IP address

Search at other sites:

--198.12.104.210198-12-104-210-host.colocrossing.com

Shodan(more info)

Passive DNS

IP blacklists

AbuseIPDB

198.12.104.210 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-18 04:00:00.574000
Was present on blacklist at: 2025-04-18 04:00

Spamhaus XBL CBL

198.12.104.210 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-05-02 04:01:00.601000
Was present on blacklist at: 2025-04-18 04:00

DShield reports (IP summary, reports)

2025-04-18

Number of reports: 12

Distinct targets: 4

2025-04-20

Number of reports: 10

Distinct targets: 3

2025-04-24

Number of reports: 16

Distinct targets: 6

2025-04-28

Number of reports: 18

Distinct targets: 6

Origin AS

AS36352 - AS-COLOCROSSING

BGP Prefix

198.12.104.0/21

geo

United States, Elk Grove Village

🕑 America/Chicago

hostname

198-12-104-210-host.colocrossing.com

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

198.12.64.0 - 198.12.127.255

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443, 3000, 8011, 8090

Tags: self-signed, eol-product, scanner

CPEs: cpe:/a:getbootstrap:bootstrap:5.3.2, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx:1.24.0, cpe:/a:jquery:jquery, cpe:/o:canonical:ubuntu_linux

ts_added

2025-04-18 04:00:50.054000

ts_last_update

2025-05-02 04:01:00.972000

Warden event timeline

DShield event timeline

Presence on blacklists