IP address

Search at other sites:
.561198.12.67.225198-12-67-225-host.colocrossing.com
Shodan(more info)
Passive DNS
Tags: IP in hostname
IP blacklists
FireHOL anonymizers
198.12.67.225 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-10-13 00:05:16
Was present on blacklist at: 2026-10-05 00:05, 2026-10-06 00:05, 2026-10-07 00:05, 2026-10-08 00:05, 2026-10-09 00:05, 2026-10-10 00:05, 2026-10-11 00:05, 2026-10-12 00:05, 2026-10-13 00:05
CI Army
198.12.67.225 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-10-13 02:50:00.808000
Was present on blacklist at: 2026-10-06 02:50, 2026-10-07 02:50, 2026-10-08 02:50, 2026-10-09 02:50, 2026-10-10 02:50, 2026-10-11 02:50, 2026-10-12 02:50, 2026-10-13 02:50
AbuseIPDB
198.12.67.225 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-10-13 04:00:00.631000
Was present on blacklist at: 2026-10-06 04:00, 2026-10-09 04:00, 2026-10-10 04:00, 2026-10-13 04:00
Spamhaus XBL CBL
198.12.67.225 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-11 23:17:30.135000
Was present on blacklist at: 2026-10-11 23:17

Threat categories

TLRoleCategoryDetails
68 src scan port: many
31 src —
Warden events (382)
2026-10-13
ReconScanning (node.ce2b59): 26
2026-10-12
ReconScanning (node.ce2b59): 31
2026-10-11
ReconScanning (node.ce2b59): 31
2026-10-10
ReconScanning (node.ce2b59): 30
2026-10-09
ReconScanning (node.ce2b59): 31
2026-10-08
ReconScanning (node.ce2b59): 30
ReconScanning (node.4dc198): 1
2026-10-07
ReconScanning (node.ce2b59): 31
2026-10-06
ReconScanning (node.ce2b59): 44
2026-10-05
ReconScanning (node.368407): 108
ReconScanning (node.ce2b59): 10
2026-10-04
ReconScanning (node.368407): 9
DShield reports (IP summary, reports)
2026-10-06
Number of reports: 12
Distinct targets: 9
2026-10-07
Number of reports: 152
Distinct targets: 105
2026-10-08
Number of reports: 125
Distinct targets: 94
2026-10-09
Number of reports: 112
Distinct targets: 85
2026-10-10
Number of reports: 141
Distinct targets: 100
2026-10-11
Number of reports: 136
Distinct targets: 100
2026-10-12
Number of reports: 142
Distinct targets: 102
Origin AS
AS36352 - AS-COLOCROSSING
BGP Prefix
198.12.67.0/24
geo
United States, Buffalo
🕑 America/New_York
hostname
198-12-67-225-host.colocrossing.com
hostname_class
['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database)
198.12.64.0 - 198.12.127.255
last_activity
2026-10-13 20:22:54
last_warden_event
2026-10-13 20:22:54
rep
0.561148505957989
reserved_range
0
Shodan's InternetDB
Open ports: 22, 631, 8888, 8899, 8910, 8912, 9119, 9443
Tags: open-dir, ai
CPEs: cpe:/a:openbsd:openssh:9.6p1, cpe:/a:python:python:3.12.3, cpe:/o:canonical:ubuntu_linux, cpe:/a:python:python, cpe:/a:encode:uvicorn
ts_added
2026-10-04 23:17:21.213000
ts_last_update
2026-10-13 20:26:16.220000

Warden event timeline

DShield event timeline

Presence on blacklists