IP address

Warden events (1)

2024-09-27

ReconScanning (node.cfb4f7): 1

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

116.132.0.0/15

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

116.128.0.0 - 116.191.255.255

last_activity

2024-09-27 01:53:11

last_warden_event

2024-09-27 01:53:11

rep

0.014285714285714285

reserved_range

0

Shodan's InternetDB

Open ports: 13, 17, 19, 21, 23, 24, 25, 37, 43, 49, 53, 70, 79, 99, 110, 111, 113, 143, 175, 179, 195, 311, 340, 427, 503, 515, 548, 554, 666, 995, 999, 1023, 1099, 1200, 1224, 1311, 1414, 1433, 1515, 1599, 1604, 1723, 1800, 1801, 1880, 1883, 1911, 1926, 1935, 1962, 2000, 2008, 2067, 2081, 2083, 2087, 2121, 2245, 2323, 2345, 2375, 2404, 2455, 2561, 2709, 2761, 2762, 3001, 3005, 3050, 3061, 3069, 3097, 3101, 3102, 3260, 3268, 3269, 3299, 3301, 3306, 3310, 3388, 3389, 3503, 3542, 3551, 3552, 3749, 3780, 3790, 4000, 4022, 4063, 4242, 4321, 4369, 4434, 4500, 4506, 4786, 4899, 4911, 5006, 5007, 5009, 5010, 5025, 5172, 5201, 5222, 5269, 5432, 5560, 5672, 5673, 5697, 5900, 5910, 5938, 5984, 5986, 6000, 6001, 6009, 6379, 6443, 6667, 6668, 7071, 7171, 7218, 7415, 7443, 7465, 7548, 7557, 7654, 7779, 7887, 8001, 8009, 8022, 8039, 8043, 8081, 8084, 8085, 8087, 8105, 8126, 8139, 8140, 8181, 8291, 8402, 8406, 8407, 8423, 8500, 8545, 8575, 8649, 8728, 8804, 8833, 8834, 8843, 8848, 8856, 8880, 8889, 8993, 9000, 9001, 9002, 9012, 9024, 9033, 9091, 9092, 9095, 9097, 9098, 9151, 9300, 9306, 9309, 9418, 9443, 9530, 9600, 9606, 9633, 9663, 9898, 9943, 9999, 10000, 10001, 10250, 11112, 11210, 12000, 12345, 14265, 14344, 16285, 18553, 19000, 19989, 20000, 20256, 20547, 21025, 21027, 21379, 22000, 23023, 23424, 25001, 25565, 27015, 27017, 28015, 30002, 30003, 31401, 33060, 37215, 37777, 41800, 49152, 50000, 50100, 50719, 51106, 51235, 54138, 55443, 55553, 60010, 60129, 61613, 61616, 62078

Tags: honeypot, videogame, eol-product

CPEs: cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:php:php:5.6.40, cpe:/a:openbsd:openssh:5.3, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:8.0, cpe:/a:apache:subversion, cpe:/a:microsoft:internet_information_services, cpe:/a:openbsd:openssh:7.4, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.9, cpe:/h:cisco:aironet_1200, cpe:/a:f5:nginx, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:dovecot:dovecot, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh, cpe:/a:cisco:telnet, cpe:/a:realvnc:realvnc:::enterprise

ts_added

2024-09-27 01:53:16.188000

ts_last_update

2024-10-05 01:53:20.180000

Warden event timeline

DShield event timeline