198.235.24.225

Classification: Malicious

198.235.24.225 is a malicious IP address. Reported by 6 threat sources, last seen 2026-09-13. Network: AS396982 Palo Alto Networks, Inc.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2024-12-13 12:23:49 2026-09-13 17:23:26 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-12 16:09:55 2026-09-12 16:09:55 attacker malicious-activity
Unknown malware ThreatFox Abuse.ch 2026-09-04 23:33:41 2026-09-05 00:25:17 malicious-activity
Mail Spammer Blocklist.de 2024-09-08 07:56:55 2026-07-17 12:01:54 attacker malicious-activity
Malicious Host AbuseIPDB 2024-09-16 23:03:35 2026-05-22 23:04:13 malicious-activity
Suspicious Host AbuseIPDB 2026-05-21 00:10:38 2026-05-21 00:10:38 anomalous-activity
SSH Attacker Blocklist.de 2023-08-27 03:37:02 2026-03-28 10:02:24 malicious-activity
HTTP Attacker Blocklist.de 2024-08-04 08:17:01 2024-10-19 09:51:12 malicious-activity
Malicious Host HoneyDB 2023-04-15 00:00:00 2024-04-16 00:00:00 malicious-activity
Malicious URL Hybrid-Analysis 2024-01-04 22:45:04 2024-01-04 22:45:04

Tags

ssh bruteforce bot apache ddos rfi attacker mail spam abuse port:52339 suricata t-pot

Whois information

AS name
AS396982 Palo Alto Networks, Inc
AS registry
arin
AS date
2021-12-20 00:00:00
AS CIDR
198.235.24.0/24
CIDR
198.235.24.0/24
Registrant
Palo Alto Networks, Inc
Address
Palo Alto Networks 3000 Tannery Way Santa Clara, CA 95054
City
Brussels
State
CA
Postal code
1000
Country
BE — Belgium 🇧🇪
Contact email
[email protected], [email protected]
First indexed
2023-04-15 11:28:27
Last updated
2026-09-13 17:23:26

Malicious IPs in the same CIDR

198.235.24.248 198.235.24.205 198.235.24.208 198.235.24.225 198.235.24.192 198.235.24.128 198.235.24.80 198.235.24.25