IP address
Search at other sites: 
.00045.95.147.229prime-env1.contaprotegida.co
Shodan(more info)
Passive DNS
Tags:
Residential proxy
- IP blacklists
- Spamhaus SBL45.95.147.229 is listed on the Spamhaus SBL blacklist.AbuseIPDB
Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-09-15 11:02:00.137000
Was present on blacklist at: 2026-06-23 11:02, 2026-06-30 11:02, 2026-07-07 11:02, 2026-07-14 11:02, 2026-07-21 11:02, 2026-07-28 11:02, 2026-08-04 11:02, 2026-08-11 11:02, 2026-08-18 11:02, 2026-08-25 11:02, 2026-09-01 11:02, 2026-09-08 11:02, 2026-09-15 11:0245.95.147.229 is listed on the AbuseIPDB blacklist.Echelon CMS enumeration
Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)
Last checked at: 2026-08-19 04:00:00.592000
Was present on blacklist at: 2026-06-25 04:00, 2026-06-26 04:00, 2026-07-27 04:00, 2026-08-19 04:0045.95.147.229 is listed on the Echelon CMS enumeration blacklist.Echelon config file hunt
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Content management system discovery and enumeration
Type of feed: primary (feed detail page)
Last checked at: 2026-08-29 09:05:04.382000
Was present on blacklist at: 2026-06-22 09:05, 2026-06-24 09:05, 2026-06-25 09:05, 2026-06-26 09:05, 2026-06-27 09:05, 2026-06-28 09:05, 2026-06-29 09:05, 2026-06-30 09:05, 2026-07-01 09:05, 2026-07-02 09:05, 2026-07-03 09:05, 2026-07-04 09:05, 2026-07-05 09:05, 2026-07-06 09:05, 2026-07-07 09:05, 2026-07-08 09:05, 2026-07-09 09:05, 2026-07-10 09:05, 2026-07-11 09:05, 2026-07-12 09:05, 2026-07-13 09:05, 2026-07-14 09:05, 2026-07-15 09:05, 2026-07-16 09:05, 2026-07-17 09:05, 2026-08-07 09:05, 2026-08-08 09:05, 2026-08-09 09:05, 2026-08-10 09:05, 2026-08-11 09:05, 2026-08-12 09:05, 2026-08-13 09:05, 2026-08-22 09:05, 2026-08-23 09:05, 2026-08-24 09:05, 2026-08-25 09:05, 2026-08-26 09:05, 2026-08-27 09:05, 2026-08-28 09:05, 2026-08-29 09:0545.95.147.229 is listed on the Echelon config file hunt blacklist.Echelon port scan
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning for exposed configuration files
Type of feed: primary (feed detail page)
Last checked at: 2026-07-17 09:10:00.240000
Was present on blacklist at: 2026-06-22 09:10, 2026-06-24 09:10, 2026-06-25 09:10, 2026-06-26 09:10, 2026-06-27 09:10, 2026-06-28 09:10, 2026-06-29 09:10, 2026-06-30 09:10, 2026-07-01 09:10, 2026-07-02 09:10, 2026-07-03 09:10, 2026-07-04 09:10, 2026-07-05 09:10, 2026-07-06 09:10, 2026-07-07 09:10, 2026-07-08 09:10, 2026-07-09 09:10, 2026-07-10 09:10, 2026-07-11 09:10, 2026-07-12 09:10, 2026-07-13 09:10, 2026-07-14 09:10, 2026-07-15 09:10, 2026-07-16 09:10, 2026-07-17 09:1045.95.147.229 is listed on the Echelon port scan blacklist.Echelon TLS/SSL crawler
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)
Last checked at: 2026-08-29 09:25:00.329000
Was present on blacklist at: 2026-06-22 09:25, 2026-08-06 09:25, 2026-08-07 09:25, 2026-08-08 09:25, 2026-08-09 09:25, 2026-08-10 09:25, 2026-08-11 09:25, 2026-08-12 09:25, 2026-08-13 09:25, 2026-08-23 09:25, 2026-08-24 09:25, 2026-08-25 09:25, 2026-08-26 09:25, 2026-08-27 09:25, 2026-08-28 09:25, 2026-08-29 09:2545.95.147.229 is listed on the Echelon TLS/SSL crawler blacklist.Echelon telnet bruteforce
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)
Last checked at: 2026-08-29 09:40:00.523000
Was present on blacklist at: 2026-06-22 09:40, 2026-06-24 09:40, 2026-06-25 09:40, 2026-06-26 09:40, 2026-06-27 09:40, 2026-06-28 09:40, 2026-06-29 09:40, 2026-06-30 09:40, 2026-07-01 09:40, 2026-07-02 09:40, 2026-07-03 09:40, 2026-07-04 09:40, 2026-07-05 09:40, 2026-07-06 09:40, 2026-07-07 09:40, 2026-07-08 09:40, 2026-07-09 09:40, 2026-07-10 09:40, 2026-07-11 09:40, 2026-07-12 09:40, 2026-07-13 09:40, 2026-07-14 09:40, 2026-07-15 09:40, 2026-07-16 09:40, 2026-07-17 09:40, 2026-08-07 09:40, 2026-08-08 09:40, 2026-08-09 09:40, 2026-08-10 09:40, 2026-08-11 09:40, 2026-08-12 09:40, 2026-08-13 09:40, 2026-08-19 09:40, 2026-08-20 09:40, 2026-08-21 09:40, 2026-08-22 09:40, 2026-08-23 09:40, 2026-08-24 09:40, 2026-08-25 09:40, 2026-08-26 09:40, 2026-08-27 09:40, 2026-08-28 09:40, 2026-08-29 09:4045.95.147.229 is listed on the Echelon telnet bruteforce blacklist.Echelon web shell hunt
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Multiple telnet authentication attempts detected
Type of feed: primary (feed detail page)
Last checked at: 2026-08-13 09:45:00.294000
Was present on blacklist at: 2026-06-22 09:45, 2026-08-07 09:45, 2026-08-08 09:45, 2026-08-09 09:45, 2026-08-10 09:45, 2026-08-11 09:45, 2026-08-12 09:45, 2026-08-13 09:4545.95.147.229 is listed on the Echelon web shell hunt blacklist.Echelon web crawler
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning for web shells (WSO, c99, r57, etc.)
Type of feed: primary (feed detail page)
Last checked at: 2026-07-17 09:50:00.250000
Was present on blacklist at: 2026-06-22 09:50, 2026-06-24 09:50, 2026-06-25 09:50, 2026-06-26 09:50, 2026-06-27 09:50, 2026-06-28 09:50, 2026-06-29 09:50, 2026-06-30 09:50, 2026-07-01 09:50, 2026-07-03 09:50, 2026-07-04 09:50, 2026-07-05 09:50, 2026-07-06 09:50, 2026-07-07 09:50, 2026-07-08 09:50, 2026-07-09 09:50, 2026-07-10 09:50, 2026-07-11 09:50, 2026-07-12 09:50, 2026-07-13 09:50, 2026-07-14 09:50, 2026-07-15 09:50, 2026-07-16 09:50, 2026-07-17 09:5045.95.147.229 is listed on the Echelon web crawler blacklist.Echelon enterprise software probe
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)
Last checked at: 2026-08-29 09:50:00.427000
Was present on blacklist at: 2026-06-22 09:50, 2026-06-24 09:50, 2026-06-25 09:50, 2026-06-26 09:50, 2026-06-27 09:50, 2026-06-28 09:50, 2026-06-29 09:50, 2026-06-30 09:50, 2026-07-01 09:50, 2026-07-03 09:50, 2026-07-04 09:50, 2026-07-05 09:50, 2026-07-06 09:50, 2026-07-07 09:50, 2026-07-08 09:50, 2026-07-09 09:50, 2026-07-10 09:50, 2026-07-11 09:50, 2026-07-12 09:50, 2026-07-13 09:50, 2026-07-14 09:50, 2026-07-15 09:50, 2026-07-16 09:50, 2026-07-17 09:50, 2026-08-06 09:50, 2026-08-07 09:50, 2026-08-08 09:50, 2026-08-09 09:50, 2026-08-10 09:50, 2026-08-11 09:50, 2026-08-12 09:50, 2026-08-13 09:50, 2026-08-22 09:50, 2026-08-23 09:50, 2026-08-24 09:50, 2026-08-25 09:50, 2026-08-26 09:50, 2026-08-27 09:50, 2026-08-28 09:50, 2026-08-29 09:5045.95.147.229 is listed on the Echelon enterprise software probe blacklist.Echelon directory traversal
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Probing for enterprise software (Confluence, Jenkins, etc.)
