IP address

Search at other sites:

--47.98.176.238

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

47.98.176.238 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-17 03:10:04.095000
Was present on blacklist at: 2025-12-13 07:10, 2025-12-13 11:10, 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10, 2025-12-16 07:10, 2025-12-16 11:10, 2025-12-16 15:10, 2025-12-16 19:10, 2025-12-16 23:10, 2025-12-17 03:10

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

47.98.0.0/15

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

47.96.0.0 - 47.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 11, 15, 21, 25, 26, 49, 65, 79, 89, 102, 110, 111, 135, 143, 175, 179, 199, 311, 427, 449, 465, 513, 515, 632, 743, 771, 805, 830, 992, 993, 1000, 1012, 1111, 1153, 1188, 1195, 1414, 1433, 1455, 1458, 1521, 1883, 1911, 1962, 1969, 1982, 1984, 1985, 1990, 2000, 2001, 2003, 2008, 2010, 2051, 2154, 2222, 2226, 2232, 2248, 2323, 2382, 2455, 2566, 2628, 2761, 2850, 3001, 3008, 3054, 3078, 3086, 3087, 3114, 3122, 3140, 3147, 3153, 3194, 3221, 3260, 3269, 3306, 3388, 3389, 3552, 3553, 3557, 3790, 4064, 4104, 4150, 4157, 4190, 4200, 4282, 4435, 4457, 4463, 4500, 4505, 4506, 4543, 4821, 5001, 5025, 5089, 5222, 5232, 5247, 5263, 5269, 5432, 5454, 5557, 5568, 5598, 5602, 5672, 5853, 5918, 5938, 5993, 6001, 6002, 6003, 6022, 6513, 6514, 6588, 6633, 6799, 7001, 7015, 7071, 7218, 7415, 7434, 7443, 7445, 7548, 7634, 7779, 7980, 7998, 8009, 8052, 8087, 8109, 8144, 8146, 8154, 8181, 8182, 8189, 8199, 8285, 8291, 8322, 8430, 8434, 8457, 8493, 8494, 8513, 8545, 8554, 8562, 8567, 8649, 8826, 8834, 8861, 8880, 8881, 8889, 8890, 8912, 8980, 9001, 9002, 9019, 9024, 9030, 9037, 9051, 9066, 9091, 9092, 9156, 9161, 9169, 9201, 9306, 9418, 9445, 9600, 9923, 9943, 9998, 9999, 10006, 10066, 10134, 10348, 10443, 10810, 10943, 11000, 11027, 11300, 11688, 12000, 12112, 12115, 12118, 12122, 12140, 12143, 12148, 12195, 12200, 12215, 12218, 12224, 12231, 12269, 12280, 12286, 12296, 12321, 12322, 12326, 12341, 12357, 12384, 12397, 12439, 12449, 12459, 12496, 12530, 12562, 12902, 13333, 14524, 14873, 14905, 15123, 16012, 16025, 16050, 16065, 16077, 16089, 16316, 16403, 17070, 18019, 18064, 18078, 18104, 19013, 19017, 19082, 19090, 19100, 20208, 20880, 21100, 21233, 21306, 21310, 22556, 23023, 23184, 25001, 25002, 25565, 30003, 30479, 32101, 32444, 32764, 33060, 35000, 35100, 35251, 37777, 40000, 42420, 44021, 47990, 50160, 51235, 52200, 53400, 55443, 55554, 57785, 57787, 58378, 60129, 61613, 61616, 62443, 63256, 63260

Tags: proxy, honeypot

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:eset:nod32_antivirus:99, cpe:/a:microsoft:internet_information_services, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:openbsd:openssh:7.5, cpe:/a:cisco:ssh:3524665.35, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.4, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:8.0

ts_added

2025-12-13 07:54:03.112000

ts_last_update

2025-12-17 03:53:24.659000

Warden event timeline

DShield event timeline

Presence on blacklists