): 7
2026-05-24
ReconScanning (node.ce2b59): 9
Origin AS
AS209693 - OC-NETWORK
BGP Prefix
95.85.252.0/24
geo
Germany, Frankfurt am Main
🕑 Europe/Berlin
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
95.85.192.0 - 95.85.255.255
last_activity
2026-05-25 02:18:09
last_warden_event
2026-05-25 02:18:09
rep
0.16398607070826376
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags:
CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/o:canonical:ubuntu_linux
ts_added
2026-05-25 00:00:06.015000
ts_last_update
2026-06-05 00:00:10.799000

Warden event timeline

DShield event timeline

Presence on blacklists