IP address

Passive DNS

Tags:

IP blacklists: DataPlane SSH login
112.165.212.156 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-25 19:10:02.291000
Was present on blacklist at: 2025-12-15 07:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-16 03:10, 2025-12-16 07:10, 2025-12-16 15:10, 2025-12-16 19:10, 2025-12-17 03:10, 2025-12-17 07:10, 2025-12-17 15:10, 2025-12-17 19:10, 2025-12-18 03:10, 2025-12-18 07:10, 2025-12-18 15:10, 2025-12-18 19:10, 2025-12-19 03:10, 2025-12-19 07:10, 2025-12-19 15:10, 2025-12-19 19:10, 2025-12-20 03:10, 2025-12-20 07:10, 2025-12-20 15:10, 2025-12-20 19:10, 2025-12-21 03:10, 2025-12-21 07:10, 2025-12-21 15:10, 2025-12-21 19:10, 2025-12-22 03:10, 2025-12-22 07:10, 2025-12-22 15:10, 2025-12-22 19:10, 2025-12-23 03:10, 2025-12-23 07:10, 2025-12-23 15:10, 2025-12-23 19:10, 2025-12-24 03:10, 2025-12-24 07:10, 2025-12-24 15:10, 2025-12-24 19:10, 2025-12-25 03:10, 2025-12-25 07:10, 2025-12-25 15:10, 2025-12-25 19:10

Origin AS: AS4766 - KIXS-AS-KR KIXS-AS-KR-KR
BGP Prefix: 112.160.0.0/13
geo: South Korea, Eumseong-gun; 🕑 Asia/Seoul
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 112.160.0.0 - 112.191.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 443, 2222, 3000, 8080, 10010, 10011, 10015, 10016, 10019, 10021, 10022, 10023, 10028, 10030, 10031, 10035, 10037, 10038; Tags: database, eol-product; CPEs: cpe:/o:linux:linux_kernel, cpe:/a:expressjs:express, cpe:/a:f5:nginx:1.18.0, cpe:/o:canonical:ubuntu_linux, cpe:/a:oracle:mysql:5.7.44, cpe:/a:f5:nginx:1.26.3, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:nodejs:node.js, cpe:/a:f5:nginx
ts_added: 2025-12-15 07:11:38.260000
ts_last_update: 2025-12-25 19:12:01.674000

Warden event timeline

DShield event timeline

Presence on blacklists