IP address

Search at other sites:
.00080.94.95.90
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
UCEPROTECT L1
80.94.95.90 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-04 15:45:00.614000
Was present on blacklist at: 2025-02-03 08:45, 2025-02-03 16:45, 2025-02-04 00:45, 2025-02-04 08:45, 2025-02-04 16:45, 2025-02-05 00:45, 2025-02-05 08:45, 2025-02-05 16:45, 2025-02-06 00:45, 2025-02-06 08:45, 2025-02-06 16:45, 2025-02-07 00:45, 2025-02-07 08:45, 2025-02-07 16:45, 2025-02-08 00:45, 2025-02-08 08:45, 2025-02-08 16:45, 2025-02-09 00:45, 2025-02-09 08:45, 2025-02-09 16:45, 2025-02-10 00:45, 2025-02-10 08:45, 2025-02-10 16:45, 2025-02-11 00:45, 2025-02-11 08:45, 2025-02-11 16:45, 2025-02-12 00:45, 2025-02-12 08:45, 2025-02-12 16:45, 2025-02-13 00:45, 2025-02-13 08:45, 2025-02-13 16:45, 2025-02-14 00:45, 2025-02-14 08:45, 2025-02-14 16:45, 2025-02-15 00:45, 2025-02-15 08:45, 2025-02-15 16:45, 2025-02-16 00:45, 2025-02-16 08:45, 2025-02-16 16:45, 2025-02-17 00:45, 2025-02-17 08:45, 2025-02-17 16:45, 2025-02-18 00:45, 2025-02-18 08:45, 2025-02-23 16:45, 2025-02-24 00:45, 2025-02-24 08:45, 2025-02-24 16:45, 2025-02-25 00:45, 2025-02-25 08:45, 2025-02-25 16:45, 2025-02-26 00:45, 2025-02-26 08:45, 2025-02-26 16:45, 2025-02-27 00:45, 2025-02-27 08:45, 2025-02-27 16:45, 2025-02-28 00:45, 2025-02-28 08:45, 2025-02-28 16:45, 2025-03-01 00:45, 2025-03-01 08:45, 2025-03-01 16:45, 2025-03-02 00:45, 2025-03-02 08:45, 2025-03-02 16:45, 2025-03-03 00:45, 2025-03-03 08:45, 2025-03-03 16:45, 2025-03-04 00:45, 2025-03-04 08:45, 2025-03-04 16:45, 2025-03-05 00:45, 2025-03-05 08:45, 2025-03-05 16:45, 2025-03-06 00:45, 2025-03-06 08:45, 2025-03-06 16:45, 2025-03-07 00:45, 2025-03-07 08:45, 2025-03-07 16:45, 2025-03-08 00:45, 2025-03-08 08:45, 2025-03-08 16:45, 2025-03-09 00:45, 2025-03-09 08:45, 2025-03-09 16:45, 2025-03-10 00:45, 2025-03-10 08:45, 2025-03-10 16:45, 2025-03-11 00:45, 2025-03-11 08:45, 2025-03-11 16:45, 2025-03-12 00:45, 2025-03-12 08:45, 2025-03-12 16:45, 2025-03-13 00:45, 2025-03-13 08:45, 2025-03-13 16:45, 2025-03-14 00:45, 2025-03-14 08:45, 2025-03-14 16:45, 2025-03-15 00:45, 2025-03-15 08:45, 2025-03-15 16:45, 2025-03-16 00:45, 2025-03-16 08:45, 2025-03-16 16:45, 2025-03-17 00:45, 2025-03-17 08:45, 2025-03-17 16:45, 2025-03-18 00:45, 2025-03-18 08:45, 2025-03-18 16:45, 2025-03-19 00:45, 2025-03-19 08:45, 2025-03-19 16:45, 2025-03-20 00:45, 2025-03-20 08:45, 2025-03-20 16:45, 2025-03-21 00:45, 2025-03-21 08:45, 2025-03-21 16:45, 2025-03-22 00:45, 2025-03-22 08:45, 2025-03-22 16:45, 2025-03-23 00:45, 2025-03-23 08:45, 2025-03-23 16:45, 2025-03-24 00:45, 2025-03-24 08:45, 2025-03-24 16:45, 2025-03-25 00:45, 2025-03-25 08:45, 2025-03-25 16:45, 2025-03-26 00:45, 2025-03-26 08:45, 2025-03-26 16:45, 2025-03-27 00:45, 2025-03-27 08:45, 2025-03-27 16:45, 2025-03-28 00:45, 2025-03-28 08:45, 2025-03-28 16:45, 2025-03-29 00:45, 2025-03-29 08:45, 2025-03-29 16:45, 2025-03-30 00:45, 2025-03-30 07:45, 2025-03-30 15:45, 2025-03-30 23:45, 2025-03-31 07:45, 2025-03-31 15:45, 2025-03-31 23:45, 2025-04-01 07:45, 2025-04-01 15:45, 2025-04-01 23:45, 2025-04-02 07:45, 2025-04-02 15:45, 2025-04-02 23:45, 2025-04-03 07:45, 2025-04-03 15:45, 2025-04-03 23:45, 2025-04-04 07:45, 2025-04-06 07:45, 2025-04-06 15:45, 2025-04-06 23:45, 2025-04-07 07:45, 2025-04-07 15:45, 2025-04-07 23:45, 2025-04-08 07:45, 2025-04-08 15:45, 2025-04-08 23:45, 2025-04-09 07:45, 2025-04-09 15:45, 2025-04-09 23:45, 2025-04-10 07:45, 2025-04-10 15:45, 2025-04-10 23:45, 2025-04-11 07:45, 2025-04-11 15:45, 2025-04-11 23:45, 2025-04-12 07:45, 2025-04-12 15:45, 2025-04-12 23:45, 2025-04-13 07:45, 2025-04-13 15:45, 2025-04-13 23:45, 2025-04-14 07:45, 2025-04-14 15:45, 2025-04-14 23:45, 2025-04-15 07:45, 2025-04-15 15:45, 2025-04-15 23:45, 2025-04-16 07:45, 2025-04-16 15:45, 2025-04-16 23:45, 2025-04-17 07:45, 2025-04-17 15:45, 2025-04-17 23:45, 2025-04-18 07:45, 2025-04-18 15:45, 2025-04-18 23:45, 2025-04-19 07:45, 2025-04-19 15:45, 2025-04-19 23:45, 2025-04-20 07:45, 2025-04-20 15:45, 2025-04-20 23:45, 2025-04-21 07:45, 2025-04-21 15:45, 2025-04-21 23:45, 2025-04-22 07:45, 2025-04-22 15:45, 2025-04-22 23:45, 2025-04-23 07:45, 2025-04-23 15:45, 2025-04-23 23:45, 2025-04-24 07:45, 2025-04-24 15:45, 2025-04-24 23:45, 2025-04-25 07:45, 2025-04-25 15:45, 2025-04-25 23:45, 2025-04-26 07:45, 2025-04-26 15:45, 2025-04-26 23:45, 2025-04-27 07:45, 2025-04-27 15:45, 2025-04-27 23:45, 2025-04-28 07:45, 2025-04-28 15:45, 2025-04-28 23:45, 2025-04-29 07:45, 2025-04-29 15:45, 2025-04-29 23:45, 2025-04-30 07:45, 2025-04-30 15:45, 2025-04-30 23:45, 2025-05-01 07:45, 2025-05-01 15:45, 2025-05-01 23:45, 2025-05-02 07:45, 2025-05-02 15:45, 2025-05-02 23:45, 2025-05-03 07:45, 2025-05-03 15:45, 2025-05-03 23:45, 2025-05-04 07:45, 2025-05-04 15:45
Spamhaus SBL
80.94.95.90 is listed on the Spamhaus SBL blacklist.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-01 01:03:10.225000
Was present on blacklist at: 2025-02-06 01:03, 2025-02-13 01:03, 2025-02-20 01:03, 2025-02-27 01:03, 2025-03-06 01:03, 2025-03-13 01:03, 2025-03-20 01:03, 2025-03-27 01:03, 2025-04-03 01:03, 2025-04-10 01:03, 2025-04-17 01:03, 2025-04-24 01:03, 2025-05-01 01:03
Spamhaus DROP
80.94.95.90 is listed on the Spamhaus DROP blacklist.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-01 01:03:10.225000
Was present on blacklist at: 2025-02-06 01:03, 2025-02-13 01:03, 2025-02-20 01:03, 2025-02-27 01:03, 2025-03-06 01:03, 2025-03-13 01:03, 2025-03-20 01:03, 2025-03-27 01:03, 2025-04-03 01:03, 2025-04-10 01:03, 2025-04-17 01:03, 2025-04-24 01:03, 2025-05-01 01:03
Turris greylist
80.94.95.90 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-05-01 21:15:00.167000
Was present on blacklist at: 2025-02-03 22:15, 2025-02-10 22:15, 2025-04-23 21:15, 2025-04-28 21:15, 2025-05-01 21:15
Spamhaus XBL CBL
80.94.95.90 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-01 01:03:10.225000
Was present on blacklist at: 2025-02-06 01:03, 2025-02-13 01:03, 2025-02-20 01:03, 2025-02-27 01:03, 2025-03-06 01:03, 2025-03-13 01:03, 2025-03-20 01:03, 2025-03-27 01:03, 2025-04-03 01:03, 2025-04-10 01:03, 2025-04-24 01:03, 2025-05-01 01:03
AbuseIPDB
80.94.95.90 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-23 04:00:00.649000
Was present on blacklist at: 2025-02-17 05:00, 2025-02-28 05:00, 2025-03-01 05:00, 2025-03-05 05:00, 2025-03-06 05:00, 2025-04-03 04:00, 2025-04-12 04:00, 2025-04-20 04:00, 2025-04-22 04:00, 2025-04-23 04:00
blocklist.de SSH
80.94.95.90 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-24 04:05:05.282000
Was present on blacklist at: 2025-04-22 04:05, 2025-04-22 10:05, 2025-04-22 16:05, 2025-04-22 22:05, 2025-04-23 04:05, 2025-04-23 10:05, 2025-04-23 16:05, 2025-04-23 22:05, 2025-04-24 04:05
Warden events (128)
2025-04-17
ReconScanning (node.9c1411): 1
2025-04-16
ReconScanning (node.9c1411): 1
2025-04-15
ReconScanning (node.9c1411): 1
2025-04-11
ReconScanning (node.9c1411): 3
2025-04-10
ReconScanning (node.9c1411): 15
2025-04-09
ReconScanning (node.9c1411): 31
2025-04-08
ReconScanning (node.9c1411): 1
2025-04-07
ReconScanning (node.9c1411): 2
2025-04-06
ReconScanning (node.9c1411): 1
2025-04-02
ReconScanning (node.9c1411): 4
2025-03-28
ReconScanning (node.9c1411): 1
2025-03-27
ReconScanning (node.9c1411): 5
2025-03-26
ReconScanning (node.9c1411): 3
2025-03-23
ReconScanning (node.9c1411): 3
2025-03-22
ReconScanning (node.9c1411): 9
2025-03-21
ReconScanning (node.9c1411): 16
2025-03-20
ReconScanning (node.9c1411): 1
2025-03-19
ReconScanning (node.9c1411): 1
2025-03-18
ReconScanning (node.9c1411): 2
2025-03-17
ReconScanning (node.9c1411): 3
2025-03-13
ReconScanning (node.9c1411): 8
2025-03-11
ReconScanning (node.9c1411): 14
2025-03-10
ReconScanning (node.9c1411): 1
2025-02-10
AttemptLogin (node.e47683): 1
DShield reports (IP summary, reports)
2025-02-03
Number of reports: 197
Distinct targets: 100
2025-02-04
Number of reports: 174
Distinct targets: 55
2025-02-09
Number of reports: 88
Distinct targets: 18
2025-02-10
Number of reports: 19
Distinct targets: 16
2025-02-15
Number of reports: 12
Distinct targets: 7
2025-02-16
Number of reports: 12
Distinct targets: 5
2025-02-24
Number of reports: 61
Distinct targets: 11
2025-04-08
Number of reports: 14
Distinct targets: 11
2025-04-18
Number of reports: 14
Distinct targets: 5
2025-04-19
Number of reports: 212
Distinct targets: 115
2025-04-20
Number of reports: 1461
Distinct targets: 386
2025-04-21
Number of reports: 1153
Distinct targets: 187
2025-04-22
Number of reports: 22
Distinct targets: 11
2025-04-23
Number of reports: 109
Distinct targets: 27
2025-04-24
Number of reports: 18
Distinct targets: 5
2025-04-25
Number of reports: 120
Distinct targets: 54
2025-04-27
Number of reports: 246
Distinct targets: 60
2025-04-28
Number of reports: 213
Distinct targets: 72
2025-04-30
Number of reports: 48
Distinct targets: 13
OTX pulses
[5a7e3e70c44e7b48947593a7] 2018-02-10 00:36:00.396000 | Webscanners 2018-02-09 thru current day
Author name:david3
Pulse modified:2025-05-04 19:55:25.849000
Indicator created:2025-04-13 17:30:28
Indicator role:scanning_host
Indicator title:404 NOT FOUND
Indicator expiration:2025-07-12 00:00:00
