IP address


--211.227.185.88
Shodan(more info)
Passive DNS
Tags:
IP blacklists
blocklist.de SSH
211.227.185.88 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-08 23:05:05.127000
Was present on blacklist at: 2026-01-06 11:05, 2026-01-06 17:05, 2026-01-06 23:05, 2026-01-07 05:05, 2026-01-07 11:05, 2026-01-07 17:05, 2026-01-07 23:05, 2026-01-08 05:05, 2026-01-08 11:05, 2026-01-08 17:05, 2026-01-08 23:05
DataPlane SSH login
211.227.185.88 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-11 15:10:02.194000
Was present on blacklist at: 2026-01-09 15:10, 2026-01-09 19:10, 2026-01-10 03:10, 2026-01-10 07:10, 2026-01-10 15:10, 2026-01-10 19:10, 2026-01-11 03:10, 2026-01-11 07:10, 2026-01-11 15:10
DataPlane SSH conn
211.227.185.88 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-11 15:10:02.055000
Was present on blacklist at: 2026-01-09 15:10, 2026-01-09 19:10, 2026-01-10 03:10, 2026-01-10 07:10, 2026-01-10 15:10, 2026-01-10 19:10, 2026-01-11 03:10, 2026-01-11 07:10, 2026-01-11 15:10
Origin AS
AS4766 - KIXS-AS-KR KIXS-AS-KR-KR
BGP Prefix
211.224.0.0/13
geo
South Korea, Gwangsan-gu
🕑 Asia/Seoul
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
211.226.0.0 - 211.227.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 22, 80, 111, 2121, 2122, 5432, 8080, 8443, 9010
Tags: database, scanner, self-signed
CPEs: cpe:/o:unix:unix, cpe:/a:postgresql:postgresql:9.6.2, cpe:/a:openssl:openssl:1.1.1g, cpe:/a:openbsd:openssh:8.3, cpe:/a:apache:http_server:2.4.46
ts_added
2026-01-06 11:09:04.535000
ts_last_update
2026-01-11 15:12:00.821000

Warden event timeline

DShield event timeline

Presence on blacklists