IP address

Search at other sites:

--120.232.255.238

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

120.232.255.238 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-15 11:10:03.731000
Was present on blacklist at: 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10

Origin AS

AS56040 - CMNET-GuangDong-AP

BGP Prefix

120.232.0.0/16

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

120.192.0.0 - 120.255.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 888, 3002, 3003, 5003, 5900, 8080, 10003, 10004, 10006, 10007, 10009, 10066, 11434, 30002, 30003, 30005, 30007, 30008

Tags: eol-product, ai

CPEs: cpe:/a:python:python, cpe:/a:python:python:3.12.4, cpe:/a:ollama:ollama:0.9.0, cpe:/a:encode:uvicorn, cpe:/a:f5:nginx, cpe:/a:python:python:3.12.9, cpe:/a:apache:http_server:2.4.62, cpe:/a:f5:nginx:1.27.5, cpe:/o:debian:debian_linux, cpe:/a:f5:nginx:1.27.4, cpe:/a:facebook:react, cpe:/a:palletsprojects:flask:3.1.3, cpe:/a:zeit:next.js

ts_added

2025-12-14 11:52:24.616000

ts_last_update

2025-12-15 11:52:30.253000

Warden event timeline

DShield event timeline

Presence on blacklists