IP address

Passive DNS

Tags: Scanner

IP blacklists

CI Army

178.18.254.145 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-09-30 02:50:00.932000
Was present on blacklist at: 2024-09-23 02:50, 2024-09-24 02:50, 2024-09-25 02:50, 2024-09-26 02:50, 2024-09-27 02:50, 2024-09-28 02:50, 2024-09-29 02:50, 2024-09-30 02:50

AbuseIPDB

178.18.254.145 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-10-11 04:00:00.375000
Was present on blacklist at: 2024-09-25 04:00, 2024-10-07 04:00, 2024-10-08 04:00, 2024-10-11 04:00

blocklist.de web-login

178.18.254.145 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-02 16:05:05.234000
Was present on blacklist at: 2024-09-30 22:05, 2024-10-01 04:05, 2024-10-01 10:05, 2024-10-01 16:05, 2024-10-01 22:05, 2024-10-02 04:05, 2024-10-02 10:05, 2024-10-02 16:05

Spamhaus XBL CBL

178.18.254.145 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-11-02 17:03:12.306000
Was present on blacklist at: 2024-10-05 17:03, 2024-10-12 17:03, 2024-10-19 17:03, 2024-10-26 17:03, 2024-11-02 17:03

Turris greylist

178.18.254.145 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC, which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-26 21:15:00.208000
Was present on blacklist at: 2024-10-20 21:15, 2024-10-24 21:15, 2024-10-26 21:15

UCEPROTECT L1

178.18.254.145 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-02 00:45:00.816000
Was present on blacklist at: 2024-10-26 07:45, 2024-10-26 15:45, 2024-10-26 23:45, 2024-10-27 08:45, 2024-10-27 16:45, 2024-10-28 00:45, 2024-10-28 08:45, 2024-10-28 16:45, 2024-10-29 00:45, 2024-10-29 08:45, 2024-10-29 16:45, 2024-10-30 00:45, 2024-10-30 08:45, 2024-10-30 16:45, 2024-10-31 00:45, 2024-10-31 08:45, 2024-10-31 16:45, 2024-11-01 00:45, 2024-11-01 08:45, 2024-11-01 16:45, 2024-11-02 00:45

Warden events (72)

2024-09-24: ReconScanning (node.ce2b59): 20
2024-09-23: ReconScanning (node.ce2b59): 22
2024-09-22: ReconScanning (node.ce2b59): 23
2024-09-21: ReconScanning (node.ce2b59): 7

DShield reports (IP summary, reports)

2024-09-21: Number of reports: 14; Distinct targets: 10
2024-09-22: Number of reports: 80; Distinct targets: 55
2024-09-23: Number of reports: 52; Distinct targets: 39
2024-09-24: Number of reports: 67; Distinct targets: 49
2024-09-25: Number of reports: 26; Distinct targets: 17
2024-10-23: Number of reports: 27; Distinct targets: 6

OTX pulses

[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day

Author name:	david3
Pulse modified:	2024-10-31 07:55:20.665000
Indicator created:	2024-10-01 08:15:20
Indicator role:	scanning_host
Indicator title:	404 NOT FOUND
Indicator expiration:	2024-12-30 00:00:00

Origin AS: AS51167 - CONTABO
BGP Prefix: 178.18.240.0/20
geo: Germany, Düsseldorf; 🕑 Europe/Berlin
hostname: vmi2047919.contaboserver.net
Address block ('inetnum' or 'NetRange' in whois database): 178.18.240.0 - 178.18.255.255
last_activity: 2024-10-31 08:11:45.909000
last_warden_event: 2024-09-24 21:13:54
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 3389; Tags: self-signed; CPEs: –
ts_added: 2024-09-21 17:03:03.950000
ts_last_update: 2024-11-05 17:03:14.306000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses