95.155.36.66
IP INTELLIGENCE BRIEFING: 95.155.36.66/32
Executive Summary
IP 95.155.36.66 was analyzed as a residential web server endpoint located in Podgorica, Montenegro (ME), assigned to ASN 8585 (INTERNETCG-ADSL). The asset registered a moderate risk score of 40 with no active threat indicators detected. No malicious activity, blacklisting, or campaign associations were observed. The IP maintains standard web server services (HTTP/HTTPS) with Microsoft IIS 10.0 backend and self-signed TLS certificates.
Ownership and Network Classification
The IP belongs to RIPE-registrant block 95.155.32.0/19, organized under AS8585-MNT with abuse contact available via RDAP. Network classification identified the system as a web server with residential ISP characteristics. PTR resolution maps the address to "adsl-bb36-l66.crnagora.net" under domain crnagora.net. No cloud, CDN, proxy, or hosting infrastructure indicators were present.
Technical Profile
- Open Services: TCP/80 (HTTP), TCP/443 (HTTPS)
- Server Fingerprint: Microsoft-IIS/10.0
- TLS Certificate: Self-signed certificate (issuer/subject: CN=WMSvc-SHA2-WIN-400J9U41PGF)
- DNS Configuration: Forward resolution confirmed, no SPF/DMARC records detected
- Control Plane: Route stability flag indicates unstable routing; 2 DNSBL listings out of 8 total lists evaluated
- Geolocation: Podgorica, ME (42.44°N, 19.26°E); geo-validation plausible with 1459.5km distance from probe origin
Threat Assessment
Current threat profile shows no indicators: zero blacklists, no known attacker flags, no spam source classification, no Tor exit node activity, and no known campaign associations. Risk score of 40 represents moderate risk primarily due to residential ISP context and self-signed TLS. No persistent malicious activity detected across 17 historical observations.
Historical Observations
Signal history indicates 17 observations collected. Recent activity includes TLS/HTTP service scanning (confidence 0.90), geolocation validation (confidence 0.75), and ownership verification (confidence 0.90). No threat persistence or malicious signal evolution observed.
Relationship Graph
Eight relationship links identified: four associations with network "INTERNETCG-ADSL" and four DNS hostname associations to "adsl-bb36-l66.crnagora.net." No external organizational or certificate relationships beyond these core associations.
Neighborhood Analysis
Subnet 95.155.36.66/24 analysis returned zero neighboring IPs. Abuse density registered at 0 with no threat siblings identified. Neighborhood risk distribution shows no high/medium/low threat classifications among adjacent addresses.
Recommendations
No specific blocking or firewall actions recommended at this time. The IP represents a standard residential web server endpoint with no active threat indicators. Continue monitoring for TLS certificate expiration and DNSBL status changes.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AS8585-MNT |
| ASN | AS8585 |
| Network Name | INTERNETCG-ADSL |
| CIDR Block | 95.155.32.0/19 |
| RIR | RIPE |
| Country | me |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | adsl-bb36-l66.crnagora.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | adsl-bb36-l66.crnagora.net |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | 2024-11-06T12:59:28+00:00 |
| Valid Until | 2034-11-04T12:59:28+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 3650 days |
🛡️ Public Network Snapshot
| Origin ASN | AS8585 |
| Network Prefix | 95.155.0.0/18 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 17:43:45 UTC |
| Last Seen | 2026-09-03 02:26:43 UTC |
| Profile Built | 2026-09-03 02:27:14 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 95.155.36.66
Who owns the IP address 95.155.36.66?
95.155.36.66 is registered to AS8585-MNT. The address falls within the 95.155.32.0/19 network block. Registration is held at RIPE.
Where is 95.155.36.66 located?
Geolocation data places 95.155.36.66 in Podgorica, Podgorica, ME. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 95.155.36.66 malicious or safe?
95.155.36.66 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 95.155.36.66?
The reverse DNS (PTR) record for 95.155.36.66 is adsl-bb36-l66.crnagora.net. This hostname is not forward-confirmed, so it should be treated as a weak signal.
What ports are open on 95.155.36.66?
Responsive ports observed on 95.155.36.66 include 80, 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.