IP address

Search at other sites:

.202211.234.111.116211-234-111-116.kidc.net

Shodan(more info)

Passive DNS

IP blacklists

Turris greylist

211.234.111.116 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-03 22:15:00.119000
Was present on blacklist at: 2025-12-30 22:15, 2026-01-03 22:15, 2026-01-06 22:15, 2026-01-08 22:15, 2026-01-12 22:15, 2026-01-15 22:15, 2026-01-18 22:15, 2026-01-21 22:15, 2026-01-24 22:15, 2026-01-27 22:15, 2026-01-31 22:15, 2026-02-04 22:15, 2026-02-07 22:15, 2026-02-11 22:15, 2026-03-01 22:15, 2026-03-03 22:15

DataPlane VNC RFB

211.234.111.116 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 11:10:01.074000
Was present on blacklist at: 2026-02-27 11:10, 2026-02-27 15:10, 2026-02-27 19:10, 2026-02-27 23:10, 2026-02-28 03:10, 2026-02-28 07:10, 2026-02-28 11:10, 2026-02-28 15:10, 2026-02-28 19:10, 2026-02-28 23:10, 2026-03-01 03:10, 2026-03-01 07:10, 2026-03-01 11:10, 2026-03-01 15:10, 2026-03-01 19:10, 2026-03-01 23:10, 2026-03-02 03:10, 2026-03-02 07:10, 2026-03-02 11:10, 2026-03-02 15:10, 2026-03-02 19:10, 2026-03-02 23:10, 2026-03-03 03:10, 2026-03-03 07:10, 2026-03-03 11:10, 2026-03-03 15:10, 2026-03-03 19:10, 2026-03-03 23:10, 2026-03-04 03:10, 2026-03-04 07:10, 2026-03-04 11:10

Echelon SSH connection attempt

211.234.111.116 is listed on the Echelon SSH connection attempt blacklist.

Description: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-03-28 10:35:00.580000
Was present on blacklist at: 2026-03-05 10:35, 2026-03-06 10:35, 2026-03-09 10:35, 2026-03-10 10:35, 2026-03-11 10:35, 2026-03-12 10:35, 2026-03-14 10:35, 2026-03-15 10:35, 2026-03-16 10:35, 2026-03-17 10:35, 2026-03-18 10:35, 2026-03-19 10:35, 2026-03-20 10:35, 2026-03-21 10:35, 2026-03-22 10:35, 2026-03-23 10:35, 2026-03-24 10:35, 2026-03-25 10:35, 2026-03-26 10:35, 2026-03-27 10:35, 2026-03-28 10:35

Spamhaus SBL CSS

211.234.111.116 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-03-24 01:45:21.169000
Was present on blacklist at: 2026-03-09 14:20, 2026-03-10 01:45, 2026-03-17 01:45, 2026-03-24 01:45

Echelon SSH bruteforce

211.234.111.116 is listed on the Echelon SSH bruteforce blacklist.

Description: Multiple SSH authentication attempts detected
Type of feed: primary (feed detail page)

Last checked at: 2026-03-28 10:35:00.606000
Was present on blacklist at: 2026-03-22 10:35, 2026-03-23 10:35, 2026-03-24 10:35, 2026-03-25 10:35, 2026-03-26 10:35, 2026-03-27 10:35, 2026-03-28 10:35

Threat categories

TL	Role	Category	Details
58	src	login	protocol: ssh port: 22, 2222
50	src	scan

---

Warden events (95)

2026-03-27

IntrusionUserCompromise (node.40929a): 1

2026-03-26

IntrusionUserCompromise (node.40929a): 1

2026-03-25

IntrusionUserCompromise (node.40929a): 1

2026-03-24

IntrusionUserCompromise (node.40929a): 1

2026-03-23

IntrusionUserCompromise (node.40929a): 1

2026-03-22

IntrusionUserCompromise (node.40929a): 1

2026-03-21

IntrusionUserCompromise (node.40929a): 1

2026-03-19

IntrusionUserCompromise (node.40929a): 1

2026-03-18

IntrusionUserCompromise (node.40929a): 1

2026-03-17

IntrusionUserCompromise (node.40929a): 1

2026-03-16

IntrusionUserCompromise (node.40929a): 1

2026-03-15

IntrusionUserCompromise (node.40929a): 1

2026-03-14

IntrusionUserCompromise (node.40929a): 1

2026-03-13

IntrusionUserCompromise (node.40929a): 1

2026-03-12

IntrusionUserCompromise (node.40929a): 1

2026-03-11

IntrusionUserCompromise (node.40929a): 1

2026-03-10

IntrusionUserCompromise (node.40929a): 1

2026-03-09

IntrusionUserCompromise (node.40929a): 1

2026-03-08

IntrusionUserCompromise (node.40929a): 1

2026-03-05

IntrusionUserCompromise (node.40929a): 1

2026-03-04

IntrusionUserCompromise (node.40929a): 1

2026-03-03

IntrusionUserCompromise (node.40929a): 1

2026-03-02

IntrusionUserCompromise (node.40929a): 1

2026-03-01

IntrusionUserCompromise (node.40929a): 1

2026-02-28

IntrusionUserCompromise (node.40929a): 1

2026-02-27

IntrusionUserCompromise (node.40929a): 1

2026-02-26

IntrusionUserCompromise (node.40929a): 1

2026-02-25

IntrusionUserCompromise (node.40929a): 1

2026-02-23

IntrusionUserCompromise (node.40929a): 1

2026-02-22

IntrusionUserCompromise (node.40929a): 1

2026-02-20

IntrusionUserCompromise (node.40929a): 1

2026-02-19

IntrusionUserCompromise (node.40929a): 1

2026-02-18

IntrusionUserCompromise (node.d2ecc6): 1

AttemptLogin (node.d2ecc6): 1

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

2026-02-17

IntrusionUserCompromise (node.40929a): 1

2026-02-16

IntrusionUserCompromise (node.40929a): 1

2026-02-15

IntrusionUserCompromise (node.40929a): 1

2026-02-14

IntrusionUserCompromise (node.40929a): 1

2026-02-13

IntrusionUserCompromise (node.40929a): 1

2026-02-12

IntrusionUserCompromise (node.40929a): 1

2026-02-11

IntrusionUserCompromise (node.40929a): 1

2026-02-10

IntrusionUserCompromise (node.40929a): 1

2026-02-09

IntrusionUserCompromise (node.40929a): 1

2026-02-08

IntrusionUserCompromise (node.40929a): 1

2026-02-07

IntrusionUserCompromise (node.40929a): 1

2026-02-06

IntrusionUserCompromise (node.40929a): 1

2026-02-05

IntrusionUserCompromise (node.40929a): 1

2026-02-04

IntrusionUserCompromise (node.40929a): 1

2026-02-03

IntrusionUserCompromise (node.40929a): 1

2026-02-02

IntrusionUserCompromise (node.40929a): 1

2026-02-01

IntrusionUserCompromise (node.40929a): 1

2026-01-31

IntrusionUserCompromise (node.40929a): 1

2026-01-30

IntrusionUserCompromise (node.40929a): 1

2026-01-29

IntrusionUserCompromise (node.40929a): 1

2026-01-28

IntrusionUserCompromise (node.40929a): 1

2026-01-27

IntrusionUserCompromise (node.40929a): 1

2026-01-26

IntrusionUserCompromise (node.40929a): 1

2026-01-25

IntrusionUserCompromise (node.40929a): 1

2026-01-24

IntrusionUserCompromise (node.40929a): 1

2026-01-23

IntrusionUserCompromise (node.40929a): 1

2026-01-22

IntrusionUserCompromise (node.40929a): 1

2026-01-21

IntrusionUserCompromise (node.40929a): 1

2026-01-20

IntrusionUserCompromise (node.40929a): 1

2026-01-19

IntrusionUserCompromise (node.40929a): 1

2026-01-18

IntrusionUserCompromise (node.40929a): 1

2026-01-17

IntrusionUserCompromise (node.40929a): 1

2026-01-16

IntrusionUserCompromise (node.40929a): 1

2026-01-15

IntrusionUserCompromise (node.40929a): 1

2026-01-14

IntrusionUserCompromise (node.40929a): 1

2026-01-13

IntrusionUserCompromise (node.40929a): 1

2026-01-12

IntrusionUserCompromise (node.40929a): 1

2026-01-11

IntrusionUserCompromise (node.40929a): 1

2026-01-10

IntrusionUserCompromise (node.40929a): 1

2026-01-09

IntrusionUserCompromise (node.40929a): 1

2026-01-08

IntrusionUserCompromise (node.40929a): 1

2026-01-07

IntrusionUserCompromise (node.40929a): 1

2026-01-05

IntrusionUserCompromise (node.40929a): 1

2026-01-04

IntrusionUserCompromise (node.40929a): 1

2026-01-03

IntrusionUserCompromise (node.40929a): 1

2026-01-02

IntrusionUserCompromise (node.40929a): 1

2026-01-01

IntrusionUserCompromise (node.40929a): 1

2025-12-31

IntrusionUserCompromise (node.40929a): 1

2025-12-30

IntrusionUserCompromise (node.40929a): 1

2025-12-29

IntrusionUserCompromise (node.40929a): 2

2025-12-28

IntrusionUserCompromise (node.28c168): 1

AttemptLogin (node.28c168): 1

IntrusionUserCompromise (node.d2ecc6): 1

IntrusionUserCompromise (node.ee25b8): 1

AttemptLogin (node.d2ecc6): 1

AttemptLogin (node.ee25b8): 1

AttemptLogin (node.40929a): 1

IntrusionUserCompromise (node.40929a): 1

DShield reports (IP summary, reports)

2025-12-28

Number of reports: 281

Distinct targets: 57

2025-12-29

Number of reports: 215

Distinct targets: 57

2025-12-30

Number of reports: 218

Distinct targets: 56

2025-12-31

Number of reports: 212

Distinct targets: 57

2026-01-01

Number of reports: 279

Distinct targets: 57

2026-01-02

Number of reports: 279

Distinct targets: 57

2026-01-03

Number of reports: 219

Distinct targets: 56

2026-01-04

Number of reports: 187

Distinct targets: 57

2026-01-05

Number of reports: 310

Distinct targets: 57

2026-01-06

Number of reports: 203

Distinct targets: 57

2026-01-08

Number of reports: 191

Distinct targets: 55

2026-01-09

Number of reports: 188

Distinct targets: 55

2026-01-10

Number of reports: 210

Distinct targets: 55

2026-01-11

Number of reports: 210

Distinct targets: 55

2026-01-12

Number of reports: 205

Distinct targets: 54

2026-01-13

Number of reports: 191

Distinct targets: 56

2026-01-14

Number of reports: 191

Distinct targets: 56

2026-01-15

Number of reports: 313

Distinct targets: 57

2026-01-16

Number of reports: 195

Distinct targets: 56

2026-01-17

Number of reports: 195

Distinct targets: 56

2026-01-22

Number of reports: 11

Distinct targets: 5

2026-01-23

Number of reports: 221

Distinct targets: 51

2026-01-24

Number of reports: 221

Distinct targets: 51

2026-01-25

Number of reports: 202

Distinct targets: 54

2026-01-26

Number of reports: 202

Distinct targets: 54

2026-02-24

Number of reports: 245

Distinct targets: 51

2026-02-25

Number of reports: 245

Distinct targets: 51

2026-02-26

Number of reports: 179

Distinct targets: 51

2026-02-27

Number of reports: 180

Distinct targets: 51

2026-02-28

Number of reports: 253

Distinct targets: 51

2026-03-01

Number of reports: 183

Distinct targets: 51

2026-03-02

Number of reports: 266

Distinct targets: 50

2026-03-03

Number of reports: 159

Distinct targets: 50

2026-03-04

Number of reports: 257

Distinct targets: 50

2026-03-05

Number of reports: 257

Distinct targets: 50

2026-03-09

Number of reports: 254

Distinct targets: 48

2026-03-10

Number of reports: 150

Distinct targets: 48

2026-03-11

Number of reports: 175

Distinct targets: 48

2026-03-12

Number of reports: 234

Distinct targets: 47

2026-03-13

Number of reports: 234

Distinct targets: 47

2026-03-14

Number of reports: 148

Distinct targets: 47

2026-03-15

Number of reports: 245

Distinct targets: 47

2026-03-16

Number of reports: 153

Distinct targets: 47

2026-03-17

Number of reports: 203

Distinct targets: 47

2026-03-18

Number of reports: 176

Distinct targets: 47

2026-03-19

Number of reports: 154

Distinct targets: 47

2026-03-20

Number of reports: 235

Distinct targets: 46

2026-03-21

Number of reports: 146

Distinct targets: 45

2026-03-22

Number of reports: 169

Distinct targets: 45

2026-03-23

Number of reports: 245

Distinct targets: 46

2026-03-24

Number of reports: 245

Distinct targets: 46

2026-03-25

Number of reports: 164

Distinct targets: 46

2026-03-26

Number of reports: 164

Distinct targets: 46

2026-03-27

Number of reports: 163

Distinct targets: 46

Origin AS

AS3786 - LGDACOM LGDACOM-KR

BGP Prefix

211.234.0.0/17

fmp

{'general': 0.4016137719154358}

geo

South Korea

🕑 Asia/Seoul

hostname

211-234-111-116.kidc.net

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

211.234.96.0 - 211.234.127.255

last_activity

2026-03-27 20:46:04.184000

last_warden_event

2026-03-27 20:46:04.184000

otx_pulses

[]

rep

0.20238095238095238

reserved_range

0

ts_added

2023-10-03 01:45:18.500000

ts_last_update

2026-03-28 10:35:02.987000

Warden event timeline

DShield event timeline

Presence on blacklists