IP address

Search at other sites:
.41888.213.215.2
Shodan(more info)
Passive DNS
Tags: Residential proxy
IP blacklists
Spamhaus SBL CSS
88.213.215.2 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-09-22 16:20:40.057000
Was present on blacklist at: 2026-08-04 16:20, 2026-08-11 16:20, 2026-08-18 16:20, 2026-08-25 16:20, 2026-09-01 16:20, 2026-09-08 16:20, 2026-09-15 16:20, 2026-09-22 16:20
Spamhaus XBL CBL
88.213.215.2 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-09-22 16:20:40.057000
Was present on blacklist at: 2026-08-04 16:20, 2026-08-11 16:20, 2026-08-18 16:20, 2026-08-25 16:20, 2026-09-01 16:20, 2026-09-08 16:20, 2026-09-15 16:20, 2026-09-22 16:20
FireHOL anonymizers
88.213.215.2 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-09-22 18:05:17
Was present on blacklist at: 2026-08-04 18:05, 2026-08-05 18:05, 2026-08-06 18:05, 2026-08-07 18:05, 2026-08-08 18:05, 2026-08-09 18:05, 2026-08-10 18:05, 2026-08-11 18:05, 2026-08-12 18:05, 2026-08-13 18:05, 2026-08-14 18:05, 2026-08-15 18:05, 2026-08-16 18:05, 2026-08-17 18:05, 2026-08-18 18:05, 2026-08-19 18:05, 2026-08-20 18:05, 2026-08-21 18:05, 2026-08-22 18:05, 2026-08-23 18:05, 2026-08-24 18:05, 2026-08-25 18:05, 2026-08-26 18:05, 2026-08-27 18:05, 2026-08-28 18:05, 2026-08-29 18:05, 2026-08-30 18:05, 2026-08-31 18:05, 2026-09-01 18:05, 2026-09-02 18:05, 2026-09-03 18:05, 2026-09-04 18:05, 2026-09-05 18:05, 2026-09-07 12:05, 2026-09-07 18:05, 2026-09-08 18:05, 2026-09-09 18:05, 2026-09-10 18:05, 2026-09-11 18:05, 2026-09-12 18:05, 2026-09-13 18:05, 2026-09-14 18:05, 2026-09-15 18:05, 2026-09-16 18:05, 2026-09-17 18:05, 2026-09-18 18:05, 2026-09-19 18:05, 2026-09-20 18:05, 2026-09-21 18:05, 2026-09-22 18:05
Echelon SSH connection attempt
88.213.215.2 is listed on the Echelon SSH connection attempt blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-08-19 09:35:00.655000
Was present on blacklist at: 2026-08-13 09:35, 2026-08-14 09:35, 2026-08-15 09:35, 2026-08-16 09:35, 2026-08-17 09:35, 2026-08-18 09:35, 2026-08-19 09:35

Threat categories

TLRoleCategoryDetails
44 src scan port: 22, 23
Warden events (138)
2026-09-22
ReconScanning (node.ce2b59): 5
2026-09-12
ReconScanning (node.9c1411): 1
2026-09-10
ReconScanning (node.ce2b59): 16
ReconScanning (node.9c1411): 7
2026-09-09
ReconScanning (node.ce2b59): 1
ReconScanning (node.9c1411): 2
2026-09-08
ReconScanning (node.ce2b59): 5
ReconScanning (node.9c1411): 5
2026-09-07
ReconScanning (node.ce2b59): 1
ReconScanning (node.9c1411): 3
2026-08-31
ReconScanning (node.9c1411): 4
2026-08-30
ReconScanning (node.9c1411): 1
2026-08-28
ReconScanning (node.ce2b59): 2
2026-08-27
ReconScanning (node.9c1411): 1
2026-08-26
ReconScanning (node.9c1411): 1
2026-08-25
ReconScanning (node.ce2b59): 1
2026-08-24
ReconScanning (node.ce2b59): 1
2026-08-16
ReconScanning (node.9c1411): 2
2026-08-13
ReconScanning (node.ce2b59): 3
ReconScanning (node.9c1411): 1
2026-08-12
ReconScanning (node.9c1411): 2
ReconScanning (node.ce2b59): 7
2026-08-11
ReconScanning (node.ce2b59): 6
ReconScanning (node.9c1411): 2
2026-08-10
AttemptLogin (node.d2ecc6): 1
ReconScanning (node.ce2b59): 4
2026-08-09
ReconScanning (node.ce2b59): 23
2026-08-08
ReconScanning (node.ce2b59): 21
2026-08-06
ReconScanning (node.ce2b59): 3
2026-08-05
ReconScanning (node.ce2b59): 3
2026-08-04
ReconScanning (node.ce2b59): 3
Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-09-22 09:22:20}
Percent days seen: 93 %
Networks: STRIKEPROXY, PROXYRACK, BOTTINGTOOLS, BIRDPROXIES, 711PROXY, MASKIFY, BYTEPROXIES, KOOKEY, PROXYWING, THORDATA, FLASHPROXY, FLOPPYDATA, THUNDERPROXY, UNKNOWNPROXIES, DATAIMPULSE, NSOCKS, AKE.NET, SHIFTER, SMARTPROXY, NOVADA
Details: https://layer3intel.com/context/88.213.215.2
Origin AS
AS61071 - NETBOX-AS
BGP Prefix
88.213.214.0/23
geo
Bulgaria
🕑 Europe/Sofia
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
88.213.214.0 - 88.213.215.255
last_activity
2026-09-22 12:44:24
last_warden_event
2026-09-22 12:44:24
rep
0.41768648781328344
reserved_range
0
Shodan's InternetDB
Open ports: 503, 2000, 8291
Tags: –
CPEs: cpe:/a:apache:http_server, cpe:/o:mikrotik:routeros:6.49.18
ts_added
2026-08-04 16:20:37.412000
ts_last_update
2026-09-22 16:20:40.197000

Warden event timeline

DShield event timeline

Presence on blacklists