IP address

Warden events (1)

2024-09-30

ReconScanning (node.cfb4f7): 1

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

116.132.0.0/15

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

116.128.0.0 - 116.191.255.255

last_activity

2024-09-30 22:48:54

last_warden_event

2024-09-30 22:48:54

rep

0.02380952380952381

reserved_range

0

Shodan's InternetDB

Open ports: 11, 15, 17, 19, 21, 22, 23, 26, 49, 53, 70, 79, 104, 111, 113, 143, 175, 179, 195, 221, 225, 311, 389, 427, 502, 666, 771, 789, 873, 993, 1023, 1099, 1153, 1177, 1200, 1234, 1337, 1494, 1515, 1599, 1604, 1723, 1800, 1801, 1911, 1981, 2001, 2002, 2020, 2022, 2049, 2056, 2061, 2067, 2081, 2083, 2087, 2154, 2220, 2222, 2259, 2323, 2345, 2404, 2480, 2628, 2762, 3001, 3055, 3085, 3088, 3090, 3268, 3269, 3299, 3306, 3310, 3388, 3503, 3569, 3780, 3790, 3838, 3910, 4022, 4063, 4064, 4157, 4242, 4282, 4321, 4369, 4433, 4443, 4545, 4664, 4782, 4899, 4911, 4949, 5001, 5007, 5010, 5025, 5172, 5201, 5269, 5432, 5697, 5858, 5907, 5938, 5984, 5985, 5986, 6001, 6002, 6379, 6443, 6550, 6633, 6666, 6668, 6697, 6789, 7001, 7071, 7171, 7415, 7500, 7979, 8009, 8020, 8029, 8030, 8039, 8044, 8081, 8083, 8085, 8109, 8139, 8140, 8181, 8248, 8252, 8282, 8291, 8401, 8406, 8428, 8500, 8554, 8649, 8728, 8766, 8801, 8834, 8847, 8880, 8889, 8989, 9001, 9002, 9042, 9051, 9084, 9095, 9100, 9151, 9160, 9191, 9200, 9222, 9306, 9308, 9398, 9418, 9600, 9633, 9743, 9761, 9800, 9898, 9943, 9955, 9998, 9999, 10001, 10134, 10250, 10443, 10554, 10909, 11210, 11211, 11300, 12000, 12345, 14265, 14344, 16285, 16993, 17000, 18245, 19000, 20000, 20256, 20547, 21025, 21379, 23023, 23424, 27015, 28015, 30002, 30003, 31337, 32764, 35000, 39277, 41800, 42398, 47990, 49153, 50000, 50100, 51235, 52869, 54138, 54361, 55000, 55443, 55553, 55554, 60129, 61613, 62078, 63210

Tags: videogame, eol-product, honeypot, proxy

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:X.X, cpe:/a:mysql:mysql:5.5.24-log, cpe:/a:dovecot:dovecot, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh, cpe:/a:openbsd:openssh:7.5, cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:7.4, cpe:/h:dlink:dls-2750u, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:5.3

ts_added

2024-09-30 22:48:59.352000

ts_last_update

2024-10-04 22:49:00.270000

Warden event timeline

DShield event timeline