IP address

Search at other sites:
.00045.198.224.22
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DShield Block
45.198.224.22 is listed on the DShield Block blacklist.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2026-08-03 04:50:00
Was present on blacklist at: 2026-05-31 04:50, 2026-06-01 04:50, 2026-06-02 04:50, 2026-06-03 04:50, 2026-06-05 04:50, 2026-06-06 04:50, 2026-06-07 04:50, 2026-06-09 04:50, 2026-06-10 04:50, 2026-06-11 04:50, 2026-06-13 04:50, 2026-06-14 04:50, 2026-06-16 04:50, 2026-06-17 04:50, 2026-06-18 04:50, 2026-06-19 04:50, 2026-06-21 04:50, 2026-06-24 04:50, 2026-06-25 04:50, 2026-06-26 04:50, 2026-06-27 04:50, 2026-06-29 04:50, 2026-06-30 04:50, 2026-07-01 04:50, 2026-07-03 04:50, 2026-07-04 04:50, 2026-07-05 04:50, 2026-07-07 04:50, 2026-07-08 04:50, 2026-07-10 04:50, 2026-07-11 04:50, 2026-07-13 04:50, 2026-07-14 04:50, 2026-07-16 04:50, 2026-07-16 04:50, 2026-07-17 04:50, 2026-07-20 04:50, 2026-07-21 04:50, 2026-07-22 04:50, 2026-07-24 04:50, 2026-07-25 04:50, 2026-07-26 04:50, 2026-07-27 04:50, 2026-07-28 04:50, 2026-07-29 04:50, 2026-07-30 04:50, 2026-07-31 04:50, 2026-08-01 04:50, 2026-08-03 04:50
AbuseIPDB
45.198.224.22 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-24 04:00:00.618000
Was present on blacklist at: 2026-06-01 04:00, 2026-06-02 04:00, 2026-06-03 04:00, 2026-06-04 04:00, 2026-06-05 04:00, 2026-06-06 04:00, 2026-06-07 04:00, 2026-06-08 04:00, 2026-06-09 04:00, 2026-06-10 04:00, 2026-06-11 04:00, 2026-06-12 04:00, 2026-06-13 04:00, 2026-06-24 04:00
blocklist.de web-login
45.198.224.22 is listed on the blocklist.de web-login blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs that attacks Joomla, Wordpress and<br>other Web-Logins with Brute-Force Logins.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-01 04:05:00.056000
Was present on blacklist at: 2026-06-01 04:05
blocklist.de Apache
45.198.224.22 is listed on the blocklist.de Apache blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the service<br>Apache, Apache-DDOS, RFI-Attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-01 04:05:00.211000
Was present on blacklist at: 2026-06-01 04:05
Echelon TLS/SSL crawler
45.198.224.22 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-06-17 09:40:00.648000
Was present on blacklist at: 2026-06-01 09:40, 2026-06-02 09:40, 2026-06-03 09:40, 2026-06-04 09:40, 2026-06-05 09:40, 2026-06-06 09:40, 2026-06-07 09:40, 2026-06-08 09:40, 2026-06-09 09:40, 2026-06-10 09:40, 2026-06-11 09:40, 2026-06-12 09:40, 2026-06-14 09:40, 2026-06-15 09:40, 2026-06-16 09:40, 2026-06-17 09:40
Echelon web crawler
45.198.224.22 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-06-19 09:50:00.376000
Was present on blacklist at: 2026-06-01 09:50, 2026-06-02 09:50, 2026-06-03 09:50, 2026-06-04 09:50, 2026-06-05 09:50, 2026-06-06 09:50, 2026-06-07 09:50, 2026-06-08 09:50, 2026-06-09 09:50, 2026-06-10 09:50, 2026-06-11 09:50, 2026-06-12 09:50, 2026-06-15 09:50, 2026-06-16 09:50, 2026-06-17 09:50, 2026-06-18 09:50, 2026-06-19 09:50
blocklist.de bots
45.198.224.22 is listed on the blocklist.de bots blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing attacks on the RFI-Attacks,<br>REG-Bots, IRC-Bots or BadBots.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-11 10:05:00.144000
Was present on blacklist at: 2026-06-01 10:05, 2026-06-01 16:05, 2026-06-01 22:05, 2026-06-02 04:05, 2026-06-02 10:05, 2026-06-02 16:05, 2026-06-02 22:05, 2026-06-03 04:05, 2026-06-08 10:05, 2026-06-08 16:05, 2026-06-08 22:05, 2026-06-09 04:05, 2026-06-09 10:05, 2026-06-09 16:05, 2026-06-09 22:05, 2026-06-10 04:05, 2026-06-10 10:05, 2026-06-10 16:05, 2026-06-10 22:05, 2026-06-11 04:05, 2026-06-11 10:05
Echelon CGI script hunt
45.198.224.22 is listed on the Echelon CGI script hunt blacklist.

Description: Scanning for vulnerable CGI scripts
Type of feed: primary (feed detail page)

Last checked at: 2026-06-08 09:05:01.175000
Was present on blacklist at: 2026-06-02 09:05, 2026-06-03 09:05, 2026-06-04 09:05, 2026-06-05 09:05, 2026-06-06 09:05, 2026-06-07 09:05, 2026-06-08 09:05
Echelon router exploit
45.198.224.22 is listed on the Echelon router exploit blacklist.

Description: Attempting router firmware exploits (Netgear, D-Link, etc.)
Type of feed: primary (feed detail page)

Last checked at: 2026-06-13 09:30:00.268000
Was present on blacklist at: 2026-06-02 09:30, 2026-06-03 09:30, 2026-06-04 09:30, 2026-06-05 09:30, 2026-06-06 09:30, 2026-06-07 09:30, 2026-06-08 09:30, 2026-06-09 09:30, 2026-06-10 09:30, 2026-06-11 09:30, 2026-06-12 09:30, 2026-06-13 09:30
Echelon telnet bruteforce
45.198.224.22 is listed on the Echelon telnet bruteforce blacklist.

Description: Multiple telnet authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-06-12 09:45:00.231000
Was present on blacklist at: 2026-06-03 09:45, 2026-06-04 09:45, 2026-06-05 09:45, 2026-06-06 09:45, 2026-06-07 09:45, 2026-06-08 09:45, 2026-06-09 09:45, 2026-06-10 09:45, 2026-06-11 09:45, 2026-06-12 09:45
Echelon CMS enumeration
45.198.224.22 is listed on the Echelon CMS enumeration blacklist.

Description: Content management system discovery and enumeration
Type of feed: primary (feed detail page)

Last checked at: 2026-06-13 09:05:01.230000
Was present on blacklist at: 2026-06-06 09:05, 2026-06-07 09:05, 2026-06-08 09:05, 2026-06-09 09:05, 2026-06-10 09:05, 2026-06-11 09:05, 2026-06-12 09:05, 2026-06-13 09:05
UCEPROTECT L1
45.198.224.22 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-06-14 07:45:00.549000
Was present on blacklist at: 2026-06-06 23:45, 2026-06-07 07:45, 2026-06-07 15:45, 2026-06-07 23:45, 2026-06-08 07:45, 2026-06-08 15:45, 2026-06-08 23:45, 2026-06-09 07:45, 2026-06-09 15:45, 2026-06-09 23:45, 2026-06-10 07:45, 2026-06-10 15:45, 2026-06-10 23:45, 2026-06-11 07:45, 2026-06-11 15:45, 2026-06-11 23:45, 2026-06-12 07:45, 2026-06-12 15:45, 2026-06-12 23:45, 2026-06-13 07:45, 2026-06-13 15:45, 2026-06-13 23:45, 2026-06-14 07:45
Spamhaus XBL CBL
45.198.224.22 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-03 02:23:30.686000
Was present on blacklist at: 2026-06-08 02:23, 2026-06-15 02:23, 2026-06-22 02:23
CI Army
45.198.224.22 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-06-13 02:50:00.776000
Was present on blacklist at: 2026-06-09 02:50, 2026-06-13 02:50

Threat categories

TLRoleCategoryDetails
No threat category tags assigned
Warden events (57481)
2026-06-13
AnomalyTraffic (node.6a1878): 1
ReconScanning (node.ce2b59): 1
ReconScanning (node.4dc198): 3
ReconScanning (node.368407): 3
ReconScanning (node.9c1411): 1
2026-06-12
AnomalyTraffic (node.6a1878): 11
ReconScanning (node.ce2b59): 2
ReconScanning (node.4dc198): 15
ReconScanning (node.9c1411): 3
2026-06-11
AnomalyTraffic (node.6a1878): 10
ReconScanning (node.4dc198): 10
ReconScanning (node.ce2b59): 2
IntrusionUserCompromise (node.cfb4f7): 576
2026-06-10
ReconScanning (node.9c1411): 8
AnomalyTraffic (node.6a1878): 20
ReconScanning (node.ce2b59): 4
ReconScanning (node.4dc198): 16
2026-06-09
ReconScanning (node.4dc198): 60
ReconScanning (node.ce2b59): 6
ReconScanning (node.368407): 23
AnomalyTraffic (node.6a1878): 36
ReconScanning (node.9c1411): 1
2026-06-08
ReconScanning (node.4dc198): 17
ReconScanning (node.ce2b59): 6
AnomalyTraffic (node.6a1878): 8
ReconScanning (node.368407): 14
IntrusionUserCompromise (node.cfb4f7): 30
ReconScanning (node.9c1411): 11
2026-06-07
ReconScanning (node.368407): 5
ReconScanning (node.4dc198): 15
AnomalyTraffic (node.6a1878): 22
IntrusionUserCompromise (node.cfb4f7): 87
ReconScanning (node.ce2b59): 2
ReconScanning (node.9c1411): 2
2026-06-06
AnomalyTraffic (node.6a1878): 69
ReconScanning (node.368407): 15
ReconScanning (node.4dc198): 72
ReconScanning (node.ce2b59): 6
ReconScanning (node.9c1411): 3
2026-06-05
AnomalyTraffic (node.6a1878): 12
ReconScanning (node.368407): 8
ReconScanning (node.4dc198): 19
IntrusionUserCompromise (node.cfb4f7): 5417
ReconScanning (node.ce2b59): 2
2026-06-04
AnomalyTraffic (node.6a1878): 20
ReconScanning (node.368407): 18
ReconScanning (node.4dc198): 35
IntrusionUserCompromise (node.cfb4f7): 27114
ReconScanning (node.ce2b59): 1
ReconScanning (node.9c1411): 2
2026-06-03
AnomalyTraffic (node.6a1878): 28
ReconScanning (node.ce2b59): 3
ReconScanning (node.4dc198): 47
ReconScanning (node.368407): 32
IntrusionUserCompromise (node.cfb4f7): 23290
ReconScanning (node.9c1411): 5
2026-06-02
AnomalyTraffic (node.6a1878): 10
ReconScanning (node.4dc198): 44
ReconScanning (node.368407): 42
ReconScanning (node.ce2b59): 6
ReconScanning (node.9c1411): 7
2026-06-01
AnomalyTraffic (node.6a1878): 59
ReconScanning (node.ce2b59): 1
ReconScanning (node.368407): 10
ReconScanning (node.4dc198): 53
DShield reports (IP summary, reports)
2026-06-02
Number of reports: 5101
Distinct targets: 967
2026-06-03
Number of reports: 5101
Distinct targets: 967
2026-06-04
Number of reports: 8817
Distinct targets: 484
2026-06-05
Number of reports: 31678
Distinct targets: 432
2026-06-06
Number of reports: 4246
Distinct targets: 960
2026-06-07
Number of reports: 4246
Distinct targets: 960
2026-06-08
Number of reports: 385
Distinct targets: 147
2026-06-09
Number of reports: 1460
Distinct targets: 718
2026-06-10
Number of reports: 1460
Distinct targets: 718
2026-06-12
Number of reports: 8472
Distinct targets: 628
2026-06-13
Number of reports: 8472
Distinct targets: 628
2026-06-14
Number of reports: 2293
Distinct targets: 486
OTX pulses
[6a1d793a7a4d32271514b962] 2026-06-01 12:21:14.337000 | Apache honeypot logs for 01/Jun/2026
Author name:jnazario
Pulse modified:2026-06-01 12:21:14.337000
Indicator created:2026-06-01 12:21:15
Indicator role:None
Indicator title:
Indicator expiration:2026-07-01 12:00:00
[6a22c078cb61f831ac19766c] 2026-06-05 12:26:32.590000 | Telnet honeypot logs for 2026-06-05
Author name:jnazario
Pulse modified:2026-06-05 12:26:32.590000
Indicator created:2026-06-05 12:26:33
Indicator role:None
Indicator title:
Indicator expiration:2026-07-05 12:00:00
[6a201d9bbca4130613d3c48f] 2026-06-03 12:27:07.726000 | Telnet honeypot logs for 2026-06-03
Author name:jnazario
Pulse modified:2026-06-03 12:27:07.726000
Indicator created:2026-06-03 12:27:08
Indicator role:None
Indicator title:
Indicator expiration:2026-07-03 12:00:00
Origin AS
AS215925 - VPSVAULTHOST
BGP Prefix
45.198.224.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
45.192.0.0 - 45.207.255.255
last_activity
2026-06-13 03:13:57
last_warden_event
2026-06-13 03:13:57
rep
0.0
reserved_range
0
ts_added
2026-06-01 02:23:28.909000
ts_last_update
2026-08-04 02:23:30.149000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses