IP address

Warden events (1)

2024-10-03

ReconScanning (node.cfb4f7): 1

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

116.132.0.0/15

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

116.128.0.0 - 116.191.255.255

last_activity

2024-10-03 20:52:34

last_warden_event

2024-10-03 20:52:34

rep

0.030952380952380953

reserved_range

0

Shodan's InternetDB

Open ports: 11, 15, 17, 19, 21, 23, 25, 43, 49, 53, 70, 79, 80, 82, 104, 110, 111, 175, 264, 427, 443, 447, 465, 502, 503, 515, 548, 554, 666, 675, 789, 873, 993, 1025, 1080, 1099, 1177, 1200, 1224, 1234, 1414, 1433, 1515, 1604, 1800, 1880, 1911, 2002, 2008, 2012, 2059, 2061, 2067, 2077, 2083, 2087, 2181, 2222, 2245, 2250, 2266, 2345, 2376, 2382, 2404, 2552, 2561, 2628, 2762, 3001, 3050, 3058, 3111, 3211, 3260, 3268, 3269, 3299, 3306, 3310, 3333, 3389, 3400, 3551, 3562, 3790, 3838, 4000, 4063, 4064, 4157, 4242, 4282, 4321, 4443, 4445, 4500, 4506, 4786, 4840, 4899, 4949, 4999, 5000, 5001, 5006, 5007, 5010, 5025, 5172, 5201, 5222, 5269, 5432, 5435, 5560, 5672, 5697, 5858, 5900, 5938, 5984, 5986, 6003, 6161, 6262, 6581, 6601, 6667, 6697, 7171, 7415, 7434, 7443, 7557, 7634, 7776, 8001, 8009, 8022, 8028, 8037, 8039, 8081, 8085, 8089, 8099, 8104, 8109, 8126, 8140, 8200, 8236, 8238, 8249, 8251, 8291, 8411, 8431, 8442, 8500, 8554, 8728, 8812, 8821, 8839, 8861, 8880, 9001, 9002, 9005, 9015, 9019, 9020, 9042, 9051, 9095, 9098, 9100, 9108, 9151, 9160, 9204, 9306, 9310, 9445, 9530, 9600, 9606, 9633, 9761, 9765, 9800, 9876, 9898, 9943, 9981, 9999, 10000, 10134, 10143, 10250, 10443, 10554, 10911, 11112, 11210, 11211, 11434, 12000, 13047, 14147, 14344, 16285, 18081, 19000, 19989, 20000, 20256, 20547, 21379, 23023, 25001, 25565, 27015, 27017, 28015, 30002, 30003, 31401, 32764, 33060, 39277, 41800, 42398, 44158, 44818, 49152, 50000, 50070, 50100, 50719, 51106, 52869, 54138, 55000, 55442, 55443, 55553, 55554, 61616, 63210

Tags: eol-product, proxy, honeypot

CPEs: cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:5.3, cpe:/a:realvnc:realvnc:::enterprise, cpe:/h:dlink:dls-2750u, cpe:/o:windriver:vxworks, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh, cpe:/a:openbsd:openssh:8.6, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:cisco:ssh:3524665.35, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.5

ts_added

2024-10-03 20:52:38.823000

ts_last_update

2024-10-04 20:52:40.347000

Warden event timeline

DShield event timeline