IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (17)
- 2026-08-14
-
- IntrusionUserCompromise (node.cfb4f7): 12
- 2026-08-10
-
- ReconScanning (node.f90c6b): 1
- 2026-08-08
-
- ReconScanning (node.86eb21): 1
- 2026-08-07
-
- ReconScanning (node.f90c6b): 2
- 2026-08-05
-
- ReconScanning (node.f90c6b): 1
- DShield reports (IP summary, reports)
- 2026-08-22
- Number of reports: 30
- Distinct targets: 30
- 2026-08-23
- Number of reports: 30
- Distinct targets: 30
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.40.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-14 04:05:20
- last_warden_event
- 2026-08-14 04:05:20
- rep
- 0.0001202152077725005
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 17, 21, 23, 37, 70, 79, 91, 92, 102, 104, 110, 111, 113, 179, 180, 195, 221, 264, 314, 347, 389, 443, 451, 452, 465, 503, 513, 556, 591, 593, 675, 771, 777, 789, 833, 947, 990, 992, 1013, 1023, 1027, 1080, 1099, 1177, 1200, 1234, 1291, 1337, 1388, 1433, 1446, 1447, 1515, 1554, 1599, 1604, 1700, 1723, 1800, 1801, 1883, 1950, 1962, 1966, 1987, 2000, 2003, 2008, 2049, 2060, 2068, 2081, 2087, 2107, 2111, 2133, 2154, 2195, 2202, 2209, 2220, 2221, 2222, 2225, 2250, 2404, 2423, 2455, 2550, 2570, 2761, 2985, 3001, 3009, 3016, 3042, 3058, 3060, 3064, 3065, 3069, 3093, 3098, 3100, 3105, 3116, 3124, 3146, 3155, 3168, 3169, 3183, 3187, 3194, 3268, 3269, 3299, 3306, 3310, 3365, 3389, 3500, 3503, 3551, 3553, 3590, 4000, 4063, 4080, 4117, 4157, 4242, 4282, 4321, 4369, 4434, 4444, 4451, 4459, 4500, 4550, 4602, 4700, 5004, 5006, 5007, 5025, 5090, 5135, 5172, 5222, 5227, 5240, 5242, 5253, 5261, 5272, 5444, 5594, 5599, 5600, 5602, 5608, 5664, 5672, 5680, 5905, 5906, 5917, 5999, 6000, 6001, 6002, 6006, 6020, 6363, 6379, 6633, 6653, 6998, 7000, 7018, 7084, 7087, 7349, 7415, 7434, 7443, 7473, 7493, 7510, 8009, 8041, 8055, 8061, 8062, 8076, 8087, 8089, 8097, 8100, 8127, 8129, 8132, 8150, 8152, 8157, 8158, 8162, 8164, 8165, 8168, 8171, 8176, 8180, 8230, 8243, 8251, 8280, 8284, 8291, 8317, 8343, 8384, 8402, 8435, 8446, 8462, 8467, 8473, 8475, 8494, 8500, 8503, 8506, 8513, 8521, 8545, 8551, 8562, 8575, 8580, 8590, 8591, 8599, 8605, 8622, 8640, 8641, 8728, 8743, 8745, 8766, 8823, 8824, 8831, 8841, 8847, 8879, 8882, 8884, 8900, 8910, 8911, 9006, 9011, 9012, 9017, 9026, 9034, 9042, 9044, 9051, 9058, 9084, 9097, 9100, 9103, 9112, 9120, 9133, 9141, 9148, 9159, 9161, 9170, 9186, 9198, 9204, 9205, 9209, 9222, 9244, 9333, 9410, 9447, 9611, 9633, 9682, 9797, 9876, 9902, 9919, 9939, 9955, 9998, 9999, 10017, 10020, 10040, 10044, 10047, 10049, 10068, 10084, 10134, 10225, 10254, 10380, 10533, 10554, 10911, 10933, 11112, 11288, 11300, 11596, 11602, 11796, 12016, 12019, 12056, 12106, 12118, 12130, 12136, 12144, 12183, 12194, 12201, 12215, 12216, 12218, 12229, 12230, 12242, 12243, 12252, 12261, 12266, 12278, 12284, 12293, 12304, 12319, 12345, 12350, 12370, 12377, 12379, 12400, 12403, 12425, 12427, 12451, 12452, 12462, 12471, 12478, 12480, 12482, 12485, 12494, 12500, 12508, 12534, 12542, 12549, 12554, 12559, 12562, 12578, 13596, 14082, 14344, 15044, 15502, 15672, 16014, 16018, 16038, 16048, 16052, 16063, 16066, 16067, 16069, 16075, 16080, 16081, 16094, 16101, 16400, 16667, 17770, 17771, 17774, 17778, 18003, 18010, 18028, 18034, 18045, 18046, 18056, 18067, 18079, 18085, 18086, 18093, 18098, 18101, 18102, 18103, 18105, 18107, 18108, 18113, 18181, 19000, 19731, 20150, 20182, 20256, 20512, 21025, 21200, 21243, 21248, 21254, 21296, 21307, 21314, 21328, 21379, 21515, 22000, 22082, 22084, 22222, 22556, 22722, 23023, 23084, 25001, 25005, 25007, 25967, 26174, 27015, 28015, 28310, 28355, 29840, 30019, 30023, 30027, 35000, 35101, 35241, 35250, 35526, 35559, 36983, 37091, 37777, 40604, 43340, 44158, 44308, 44333, 44365, 44818, 46003, 48018, 49592, 49688, 49767, 50000, 50100, 51201, 51235, 54138, 55000, 55554, 56349, 57778, 57784, 58000, 60129, 61616, 62078, 62080, 62406, 63256, 64129, 65000, 65324
- Tags: honeypot, proxy
- CPEs: cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.4, cpe:/a:mysql:mysql, cpe:/a:openbsd:openssh:7.5, cpe:/a:vsftpd:vsftpd:1.2.2, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:8.6, cpe:/o:microsoft:windows, cpe:/a:realvnc:realvnc:::enterprise, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:8.2p1
- ts_added
- 2026-08-05 20:24:23.884000
- ts_last_update
- 2026-08-30 20:24:30.084000
Warden event timeline
DShield event timeline
Presence on blacklists

