IP address

Search at other sites:
.001121.40.40.105
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.40.40.105 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-30 15:58:45.365000
Was present on blacklist at: 2026-07-26 15:58

Threat categories

TLRoleCategoryDetails
50 src scan
Warden events (4)
2026-08-07
ReconScanning (node.f90c6b): 1
2026-07-12
ReconScanning (node.368407): 2
ReconScanning (node.f90c6b): 1
DShield reports (IP summary, reports)
2026-07-24
Number of reports: 558
Distinct targets: 220
2026-08-06
Number of reports: 19
Distinct targets: 19
2026-08-07
Number of reports: 19
Distinct targets: 19
2026-08-16
Number of reports: 16
Distinct targets: 16
2026-08-27
Number of reports: 184
Distinct targets: 27
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-07 20:12:00
last_warden_event
2026-08-07 20:12:00
rep
0.0005021159162050814
reserved_range
0
Shodan's InternetDB
Open ports: 25, 119, 190, 444, 488, 636, 1193, 1494, 2000, 2065, 2404, 3001, 3003, 3059, 3070, 3211, 3405, 3790, 4064, 4840, 4911, 5070, 5172, 5523, 5804, 5853, 6007, 6023, 6653, 6700, 7001, 7012, 7171, 7218, 7415, 8083, 8115, 8143, 8162, 8179, 8316, 8333, 8382, 8407, 8607, 8680, 8705, 8806, 8837, 8863, 8879, 9052, 9055, 9151, 9308, 9633, 9939, 9999, 10020, 10093, 10480, 10909, 12108, 12154, 12218, 12240, 12296, 12345, 12353, 12356, 12454, 12464, 12484, 12524, 12533, 12553, 12562, 14344, 16012, 16049, 16052, 16065, 17000, 17636, 18103, 20880, 20892, 21025, 21236, 21240, 21313, 22556, 23705, 27015, 34500, 34685, 34825, 35000, 40001, 44158, 45348, 49017, 50073, 50102, 51235, 55442, 55553, 55554, 56489, 58603, 60314, 62305, 63256, 64172
Tags: honeypot
CPEs: cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:oracle:weblogic_server:10.3.6.0, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:microsoft:windows, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.4
ts_added
2026-07-12 15:58:34.075000
ts_last_update
2026-08-31 15:58:42.066000

Warden event timeline

DShield event timeline

Presence on blacklists