IP address

Search at other sites:

.41780.94.92.96

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus SBL

80.94.92.96 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-05-14 05:04:12.621000
Was present on blacklist at: 2024-04-09 05:03, 2024-04-16 05:04, 2024-04-23 05:04, 2024-04-30 05:04, 2024-05-07 05:04, 2024-05-14 05:04

Spamhaus XBL CBL

80.94.92.96 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-05-14 05:04:12.621000
Was present on blacklist at: 2024-04-09 05:03, 2024-04-16 05:04, 2024-04-30 05:04, 2024-05-07 05:04

Spamhaus DROP

80.94.92.96 is listed on the Spamhaus DROP blacklist.

Description: The Spamhaus DROP (Don't Route Or Peer) lists are advisory"drop all traffic" lists. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2024-05-14 05:04:12.621000
Was present on blacklist at: 2024-04-09 05:03, 2024-04-16 05:04, 2024-04-23 05:04, 2024-04-30 05:04, 2024-05-07 05:04, 2024-05-14 05:04

Spamhaus EDROP

80.94.92.96 was recently listed on the Spamhaus EDROP blacklist, but currently it is not.

Description: Spamhaus Extended DROP List. Netblocks controlled by spammers or cyber criminals. The (E)DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (feed detail page)

Last checked at: 2024-05-18 06:05:00
Was present on blacklist at: 2024-04-09 06:05, 2024-04-10 06:05

Turris greylist

80.94.92.96 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-07 21:15:00.168000
Was present on blacklist at: 2024-04-10 21:15, 2024-04-12 21:15, 2024-04-15 21:15, 2024-04-20 21:15, 2024-04-25 21:15, 2024-04-29 21:15, 2024-04-30 21:15, 2024-05-01 21:15, 2024-05-02 21:15, 2024-05-05 21:15, 2024-05-06 21:15, 2024-05-07 21:15

AbuseIPDB

80.94.92.96 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>IPs performing malicious activity(DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-05-06 04:00:00.496000
Was present on blacklist at: 2024-04-24 04:00, 2024-05-06 04:00

Warden events (929)

2024-05-17

ReconScanning (node.7d83c0): 2

2024-05-16

ReconScanning (node.7d83c0): 9

2024-05-15

ReconScanning (node.7d83c0): 10

2024-05-14

ReconScanning (node.7d83c0): 9

2024-05-13

ReconScanning (node.7d83c0): 10

2024-05-12

ReconScanning (node.7d83c0): 13

2024-05-11

ReconScanning (node.7d83c0): 9

2024-05-10

ReconScanning (node.7d83c0): 12

2024-05-09

ReconScanning (node.7d83c0): 7

2024-05-08

ReconScanning (node.7d83c0): 8

2024-05-07

ReconScanning (node.7d83c0): 9

2024-05-06

ReconScanning (node.7d83c0): 11

2024-05-05

ReconScanning (node.7d83c0): 18

2024-05-04

ReconScanning (node.7d83c0): 46

2024-05-03

ReconScanning (node.7d83c0): 39

2024-05-02

ReconScanning (node.7d83c0): 45

2024-05-01

ReconScanning (node.7d83c0): 47

2024-04-30

ReconScanning (node.7d83c0): 45

2024-04-29

ReconScanning (node.7d83c0): 46

2024-04-28

ReconScanning (node.7d83c0): 46

2024-04-27

ReconScanning (node.7d83c0): 47

2024-04-26

ReconScanning (node.7d83c0): 45

2024-04-25

ReconScanning (node.7d83c0): 45

2024-04-24

ReconScanning (node.7d83c0): 46

2024-04-23

ReconScanning (node.7d83c0): 47

2024-04-22

ReconScanning (node.7d83c0): 45

2024-04-21

ReconScanning (node.7d83c0): 45

2024-04-20

ReconScanning (node.7d83c0): 46

2024-04-19

ReconScanning (node.7d83c0): 45

2024-04-18

ReconScanning (node.7d83c0): 45

2024-04-17

ReconScanning (node.7d83c0): 31

2024-04-14

ReconScanning (node.7d83c0): 1

DShield reports (IP summary, reports)

2024-04-08

Number of reports: 11

Distinct targets: 4

2024-04-11

Number of reports: 10

Distinct targets: 7

2024-04-28

Number of reports: 25

Distinct targets: 12

2024-04-30

Number of reports: 11

Distinct targets: 6

2024-05-06

Number of reports: 23

Distinct targets: 16

OTX pulses

[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day

Author name:	david3
Pulse modified:	2024-05-16 03:55:16.543000
Indicator created:	2024-04-16 07:45:19
Indicator role:	scanning_host
Indicator title:	404 NOT FOUND
Indicator expiration:	2024-07-15 00:00:00

Origin AS

AS48090 - PPTECHNOLOGY

AS47890 - UNMANAGED-DEDICATED-SERVERS

BGP Prefix

80.94.92.0/24

geo

Romania

🕑 Europe/Bucharest

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

80.94.92.0 - 80.94.95.255

last_activity

2024-05-17 02:18:57

last_warden_event

2024-05-17 02:18:57

rep

0.4171898069835845

reserved_range

0

Shodan's InternetDB

Open ports: 445, 3389, 5985

Tags: self-signed

CPEs: –

ts_added

2024-04-09 05:03:51.438000

ts_last_update

2024-05-18 05:05:12.821000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses