IP address


.80745.198.224.59
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
DShield Block
45.198.224.59 is listed on the DShield Block blacklist.

Description: Recommended Block List by DShield.org. It summarizes the top 20 attacking<br>class C (/24) subnets over the last three days.
Type of feed: secondary (feed detail page)

Last checked at: 2026-08-04 04:50:00
Was present on blacklist at: 2026-07-10 04:50, 2026-07-11 04:50, 2026-07-13 04:50, 2026-07-14 04:50, 2026-07-16 04:50, 2026-07-17 04:50, 2026-07-20 04:50, 2026-07-21 04:50, 2026-07-22 04:50, 2026-07-24 04:50, 2026-07-25 04:50, 2026-07-26 04:50, 2026-07-27 04:50, 2026-07-28 04:50, 2026-07-29 04:50, 2026-07-30 04:50, 2026-07-31 04:50, 2026-08-01 04:50, 2026-08-03 04:50, 2026-08-04 04:50
AbuseIPDB
45.198.224.59 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-08-04 04:00:00.745000
Was present on blacklist at: 2026-07-14 04:00, 2026-07-27 04:00, 2026-07-28 04:00, 2026-07-29 04:00, 2026-07-30 04:00, 2026-07-31 04:00, 2026-08-01 04:00, 2026-08-03 04:00, 2026-08-04 04:00
Echelon TLS/SSL crawler
45.198.224.59 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-08-04 09:40:00.441000
Was present on blacklist at: 2026-07-26 09:40, 2026-07-27 09:40, 2026-07-28 09:40, 2026-07-29 09:40, 2026-07-30 09:40, 2026-07-31 09:40, 2026-08-01 09:40, 2026-08-02 09:40, 2026-08-03 09:40, 2026-08-04 09:40
Echelon web crawler
45.198.224.59 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-08-04 09:50:00.382000
Was present on blacklist at: 2026-07-27 09:50, 2026-07-28 09:50, 2026-07-29 09:50, 2026-07-30 09:50, 2026-07-31 09:50, 2026-08-01 09:50, 2026-08-02 09:50, 2026-08-03 09:50, 2026-08-04 09:50
Spamhaus XBL CBL
45.198.224.59 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-07-31 14:07:30.292000
Was present on blacklist at: 2026-07-31 14:07

Threat categories

TLRoleCategoryDetails
81 src scan port: 443
68 src

Warden events (3945)
2026-08-05
ReconScanning (node.4dc198): 23
AnomalyTraffic (node.6a1878): 9
ReconScanning (node.368407): 1
ReconScanning (node.9c1411): 1
2026-08-04
ReconScanning (node.4dc198): 280
AnomalyTraffic (node.6a1878): 116
ReconScanning (node.368407): 21
ReconScanning (node.ce2b59): 2
ReconScanning (node.9c1411): 4
2026-08-03
ReconScanning (node.4dc198): 285
AnomalyTraffic (node.6a1878): 109
ReconScanning (node.368407): 8
2026-08-02
AnomalyTraffic (node.6a1878): 78
ReconScanning (node.4dc198): 286
ReconScanning (node.368407): 8
2026-08-01
ReconScanning (node.4dc198): 283
ReconScanning (node.ce2b59): 21
AnomalyTraffic (node.6a1878): 71
ReconScanning (node.368407): 16
2026-07-31
ReconScanning (node.4dc198): 270
AnomalyTraffic (node.6a1878): 76
ReconScanning (node.368407): 15
2026-07-30
ReconScanning (node.4dc198): 266
AnomalyTraffic (node.6a1878): 112
ReconScanning (node.368407): 13
ReconScanning (node.9c1411): 12
2026-07-29
ReconScanning (node.4dc198): 249
AnomalyTraffic (node.6a1878): 93
ReconScanning (node.368407): 5
ReconScanning (node.9c1411): 1
2026-07-28
ReconScanning (node.4dc198): 284
AnomalyTraffic (node.6a1878): 87
ReconScanning (node.368407): 7
2026-07-27
ReconScanning (node.4dc198): 287
AnomalyTraffic (node.6a1878): 110
ReconScanning (node.368407): 3
2026-07-26
ReconScanning (node.ce2b59): 5
AnomalyTraffic (node.6a1878): 78
ReconScanning (node.4dc198): 190
ReconScanning (node.368407): 7
2026-07-11
ReconScanning (node.4dc198): 4
ReconScanning (node.368407): 4
ReconScanning (node.ce2b59): 4
ReconScanning (node.9c1411): 3
2026-07-10
AnomalyTraffic (node.6a1878): 1
ReconScanning (node.4dc198): 46
ReconScanning (node.ce2b59): 22
ReconScanning (node.9c1411): 24
ReconScanning (node.368407): 45
DShield reports (IP summary, reports)
2026-07-11
Number of reports: 29
Distinct targets: 19
2026-07-12
Number of reports: 29
Distinct targets: 19
2026-07-26
Number of reports: 332
Distinct targets: 109
2026-07-27
Number of reports: 332
Distinct targets: 109
2026-07-28
Number of reports: 535
Distinct targets: 122
2026-07-29
Number of reports: 535
Distinct targets: 122
2026-07-30
Number of reports: 462
Distinct targets: 121
2026-07-31
Number of reports: 475
Distinct targets: 125
2026-08-01
Number of reports: 475
Distinct targets: 125
2026-08-02
Number of reports: 404
Distinct targets: 118
2026-08-03
Number of reports: 518
Distinct targets: 122
Origin AS
AS215925 - VPSVAULTHOST
BGP Prefix
45.198.224.0/24
geo
United States
🕑 America/Chicago
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
45.192.0.0 - 45.207.255.255
last_activity
2026-08-05 01:57:45
last_warden_event
2026-08-05 01:57:45
rep
0.8068532476657552
reserved_range
0
ts_added
2026-07-10 14:07:21.937000
ts_last_update
2026-08-05 01:58:30.450000

Warden event timeline

DShield event timeline

Presence on blacklists