IP address

Search at other sites:

.00745.95.234.197

Shodan(more info)

Passive DNS

IP blacklists

DataPlane SSH conn

45.95.234.197 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-11-05 23:10:03.014000
Was present on blacklist at: 2024-11-03 23:10, 2024-11-04 03:10, 2024-11-04 07:10, 2024-11-04 11:10, 2024-11-04 15:10, 2024-11-04 19:10, 2024-11-04 23:10, 2024-11-05 03:10, 2024-11-05 07:10, 2024-11-05 11:10, 2024-11-05 15:10, 2024-11-05 19:10, 2024-11-05 23:10

Warden events (2)

2024-10-24

ReconScanning (node.368407): 2

Origin AS

AS9123 - TimeWeb-AS

BGP Prefix

45.95.234.0/24

geo

Russia, St Petersburg

🕑 Europe/Moscow

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

45.95.232.0 - 45.95.235.255

last_activity

2024-10-24 02:55:01

last_warden_event

2024-10-24 02:55:01

rep

0.007142857142857143

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443, 3000, 3306, 4000, 6379

Tags: compromised, database, eol-product

CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:http_server:2.4.56, cpe:/a:oracle:mysql:8.0.34, cpe:/a:redislabs:redis:5.0.5, cpe:/o:canonical:ubuntu_linux, cpe:/a:nodejs:node.js, cpe:/a:f5:nginx:1.17.10

ts_added

2024-10-24 02:47:28.483000

ts_last_update

2024-11-05 23:12:56.132000

Warden event timeline

DShield event timeline

Presence on blacklists