IP address


.00045.95.147.171univisit.com
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
CI Army
45.95.147.171 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2024-04-18 02:50:00.983000
Was present on blacklist at: 2024-04-07 02:50, 2024-04-08 02:50, 2024-04-09 02:50, 2024-04-10 02:50, 2024-04-11 02:50, 2024-04-12 02:50, 2024-04-13 02:50, 2024-04-14 02:50, 2024-04-15 02:50, 2024-04-16 02:50, 2024-04-17 02:50, 2024-04-18 02:50
AbuseIPDB
45.95.147.171 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>IPs performing malicious activity(DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-04-13 04:00:00.536000
Was present on blacklist at: 2024-04-09 04:00, 2024-04-10 04:00, 2024-04-12 04:00, 2024-04-13 04:00
Turris greylist
45.95.147.171 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-04-10 21:15:00.174000
Was present on blacklist at: 2024-04-09 21:15, 2024-04-10 21:15
Warden events (741)
2024-04-14
ReconScanning (node.bd32ad): 1
ReconScanning (node.7d83c0): 1
2024-04-12
ReconScanning (node.bd32ad): 100
ReconScanning (node.8cbf96): 57
ReconScanning (node.7d83c0): 17
2024-04-11
ReconScanning (node.7d83c0): 13
ReconScanning (node.bd32ad): 69
ReconScanning (node.8cbf96): 68
2024-04-10
ReconScanning (node.bd32ad): 1
ReconScanning (node.7d83c0): 1
2024-04-09
ReconScanning (node.8cbf96): 95
ReconScanning (node.7d83c0): 36
ReconScanning (node.bd32ad): 118
AnomalyTraffic (node.c35ced): 1
2024-04-08
ReconScanning (node.7d83c0): 20
ReconScanning (node.bd32ad): 63
ReconScanning (node.8cbf96): 42
2024-04-06
ReconScanning (node.7d83c0): 8
ReconScanning (node.8cbf96): 8
ReconScanning (node.bd32ad): 13
2024-04-03
ReconScanning (node.7d83c0): 1
2024-04-01
ReconScanning (node.bd32ad): 5
ReconScanning (node.7d83c0): 3
DShield reports (IP summary, reports)
2024-04-01
Number of reports: 22
Distinct targets: 19
2024-04-06
Number of reports: 33
Distinct targets: 28
2024-04-08
Number of reports: 290
Distinct targets: 158
2024-04-09
Number of reports: 557
Distinct targets: 309
2024-04-11
Number of reports: 221
Distinct targets: 170
2024-04-12
Number of reports: 331
Distinct targets: 209
OTX pulses
[606d75c11c08ff94089a9430] 2021-04-07 09:05:05.353000 | Georgs Honeypot
Author name:georgengelmann
Pulse modified:2024-01-22 11:59:02.598000
Indicator created:2023-12-23 15:00:03
Indicator role:trojan
Indicator title:ServeMe Trojan from univisit.com port 41128
Indicator expiration:2024-01-22 15:00:00
[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day
Author name:david3
Pulse modified:2024-04-28 19:55:17.725000
Indicator created:2024-04-09 07:15:16
Indicator role:scanning_host
Indicator title:404 NOT FOUND
Indicator expiration:2024-07-08 00:00:00
[66154dca835bdf63c4b1f161] 2024-04-09 14:16:42.724000 | Apache honeypot logs for 09/Apr/2024
Author name:jnazario
Pulse modified:2024-04-09 14:16:42.724000
Indicator created:2024-04-09 14:16:43
Indicator role:None
Indicator title:
Indicator expiration:2024-05-09 14:00:00
Origin AS
AS49870 - AS49870-BV
BGP Prefix
45.95.147.0/24
fmp
{'general': 0.03090713545680046}
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
univisit.com
Address block ('inetnum' or 'NetRange' in whois database)
45.95.144.0 - 45.95.147.255
last_activity
2024-04-28 20:01:30.464000
last_warden_event
2024-04-14 12:25:26
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 21, 80
Tags: scanner
CPEs:
ts_added
2023-11-25 13:53:00.577000
ts_last_update
2024-04-28 20:01:30.475000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses