IP address

Search at other sites:

--115.239.217.174

Shodan(more info)

Passive DNS

IP blacklists

DataPlane SSH login

115.239.217.174 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-19 18:10:01.290000
Was present on blacklist at: 2025-10-18 14:10, 2025-10-18 18:10, 2025-10-19 02:10, 2025-10-19 06:10, 2025-10-19 14:10, 2025-10-19 18:10

Origin AS

AS58461 - CT-HangZhou-IDC

BGP Prefix

115.239.208.0/20

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

115.224.0.0 - 115.239.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 22, 4000, 8888, 9010, 9011, 9033, 9036, 9038, 9040, 9041, 9042, 9043, 9045, 9049, 9999, 27017

Tags: ai, database, eol-product

CPEs: cpe:/a:openssl:openssl:1.1.1k, cpe:/a:mongodb:mongodb:7.0.16, cpe:/a:ollama:ollama:0.6.2, cpe:/a:zeit:next.js, cpe:/a:openbsd:openssh:8.0, cpe:/a:f5:nginx:1.14.1, cpe:/a:facebook:react

ts_added

2025-10-18 14:18:11.559000

ts_last_update

2025-10-19 18:18:47.695000

Warden event timeline

DShield event timeline

Presence on blacklists