IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (1)
- 2026-09-15
-
- AnomalyTraffic (node.6a1878): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | — |
- Origin AS
- AS132525 - CMNET-HEILONGJIANG-CN
- BGP Prefix
- 111.42.184.0/21
- geo
- China
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 111.0.0.0 - 111.63.255.255
- last_activity
- 2026-09-15 08:08:55
- last_warden_event
- 2026-09-15 08:08:55
- rep
- 0.0016812156568364323
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 444, 1080, 1344, 1723, 1800, 2001, 2003, 2081, 2083, 2087, 2323, 3000, 3001, 3011, 3299, 4000, 4150, 4433, 4434, 4444, 4445, 5001, 5009, 5010, 5090, 6000, 6001, 6010, 6432, 6443, 6581, 6601, 7002, 7443, 7878, 8000, 8002, 8009, 8020, 8021, 8026, 8060, 8077, 8083, 8085, 8089, 8090, 8099, 8100, 8200, 8443, 8500, 8600, 8834, 8843, 8880, 8888, 8889, 8890, 9000, 9063, 9080, 9090, 9092, 9110, 9113, 9116, 9140, 9185, 9443, 9500, 9550, 9800, 9888, 9992, 9999, 10001, 10011, 10201, 10205, 11443, 12113, 12345, 14900, 16010, 16030, 17000, 17771, 18033, 18081, 18087, 18098, 20000, 20050, 20880, 30002, 30009, 50000
- Tags: –
- CPEs: cpe:/a:f5:nginx
- ts_added
- 2026-09-15 08:09:28.816000
- ts_last_update
- 2026-09-20 08:09:35.081000
Warden event timeline
DShield event timeline
Presence on blacklists