[679262f41130e67c81dedc96] 2025-01-23 15:40:36.972000 | RDP honeypot logs for 2025/01/23
Author name:jnazario
Pulse modified:2025-01-23 15:40:36.972000
Indicator created:2025-01-23 15:40:37
Indicator role:None
Indicator title:
Indicator expiration:2025-02-22 15:00:00
[67963bd4795a0fccf2d23cff] 2025-01-26 13:42:44.305000 | RDP honeypot logs for 2025/01/26
Author name:jnazario
Pulse modified:2025-01-26 13:42:44.305000
Indicator created:2025-01-26 13:42:45
Indicator role:None
Indicator title:
Indicator expiration:2025-02-25 13:00:00
[67978f54f118ede2b25f957d] 2025-01-27 13:51:16.612000 | RDP honeypot logs for 2025/01/27
Author name:jnazario
Pulse modified:2025-01-27 13:51:16.612000
Indicator created:2025-01-27 13:51:17
Indicator role:None
Indicator title:
Indicator expiration:2025-02-26 13:00:00
[6798df0a330a9d4dbc6b7c81] 2025-01-28 13:43:38.672000 | RDP honeypot logs for 2025/01/28
Author name:jnazario
Pulse modified:2025-01-28 13:43:38.672000
Indicator created:2025-01-28 13:43:39
Indicator role:None
Indicator title:
Indicator expiration:2025-02-27 13:00:00
[679cd01fc63d837ede724e5f] 2025-01-31 13:29:03.404000 | RDP honeypot logs for 2025/01/31
Author name:jnazario
Pulse modified:2025-01-31 13:29:03.404000
Indicator created:2025-01-31 13:29:04
Indicator role:None
Indicator title:
Indicator expiration:2025-03-02 13:00:00
[679e21d0f59f90438f7254fa] 2025-02-01 13:29:52.519000 | RDP honeypot logs for 2025/02/01
Author name:jnazario
Pulse modified:2025-02-01 13:29:52.519000
Indicator created:2025-02-01 13:29:53
Indicator role:None
Indicator title:
Indicator expiration:2025-03-03 13:00:00
[679f749a451f0ed62396741e] 2025-02-02 13:35:22.286000 | RDP honeypot logs for 2025/02/02
Author name:jnazario
Pulse modified:2025-02-02 13:35:22.286000
Indicator created:2025-02-02 13:35:23
Indicator role:None
Indicator title:
Indicator expiration:2025-03-04 13:00:00
[67d8148aab71ad480cf7c0fd] 2025-03-17 12:24:42.772000 | RDP honeypot logs for 2025/03/17
Author name:jnazario
Pulse modified:2025-03-17 12:24:42.772000
Indicator created:2025-03-17 12:24:43
Indicator role:None
Indicator title:
Indicator expiration:2025-04-16 12:00:00
[67dd5af236b53d4299a7590b] 2025-03-21 12:26:26.685000 | RDP honeypot logs for 2025/03/21
Author name:jnazario
Pulse modified:2025-03-21 12:26:26.685000
Indicator created:2025-03-21 12:26:27
Indicator role:None
Indicator title:
Indicator expiration:2025-04-20 12:00:00
[67ee7f7081675fba47973ef5] 2025-04-03 12:30:40.414000 | RDP honeypot logs for 2025/04/03
Author name:jnazario
Pulse modified:2025-04-03 12:30:40.414000
Indicator created:2025-04-03 12:30:41
Indicator role:None
Indicator title:
Indicator expiration:2025-05-03 12:00:00
[67f3c4e1479b9d2c4762a02f] 2025-04-07 12:28:17.080000 | RDP honeypot logs for 2025/04/07
Author name:jnazario
Pulse modified:2025-04-07 12:28:17.080000
Indicator created:2025-04-07 12:28:18
Indicator role:None
Indicator title:
Indicator expiration:2025-05-07 12:00:00
[67fe5035e2b9cdcc9236d3f4] 2025-04-15 12:25:25.595000 | RDP honeypot logs for 2025/04/15
Author name:jnazario
Pulse modified:2025-04-15 12:25:25.595000
Indicator created:2025-04-15 12:25:26
Indicator role:None
Indicator title:
Indicator expiration:2025-05-15 12:00:00
[680396e6f66911722ecdea35] 2025-04-19 12:28:22.901000 | RDP honeypot logs for 2025/04/19
Author name:jnazario
Pulse modified:2025-04-19 12:28:22.901000
Indicator created:2025-04-19 12:28:23
Indicator role:None
Indicator title:
Indicator expiration:2025-05-19 12:00:00
[6806394bfa2eff20a3454af3] 2025-04-21 12:25:47.600000 | RDP honeypot logs for 2025/04/21
Author name:jnazario
Pulse modified:2025-04-21 12:25:47.600000
Indicator created:2025-04-21 12:25:48
Indicator role:None
Indicator title:
Indicator expiration:2025-05-21 12:00:00
[68078b35b294eaf8feef6f7c] 2025-04-22 12:27:33.740000 | RDP honeypot logs for 2025/04/22
Author name:jnazario
Pulse modified:2025-04-22 12:27:33.740000
Indicator created:2025-04-22 12:27:34
Indicator role:None
Indicator title:
Indicator expiration:2025-05-22 12:00:00
[680bc6db9a04b555ed34d5ac] 2025-04-25 17:31:07.547000 | RDP honeypot logs for 2025/04/25
Author name:jnazario
Pulse modified:2025-04-25 17:31:07.547000
Indicator created:2025-04-25 17:31:09
Indicator role:None
Indicator title:
Indicator expiration:2025-05-25 17:00:00
[680cd156183992f8725d674c] 2025-04-26 12:28:06.527000 | RDP honeypot logs for 2025/04/26
Author name:jnazario
Pulse modified:2025-04-26 12:28:06.527000
Indicator created:2025-04-26 12:28:07
Indicator role:None
Indicator title:
Indicator expiration:2025-05-26 12:00:00
[680f8a1bceb4a48830d4d6b1] 2025-04-28 14:00:59.500000 | RDP honeypot logs for 2025/04/28
Author name:jnazario
Pulse modified:2025-04-28 14:00:59.500000
Indicator created:2025-04-28 14:01:00
Indicator role:None
Indicator title:
Indicator expiration:2025-05-28 14:00:00
[680f741f73439d1e3d57b098] 2025-04-28 12:27:11.640000 | RDP honeypot logs for 2025/04/28
Author name:jnazario
Pulse modified:2025-04-28 12:27:11.640000
Indicator created:2025-04-28 12:27:12
Indicator role:None
Indicator title:
Indicator expiration:2025-05-28 12:00:00
[6810c5b1e185a80aee176353] 2025-04-29 12:27:29.051000 | RDP honeypot logs for 2025/04/29
Author name:jnazario
Pulse modified:2025-04-29 12:27:29.051000
Indicator created:2025-04-29 12:27:29
Indicator role:None
Indicator title:
Indicator expiration:2025-05-29 12:00:00
[681216a0e2cc4d2f1f947930] 2025-04-30 12:25:04.683000 | RDP honeypot logs for 2025/04/30
Author name:jnazario
Pulse modified:2025-04-30 12:25:04.683000
Indicator created:2025-04-30 12:25:05
Indicator role:None
Indicator title:
Indicator expiration:2025-05-30 12:00:00
Origin AS
AS204428 - SS-Net
BGP Prefix
80.94.95.0/24
geo
Romania
🕑 Europe/Bucharest
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
80.94.92.0 - 80.94.95.255
last_activity
2025-05-04 20:12:03.209000
last_warden_event
2025-04-17 13:48:43
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 135, 137, 5985
Tags: –
CPEs: –
ts_added
2025-01-16 01:03:05.459000
ts_last_update
2025-05-04 20:12:03.214000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses