Connected hosts section

Kaspersky Threat Intelligence Portal provides information about IP addresses that were accessed in all HTTP(S) requests after the FQDN resolved.

Hosts section

Field name

Description

Comments

Status

Status (danger level) of IP addresses that the domain for the requested web address resolved to (Dangerous, Not trusted, Not categorized, Good).

Items in the table are grouped by status (1—Dangerous, 2—Not trusted, 3—Not categorized, 4—Good).

IP

IP address to which a domain from the Resolved from domain column in this table resolved.

The flag of the country that the IP address belongs to is displayed. When you hover your mouse over a flag, a tooltip with the country name appears.

Items are clickable and take you to the Threat Lookup page, where you can search for information about the IP address.

ASN

Autonomous system number according to RFC 1771 and RFC 4893.

Hits

Number of IP address detections by Kaspersky expert systems.

Resolved from domain

Fully qualified domain name (FQDN) that resolved to the IP address from the IP column in this table.

Items are clickable and take you to the Threat Lookup page, where you can search for information about the domain.

Page top