IP address

Passive DNS

Tags: IP in hostname

IP blacklists: DataPlane TELNET login
68.99.71.211 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-08 15:10:04.010000
Was present on blacklist at: 2025-12-03 07:10, 2025-12-03 11:10, 2025-12-03 15:10, 2025-12-03 19:10, 2025-12-03 23:10, 2025-12-04 03:10, 2025-12-04 07:10, 2025-12-04 11:10, 2025-12-04 15:10, 2025-12-04 19:10, 2025-12-04 23:10, 2025-12-05 03:10, 2025-12-05 07:10, 2025-12-05 11:10, 2025-12-05 15:10, 2025-12-05 19:10, 2025-12-05 23:10, 2025-12-06 03:10, 2025-12-06 07:10, 2025-12-06 11:10, 2025-12-06 15:10, 2025-12-06 19:10, 2025-12-06 23:10, 2025-12-07 03:10, 2025-12-07 07:10, 2025-12-07 11:10, 2025-12-07 15:10, 2025-12-07 19:10, 2025-12-07 23:10, 2025-12-08 03:10, 2025-12-08 07:10, 2025-12-08 11:10, 2025-12-08 15:10

Origin AS: AS22773 - ASN-CXA-ALL-CCI-22773-RDC
BGP Prefix: 68.99.64.0/21
geo: United States, Oklahoma City; 🕑 America/Chicago
hostname: wsip-68-99-71-211.ok.ok.cox.net
hostname_class: ['isp', 'ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 68.96.0.0 - 68.111.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 80, 443, 2000, 2001, 8080, 8443, 8444, 8880, 9443; Tags: self-signed; CPEs: cpe:/a:f5:nginx
ts_added: 2025-12-03 07:51:41.879000
ts_last_update: 2025-12-08 15:49:33.753000

Warden event timeline

DShield event timeline

Presence on blacklists