IP address


.67445.194.92.18
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
blocklist.de bots
45.194.92.18 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-19 17:05:00.333000
Was present on blacklist at: 2025-12-17 23:05, 2025-12-18 05:05, 2025-12-18 11:05, 2025-12-18 17:05, 2025-12-18 23:05, 2025-12-19 05:05, 2025-12-19 11:05, 2025-12-19 17:05
CI Army
45.194.92.18 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-12-22 03:50:00.998000
Was present on blacklist at: 2025-12-18 03:50, 2025-12-19 03:50, 2025-12-20 03:50, 2025-12-21 03:50, 2025-12-22 03:50
AbuseIPDB
45.194.92.18 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-12-22 05:00:00.757000
Was present on blacklist at: 2025-12-18 05:00, 2025-12-19 05:00, 2025-12-20 05:00, 2025-12-21 05:00, 2025-12-22 05:00
DShield Block
45.194.92.18 is listed on the DShield Block blacklist.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2025-12-22 04:50:00
Was present on blacklist at: 2025-12-18 04:50, 2025-12-19 04:50, 2025-12-22 04:50
Turris greylist
45.194.92.18 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-22 22:15:00.168000
Was present on blacklist at: 2025-12-18 22:15, 2025-12-19 22:15, 2025-12-20 22:15, 2025-12-21 22:15, 2025-12-22 22:15
UCEPROTECT L1
45.194.92.18 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-23 00:45:00.495000
Was present on blacklist at: 2025-12-19 08:45, 2025-12-19 16:45, 2025-12-20 00:45, 2025-12-20 08:45, 2025-12-20 16:45, 2025-12-21 00:45, 2025-12-21 08:45, 2025-12-21 16:45, 2025-12-22 00:45, 2025-12-22 08:45, 2025-12-22 16:45, 2025-12-23 00:45
Warden events (1925)
2025-12-23
ReconScanning (node.4dc198): 17
ReconScanning (node.368407): 10
AnomalyTraffic (node.ffe95c): 5
AnomalyTraffic (node.86dac8): 4
2025-12-22
ReconScanning (node.368407): 89
ReconScanning (node.4dc198): 87
AnomalyTraffic (node.ffe95c): 1
2025-12-21
ReconScanning (node.4dc198): 165
ReconScanning (node.368407): 135
AnomalyTraffic (node.ffe95c): 15
AnomalyTraffic (node.86dac8): 13
2025-12-20
ReconScanning (node.368407): 194
ReconScanning (node.4dc198): 230
AnomalyTraffic (node.ffe95c): 15
AnomalyTraffic (node.86dac8): 14
2025-12-19
ReconScanning (node.4dc198): 230
ReconScanning (node.368407): 194
AnomalyTraffic (node.ffe95c): 15
AnomalyTraffic (node.86dac8): 14
2025-12-18
ReconScanning (node.4dc198): 129
ReconScanning (node.368407): 128
AnomalyTraffic (node.ffe95c): 2
2025-12-17
AnomalyTraffic (node.86dac8): 19
AnomalyTraffic (node.ffe95c): 24
ReconScanning (node.4dc198): 107
ReconScanning (node.368407): 69
DShield reports (IP summary, reports)
2025-12-17
Number of reports: 4159
Distinct targets: 2436
2025-12-18
Number of reports: 4159
Distinct targets: 2436
2025-12-19
Number of reports: 9555
Distinct targets: 6053
2025-12-20
Number of reports: 10052
Distinct targets: 6147
2025-12-21
Number of reports: 6897
Distinct targets: 3538
Origin AS
AS215925 - VPSVAULTHOST
BGP Prefix
45.194.92.0/24
geo
Ecuador, Riobamba
🕑 America/Guayaquil
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
45.192.0.0 - 45.207.255.255
last_activity
2025-12-23 02:03:20
last_warden_event
2025-12-23 02:03:20
rep
0.674404761904762
reserved_range
0
ts_added
2025-12-17 13:51:25.791000
ts_last_update
2025-12-23 02:03:24.223000

Warden event timeline

DShield event timeline

Presence on blacklists