IP address

Passive DNS

Tags:

IP blacklists: DataPlane SSH conn
47.92.80.220 is listed on the DataPlane SSH conn blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IP addresses that<br>has been seen initiating an unsolicited SSH connection to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2024-10-31 23:10:08.269000
Was present on blacklist at: 2024-10-26 14:10, 2024-10-26 18:10, 2024-10-27 03:10, 2024-10-27 07:10, 2024-10-27 11:10, 2024-10-27 15:10, 2024-10-27 19:10, 2024-10-27 23:10, 2024-10-28 03:10, 2024-10-28 07:10, 2024-10-28 11:10, 2024-10-28 15:10, 2024-10-28 19:10, 2024-10-28 23:10, 2024-10-29 03:10, 2024-10-29 07:10, 2024-10-29 11:10, 2024-10-29 15:10, 2024-10-29 19:10, 2024-10-29 23:10, 2024-10-30 03:10, 2024-10-30 07:10, 2024-10-30 11:10, 2024-10-30 15:10, 2024-10-30 19:10, 2024-10-30 23:10, 2024-10-31 03:10, 2024-10-31 07:10, 2024-10-31 11:10, 2024-10-31 15:10, 2024-10-31 19:10, 2024-10-31 23:10

Origin AS: AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix: 47.92.0.0/15
geo: China, Beijing; 🕑 Asia/Shanghai
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 47.92.0.0 - 47.95.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 21, 22; Tags: self-signed, starttls; CPEs: cpe:/a:openbsd:openssh:7.4, cpe:/a:pureftpd:pure-ftpd
ts_added: 2024-10-26 14:13:03.780000
ts_last_update: 2024-10-31 23:12:51.662000

Warden event timeline

DShield event timeline

Presence on blacklists