IP address

Warden events (1)

2024-09-30

ReconScanning (node.cfb4f7): 1

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

116.132.0.0/15

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

116.128.0.0 - 116.191.255.255

last_activity

2024-09-30 04:36:45

last_warden_event

2024-09-30 04:36:45

rep

0.02142857142857143

reserved_range

0

Shodan's InternetDB

Open ports: 17, 19, 21, 26, 37, 49, 70, 79, 82, 92, 102, 104, 111, 119, 131, 143, 179, 195, 221, 264, 389, 427, 443, 444, 448, 465, 502, 503, 587, 666, 789, 993, 995, 1022, 1023, 1153, 1200, 1224, 1234, 1337, 1388, 1400, 1414, 1433, 1515, 1599, 1723, 1741, 1800, 1880, 1911, 1926, 1962, 2002, 2008, 2030, 2079, 2081, 2083, 2087, 2154, 2181, 2200, 2222, 2245, 2323, 2351, 2376, 2404, 2455, 2560, 2626, 2628, 2761, 2762, 3001, 3050, 3075, 3101, 3115, 3260, 3268, 3269, 3299, 3301, 3306, 3333, 3352, 3388, 3389, 3407, 3409, 3522, 3552, 3749, 3790, 3838, 4000, 4157, 4242, 4321, 4369, 4433, 4443, 4664, 4782, 4786, 4840, 4911, 4949, 5006, 5009, 5010, 5025, 5172, 5201, 5222, 5435, 5591, 5672, 5697, 5858, 5986, 6000, 6001, 6002, 6379, 6443, 6633, 6653, 6664, 6666, 6667, 6668, 7001, 7080, 7171, 7218, 7415, 7434, 7548, 7634, 7654, 8001, 8006, 8009, 8021, 8030, 8031, 8039, 8071, 8087, 8089, 8099, 8103, 8112, 8126, 8139, 8140, 8181, 8200, 8443, 8500, 8575, 8649, 8802, 8807, 8819, 8824, 8830, 8834, 8873, 8880, 9001, 9002, 9025, 9042, 9044, 9046, 9051, 9091, 9092, 9100, 9306, 9398, 9418, 9443, 9595, 9600, 9606, 9633, 9663, 9761, 9800, 9898, 9998, 9999, 10000, 10134, 10143, 10250, 10554, 10911, 11112, 11210, 11300, 11371, 12000, 14265, 15301, 16285, 16993, 18245, 18553, 19000, 21379, 23023, 23424, 25001, 28015, 30002, 30003, 31337, 33060, 35000, 37215, 37777, 44158, 44818, 47990, 49152, 50000, 50100, 51235, 52869, 54138, 54361, 55443, 55553, 60129, 61613, 62078, 62200, 63210

Tags: eol-product, proxy, honeypot

CPEs: cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:5.3, cpe:/a:microsoft:internet_information_services, cpe:/a:openbsd:openssh, cpe:/a:f5:nginx, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.0, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.4, cpe:/a:mysql:mysql, cpe:/h:dlink:dls-2750u, cpe:/a:openbsd:openssh:6.6.1p1

ts_added

2024-09-30 04:36:48.652000

ts_last_update

2024-10-05 04:36:50.226000

Warden event timeline

DShield event timeline