This is an active or recently proxy, which is not inherently a threat, but may have been involved in attacks.
This is an active or recently TOR exit node, which is not inherently a threat, but may have been involved in attacks.
Threats are hosts that have attempted to exploit, brute force, or execute a denial of service attack. These are often compromised hosts.
Systems that are infected with or involved in spreading malware and ransomware.
|ISP||SC Fastweb SRL|
|Organization||SC Fastweb SRL|
|Hosted By||SC Fastweb SRL|
|Threat Type||threats malware|
|Blocked Since||2022-03-04 07:50:53|
|Last Threat||2022-05-18 17:03:37|
|Intel: HTTP Server||Apache/2.4.38 (Debian)|
|Intel: Powered By|
|Intel: SSH Server||SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2|
|SENSE list (high risk)||Yes|
|One day public list||Yes|
|Seven day public list||Yes|
Threat History [last 14 days]
|2022-03-11 00:30:48||Internal||Threat score opinion changed to 100.|
|2022-03-06 00:45:34||Internal||Threat score opinion changed to 92.|
|2022-03-05 00:30:15||Internal||Threat score opinion changed to 92.|
|2022-03-05 00:15:53||Internal||Threat score opinion changed to 92.|
|2022-03-05 00:15:19||Internal||Threat score opinion changed to 92.|
|2022-03-04 07:56:25||Internal||Threat score opinion changed to 83.|
|2022-03-04 07:54:55||Probe||Discovered listed SSH daemon: SSH-2.0-OpenSSH_7.9p1 Debian-10+deb10u2|
|2022-03-04 07:54:55||Probe||Discovered listed HTTP server: Apache/2.4.38 (Debian)|
|2022-03-04 07:50:53||Threats||Threats confirmation received.|
|2022-03-03 08:15:36||Internal||Threat score opinion changed to 70.|
|2022-03-03 08:15:05||Internal||Threat score opinion changed to 79.|
|2022-03-03 08:14:18||Internal||Threat score opinion changed to 79.|
|2022-03-01 00:13:14||Internal||Threat score opinion changed to 53.|
|2022-02-26 00:16:13||Internal||Threat score opinion changed to 79.|
|2022-02-25 08:23:32||Proxy||proxy exit confirmation received.|
|2022-02-25 07:32:06||Tor||Tor exit confirmation received.|
You may enter an IP address to check if it is blocked on NovaSense. If you have an IP address which is incorrectly blocked you may then request an exception.
Snapt users: you may whitelist IP addresses on your ADC to immediately ignore matches in NovaSense.