IP address

Passive DNS

Tags:

IP blacklists: Echelon TLS/SSL crawler
198.98.60.243 is listed on the Echelon TLS/SSL crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 10:40:00.735000
Was present on blacklist at: 2026-10-31 10:40, 2026-11-01 10:40, 2026-11-02 10:40, 2026-11-03 10:40
Spamhaus XBL CBL
198.98.60.243 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-31 10:40:37.872000
Was present on blacklist at: 2026-10-31 10:40
Echelon web crawler
198.98.60.243 is listed on the Echelon web crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-11-03 10:50:00.476000
Was present on blacklist at: 2026-10-31 10:50, 2026-11-01 10:50, 2026-11-02 10:50, 2026-11-03 10:50

TL	Role	Category	Details
38	src	scan

Origin AS: AS53667 - PONYNET
BGP Prefix: 198.98.48.0/20
geo: United States, Staten Island; 🕑 America/New_York
hostname: ns2.webhp.lowhosting.org
Address block ('inetnum' or 'NetRange' in whois database): 198.98.48.0 - 198.98.63.255
rep: 0.2928932188134524
reserved_range: 0
Shodan's InternetDB: Open ports: 111, 2087; Tags: self-signed; CPEs: cpe:/a:cpanel:whm
ts_added: 2026-10-31 10:40:37.835000
ts_last_update: 2026-11-03 10:50:47.486000

Warden event timeline

DShield event timeline

Presence on blacklists