IP address


--120.198.50.189
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane VNC RFB
120.198.50.189 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-09-15 14:10:00.873000
Was present on blacklist at: 2025-09-09 06:10, 2025-09-09 14:10, 2025-09-09 18:10, 2025-09-10 02:10, 2025-09-10 06:10, 2025-09-10 14:10, 2025-09-10 18:10, 2025-09-11 02:10, 2025-09-11 06:10, 2025-09-11 14:10, 2025-09-11 18:10, 2025-09-12 02:10, 2025-09-12 06:10, 2025-09-12 14:10, 2025-09-13 02:10, 2025-09-13 06:10, 2025-09-13 14:10, 2025-09-13 18:10, 2025-09-14 06:10, 2025-09-14 18:10, 2025-09-15 02:10, 2025-09-15 06:10, 2025-09-15 14:10
Spamhaus XBL CBL
120.198.50.189 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-09-16 06:10:53.637000
Was present on blacklist at: 2025-09-09 06:10
Origin AS
AS9808 - CMNET-GD
BGP Prefix
120.198.50.0/24
geo
China
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
120.192.0.0 - 120.255.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 5000, 5005, 5007, 5009, 8000, 8081, 8082, 8090
Tags: eol-product
CPEs: cpe:/a:microsoft:internet_information_services:10.0, cpe:/a:synology:diskstation_manager:7.1-42661, cpe:/a:sencha:ext_js, cpe:/a:apache:http_server, cpe:/a:f5:nginx:1.10.2, cpe:/a:microsoft:internet_information_services, cpe:/o:microsoft:windows, cpe:/a:f5:nginx
ts_added
2025-09-09 06:10:44.606000
ts_last_update
2025-09-18 06:10:50.851000

Warden event timeline

DShield event timeline

Presence on blacklists