IP address
Shodan(more info)

Passive DNS

- Warden events (4)
- 2026-08-28
-
- ReconScanning (node.368407): 2
- ReconScanning (node.f90c6b): 2
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 47 | src | scan |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.40.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-28 17:17:19
- last_warden_event
- 2026-08-28 17:17:19
- rep
- 0.012683613734251531
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 15, 23, 49, 53, 70, 100, 110, 135, 143, 175, 177, 195, 400, 427, 453, 465, 487, 541, 548, 555, 771, 789, 953, 998, 1025, 1080, 1099, 1177, 1195, 1429, 1433, 1451, 1453, 1457, 1800, 1801, 1883, 1911, 1926, 1947, 1951, 1957, 1962, 1965, 1979, 1980, 2002, 2008, 2048, 2061, 2067, 2079, 2087, 2090, 2181, 2233, 2345, 2363, 2404, 2506, 2569, 2701, 2761, 3001, 3090, 3097, 3104, 3145, 3157, 3176, 3269, 3301, 3552, 3570, 3838, 3842, 4010, 4043, 4063, 4244, 4250, 4321, 4505, 4572, 4643, 4725, 4786, 4899, 5009, 5025, 5123, 5190, 5201, 5235, 5249, 5251, 5269, 5432, 5435, 5440, 5456, 5542, 5567, 5593, 5671, 5853, 5906, 6001, 6002, 6010, 6264, 6432, 6503, 6565, 6590, 7004, 7011, 7016, 7085, 7415, 7434, 7443, 7493, 7634, 7774, 7782, 7801, 8014, 8028, 8038, 8043, 8053, 8073, 8099, 8104, 8110, 8127, 8134, 8140, 8147, 8160, 8162, 8182, 8239, 8241, 8251, 8286, 8317, 8408, 8417, 8422, 8451, 8452, 8455, 8554, 8575, 8584, 8649, 8708, 8728, 8791, 8808, 8815, 8845, 8864, 8886, 8911, 9003, 9010, 9020, 9032, 9068, 9078, 9105, 9133, 9152, 9158, 9160, 9172, 9191, 9193, 9194, 9197, 9220, 9306, 9333, 9345, 9389, 9398, 9399, 9441, 9447, 9462, 9530, 9700, 9761, 9876, 9898, 9926, 9998, 10020, 10034, 10037, 10045, 10052, 10065, 10123, 10134, 10554, 11084, 11180, 11210, 11211, 11288, 11596, 12000, 12016, 12109, 12111, 12114, 12118, 12125, 12141, 12155, 12177, 12202, 12205, 12206, 12212, 12232, 12233, 12242, 12243, 12268, 12271, 12293, 12310, 12314, 12321, 12342, 12345, 12356, 12367, 12390, 12414, 12440, 12441, 12502, 12503, 12524, 12538, 12541, 12544, 12548, 12556, 14265, 14330, 14344, 14825, 14873, 15502, 15831, 16016, 16024, 16025, 16055, 16070, 16087, 16094, 16667, 17082, 18028, 18068, 18094, 18099, 18105, 18181, 19000, 19016, 20000, 20001, 20200, 20790, 20800, 21002, 21116, 21172, 21232, 21293, 21297, 21315, 21320, 22022, 22556, 22963, 23023, 24084, 24905, 25006, 25565, 25952, 26561, 26612, 27017, 28818, 29798, 30002, 30005, 30131, 32701, 32764, 35000, 35251, 36223, 39545, 43501, 44158, 44332, 44341, 44399, 45002, 45668, 46001, 46110, 46928, 47349, 50000, 50080, 50101, 50103, 50104, 50879, 50996, 51007, 51112, 52931, 53806, 54138, 55000, 55080, 55443, 55550, 55554, 56885, 57787, 57788, 59443, 60129, 60257, 60476, 60759, 62192, 62443, 62806
- Tags: honeypot
- CPEs: cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:X.X, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.4, cpe:/o:canonical:ubuntu_linux, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:6.6.1
- ts_added
- 2026-08-28 17:12:31.371000
- ts_last_update
- 2026-08-31 17:12:40.352000
Warden event timeline
DShield event timeline