Type of feed: primary (feed detail page)
Last checked at: 2026-07-01 09:15:00.265000
Was present on blacklist at: 2026-06-24 09:15, 2026-06-25 09:15, 2026-06-26 09:15, 2026-06-27 09:15, 2026-06-28 09:15, 2026-06-29 09:15, 2026-06-30 09:15, 2026-07-01 09:1545.95.147.229 is listed on the Echelon directory traversal blacklist.Echelon SSH connection attempt
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Path traversal attack attempting to access restricted files
Type of feed: primary (feed detail page)
Last checked at: 2026-07-10 09:15:00.280000
Was present on blacklist at: 2026-06-22 09:15, 2026-06-25 09:15, 2026-06-26 09:15, 2026-06-27 09:15, 2026-06-28 09:15, 2026-06-29 09:15, 2026-06-30 09:15, 2026-07-01 09:15, 2026-07-04 09:15, 2026-07-05 09:15, 2026-07-06 09:15, 2026-07-07 09:15, 2026-07-08 09:15, 2026-07-09 09:15, 2026-07-10 09:1545.95.147.229 is listed on the Echelon SSH connection attempt blacklist.CI Army
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)
Last checked at: 2026-08-29 09:35:00.689000
Was present on blacklist at: 2026-06-22 09:35, 2026-08-07 09:35, 2026-08-08 09:35, 2026-08-09 09:35, 2026-08-10 09:35, 2026-08-11 09:35, 2026-08-12 09:35, 2026-08-13 09:35, 2026-08-23 09:35, 2026-08-24 09:35, 2026-08-25 09:35, 2026-08-26 09:35, 2026-08-27 09:35, 2026-08-28 09:35, 2026-08-29 09:3545.95.147.229 is listed on the CI Army blacklist.blocklist.de SSH
Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)
Last checked at: 2026-08-19 02:50:00.802000
Was present on blacklist at: 2026-08-19 02:5045.95.147.229 is listed on the blocklist.de SSH blacklist.Echelon path traversal
Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)
Last checked at: 2026-07-11 16:05:00.148000
Was present on blacklist at: 2026-07-09 16:05, 2026-07-09 22:05, 2026-07-10 04:05, 2026-07-10 10:05, 2026-07-10 16:05, 2026-07-10 22:05, 2026-07-11 04:05, 2026-07-11 10:05, 2026-07-11 16:0545.95.147.229 is listed on the Echelon path traversal blacklist.Echelon URI parsing exploit
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Path traversal via encoded sequences
Type of feed: primary (feed detail page)
Last checked at: 2026-06-22 09:25:00.260000
Was present on blacklist at: 2026-06-22 09:2545.95.147.229 is listed on the Echelon URI parsing exploit blacklist.Spamhaus XBL CBL
Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Exploiting URI parsing vulnerabilities
Type of feed: primary (feed detail page)
Last checked at: 2026-07-10 09:45:00.339000
Was present on blacklist at: 2026-06-22 09:45, 2026-06-25 09:45, 2026-06-26 09:45, 2026-06-27 09:45, 2026-06-28 09:45, 2026-06-29 09:45, 2026-06-30 09:45, 2026-07-01 09:45, 2026-07-04 09:45, 2026-07-05 09:45, 2026-07-06 09:45, 2026-07-07 09:45, 2026-07-08 09:45, 2026-07-09 09:45, 2026-07-10 09:4545.95.147.229 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.
Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)
Last checked at: 2026-09-15 11:02:00.137000
Was present on blacklist at: 2026-06-23 11:02, 2026-06-30 11:02, 2026-07-07 11:02, 2026-07-14 11:02, 2026-07-21 11:02, 2026-08-25 11:02 - Warden events (87)
- 2026-08-18
-
- ReconScanning (node.4dc198): 1
- 2026-08-06
-
- ReconScanning (node.86eb21): 4
- ReconScanning (node.f90c6b): 4
- 2026-07-11
-
- IntrusionUserCompromise (node.cfb4f7): 63
- 2026-07-10
-
- IntrusionUserCompromise (node.cfb4f7): 6
- 2026-07-09
-
- IntrusionUserCompromise (node.cfb4f7): 9
- DShield reports (IP summary, reports)
- 2026-07-09
- Number of reports: 144
- Distinct targets: 9
- 2026-07-10
- Number of reports: 144
- Distinct targets: 9
- 2026-08-06
- Number of reports: 3734
- Distinct targets: 3709
- 2026-08-07
- Number of reports: 3734
- Distinct targets: 3709
- 2026-08-18
- Number of reports: 39
- Distinct targets: 33
- 2026-08-19
- Number of reports: 39
- Distinct targets: 33
- Residential proxy info (data provided by Layer3 Intel)
- Last seen: 2026-08-19 03:09:57}
- Percent days seen: 6 %
- Networks: MASKIFY, LEMONBRIGHT, DATAIMPULSE, PROXY4U
- Details: https://layer3intel.com/context/45.95.147.229
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| No threat category tags assigned | |||
- Origin AS
- AS49870 - AS49870-BV
- BGP Prefix
- 45.95.147.0/24
- geo
- Netherlands, Amsterdam
- 🕑 Europe/Amsterdam
- hostname
- prime-env1.contaprotegida.co
- Address block ('inetnum' or 'NetRange' in whois database)
- 45.95.144.0 - 45.95.147.255
- last_activity
- 2026-08-18 18:06:09
- last_warden_event
- 2026-08-18 18:06:09
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 111
- Tags: –
- CPEs: cpe:/o:centos:centos, cpe:/a:openbsd:openssh:7.4, cpe:/a:getbootstrap:bootstrap, cpe:/a:apache:http_server:2.4.6
- ts_added
- 2026-05-19 11:01:53.913000
- ts_last_update
- 2026-09-19 11:02:00.336000
Warden event timeline
DShield event timeline
Presence on blacklists