IP address


.64145.144.212.192
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus SBL
45.144.212.192 was recently listed on the Spamhaus SBL blacklist, but currently it is not.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-29 20:54:27.464000
Was present on blacklist at: 2026-10-29 20:54
Spamhaus DROP
45.144.212.192 was recently listed on the Spamhaus DROP blacklist, but currently it is not.

Description: Spamhaus DROP (Don't Route Or Peer) list. Netblocks controlled by spammers or cyber criminals. The DROP lists are a tiny subset of the SBL, designed for use by firewalls and routing equipment to filter out the malicious traffic from these netblocks.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-29 20:54:27.464000
Was present on blacklist at: 2026-10-29 20:54
AbuseIPDB
45.144.212.192 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-11-02 05:00:00.648000
Was present on blacklist at: 2026-10-30 05:00, 2026-11-02 05:00
Echelon TLS/SSL crawler
45.144.212.192 is listed on the Echelon TLS/SSL crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-11-02 10:40:00.762000
Was present on blacklist at: 2026-10-30 10:40, 2026-10-31 10:40, 2026-11-01 10:40, 2026-11-02 10:40
Echelon web crawler
45.144.212.192 is listed on the Echelon web crawler blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-11-02 10:50:03.110000
Was present on blacklist at: 2026-10-30 10:50, 2026-10-31 10:50, 2026-11-01 10:50, 2026-11-02 10:50

Threat categories

TLRoleCategoryDetails
82 src scan port: 80, 443
60 src —

Warden events (996)
2026-11-02
ReconScanning (node.ce2b59): 4
ReconScanning (node.4dc198): 55
AnomalyTraffic (node.6a1878): 16
2026-11-01
ReconScanning (node.4dc198): 216
AnomalyTraffic (node.6a1878): 49
ReconScanning (node.ce2b59): 10
2026-10-31
ReconScanning (node.ce2b59): 18
AnomalyTraffic (node.6a1878): 28
ReconScanning (node.4dc198): 198
2026-10-30
ReconScanning (node.4dc198): 263
AnomalyTraffic (node.6a1878): 83
ReconScanning (node.ce2b59): 5
2026-10-29
ReconScanning (node.ce2b59): 2
ReconScanning (node.4dc198): 39
AnomalyTraffic (node.6a1878): 10
DShield reports (IP summary, reports)
2026-10-29
Number of reports: 279
Distinct targets: 172
2026-10-30
Number of reports: 279
Distinct targets: 172
2026-10-31
Number of reports: 1662
Distinct targets: 393
2026-11-01
Number of reports: 1007
Distinct targets: 366
Origin AS
AS60721 - bursabil
AS214940 - KPRONET
AS51396 - PFCLOUD
BGP Prefix
45.144.212.0/24
geo
Ukraine
🕑 Europe/Kyiv
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
45.144.212.0 - 45.144.215.255
last_activity
2026-11-02 11:15:39
last_warden_event
2026-11-02 11:15:39
rep
0.6412246123413042
reserved_range
0
ts_added
2026-10-29 20:54:27.425000
ts_last_update
2026-11-02 11:15:46.964000

Warden event timeline

DShield event timeline

Presence on blacklists