HoneyLabs

Anonymous lookups are limited to 30 an hour per source address. Sign in (free) for 500 lookups a day and an API key.

Unrecognized scanner

95.213.194.75

67 events and 48 interactive sessions across 49 distinct ports.

Network
AS49505 JSC Selectel (CDN)
Location
St Petersburg, St.-Petersburg, Russia RU
Coordinates
59.9417, 30.3096 (city-level estimate)
Reverse DNS
nemesis.liri.me
Classified as
Selectel Ltd. (CDN)
First seen
2026-10-16 07:28 UTC
Last seen
2026-10-21 15:02 UTC
Evidence
moderate

Basis

  • No exploit payloads observed.
  • Swept 49 distinct ports (threshold for a sweep is 10).
  • Not in any known-scanner range.
  • Held a session open for 60s, against a median of well under a second.
  • Counts include 48 interactive session(s) as well as first-packet events.

Events

-

Last 24 hours

-

Last 7 days

-

Active days, last 90

-

Distinct ports

-

Per active day, last 90

-

Targeting

Ports

CVE signature matches

Activity

Daily events over 90 days

Hour of day by weekday

last 30 days, UTC

HTTP methods

Events

Recent events

Newest first. A row opens to the full record: headers, body, payload bytes and TLS details. Runs of the same request across many ports in one minute are folded into one row.

Time (UTC) Port Protocol Request

Client

Fingerprints

each links to the addresses that share it

curl
JSON CSV

Check elsewhere: GreyNoise, Shodan, Censys, AbuseIPDB, VirusTotal.

Report computed 2026-10-27 00:45 UTC. Reports are cached for ten minutes. Methodology. Watch your own prefix. Report an issue.