IP address

Search at other sites:
--115.239.224.232
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane VNC RFB
115.239.224.232 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-09 14:10:01.015000
Was present on blacklist at: 2025-10-03 06:10, 2025-10-03 14:10, 2025-10-03 18:10, 2025-10-04 02:10, 2025-10-04 06:10, 2025-10-04 14:10, 2025-10-05 06:10, 2025-10-05 14:10, 2025-10-06 06:10, 2025-10-06 14:10, 2025-10-07 06:10, 2025-10-07 14:10, 2025-10-08 14:10, 2025-10-09 06:10, 2025-10-09 14:10
OTX pulses
[68e26440e0aa698e822e76bc] 2025-10-05 12:27:44.395000 | VNC honeypot logs for 2025/10/05
Author name:jnazario
Pulse modified:2025-10-05 12:27:44.395000
Indicator created:2025-10-05 12:27:45
Indicator role:None
Indicator title:
Indicator expiration:2025-11-04 12:00:00
[68e3b5affc55e4de4f594837] 2025-10-06 12:27:27.943000 | VNC honeypot logs for 2025/10/06
Author name:jnazario
Pulse modified:2025-10-06 12:27:27.943000
Indicator created:2025-10-06 12:27:28
Indicator role:None
Indicator title:
Indicator expiration:2025-11-05 12:00:00
[68e506d5683dc4ed53090fae] 2025-10-07 12:25:57.811000 | VNC honeypot logs for 2025/10/07
Author name:jnazario
Pulse modified:2025-10-07 12:25:57.811000
Indicator created:2025-10-07 12:25:59
Indicator role:None
Indicator title:
Indicator expiration:2025-11-06 12:00:00
[68e658308e49cf61e0146f94] 2025-10-08 12:25:20.751000 | VNC honeypot logs for 2025/10/08
Author name:jnazario
Pulse modified:2025-10-08 12:25:20.751000
Indicator created:2025-10-08 12:25:21
Indicator role:None
Indicator title:
Indicator expiration:2025-11-07 12:00:00
[68e7ad228de96133c37382eb] 2025-10-09 12:40:01.980000 | VNC honeypot logs for 2025/10/09
Author name:jnazario
Pulse modified:2025-10-09 12:40:01.980000
Indicator created:2025-10-09 12:40:03
Indicator role:None
Indicator title:
Indicator expiration:2025-11-08 12:00:00
[68e8fb9aa49cb3cfe1b22750] 2025-10-10 12:27:06.252000 | VNC honeypot logs for 2025/10/10
Author name:jnazario
Pulse modified:2025-10-10 12:27:06.252000
Indicator created:2025-10-10 12:27:07
Indicator role:None
Indicator title:
Indicator expiration:2025-11-09 12:00:00
[68ea4d0bc1821cedb663655d] 2025-10-11 12:26:51.905000 | VNC honeypot logs for 2025/10/11
Author name:jnazario
Pulse modified:2025-10-11 12:26:51.905000
Indicator created:2025-10-11 12:26:52
Indicator role:None
Indicator title:
Indicator expiration:2025-11-10 12:00:00
[68eb9e51c7c2189deeabc3ef] 2025-10-12 12:25:53.546000 | VNC honeypot logs for 2025/10/12
Author name:jnazario
Pulse modified:2025-10-12 12:25:53.546000
Indicator created:2025-10-12 12:25:54
Indicator role:None
Indicator title:
Indicator expiration:2025-11-11 12:00:00
[68ecf08bb0380d4b6c9f0cb9] 2025-10-13 12:28:59.723000 | VNC honeypot logs for 2025/10/13
Author name:jnazario
Pulse modified:2025-10-13 12:28:59.723000
Indicator created:2025-10-13 12:29:00
Indicator role:None
Indicator title:
Indicator expiration:2025-11-12 12:00:00
[68ef930b34b85802f90b236c] 2025-10-15 12:26:51.846000 | VNC honeypot logs for 2025/10/15
Author name:jnazario
Pulse modified:2025-10-15 12:26:51.846000
Indicator created:2025-10-15 12:26:52
Indicator role:None
Indicator title:
Indicator expiration:2025-11-14 12:00:00
[68f2363ddc21be1f913767bb] 2025-10-17 12:27:41.082000 | VNC honeypot logs for 2025/10/17
Author name:jnazario
Pulse modified:2025-10-17 12:27:41.082000
Indicator created:2025-10-17 12:27:42
Indicator role:None
Indicator title:
Indicator expiration:2025-11-16 12:00:00
Origin AS
AS58461 - CT-HangZhou-IDC
BGP Prefix
115.239.224.0/21
geo
China
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
115.224.0.0 - 115.239.255.255
last_activity
2025-10-17 16:33:31.052000
reserved_range
0
Shodan's InternetDB
Open ports: 22
Tags: –
CPEs: cpe:/a:openbsd:openssh:7.4
ts_added
2025-10-03 06:10:44.658000
ts_last_update
2025-10-23 06:10:50.271000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses