IP address

Search at other sites:
.013121.40.43.154
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.40.43.154 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-28 14:52:10.742000
Was present on blacklist at: 2026-07-17 14:52, 2026-07-24 14:52

Threat categories

TLRoleCategoryDetails
47 src scan
Warden events (15)
2026-08-28
ReconScanning (node.f90c6b): 2
ReconScanning (node.368407): 2
2026-08-15
ReconScanning (node.368407): 2
ReconScanning (node.f90c6b): 1
2026-08-01
ReconScanning (node.368407): 4
ReconScanning (node.f90c6b): 2
2026-07-17
ReconScanning (node.86eb21): 2
DShield reports (IP summary, reports)
2026-07-31
Number of reports: 148
Distinct targets: 145
2026-08-01
Number of reports: 148
Distinct targets: 145
2026-08-05
Number of reports: 20
Distinct targets: 20
2026-08-16
Number of reports: 220
Distinct targets: 220
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-28 10:01:09
last_warden_event
2026-08-28 10:01:09
rep
0.012683613734251531
reserved_range
0
Shodan's InternetDB
Open ports: 11, 38, 53, 79, 86, 100, 102, 111, 311, 442, 462, 465, 485, 488, 554, 636, 666, 675, 789, 873, 888, 995, 1153, 1177, 1188, 1234, 1235, 1337, 1377, 1433, 1443, 1515, 1723, 1800, 1883, 1911, 1926, 1954, 1956, 1962, 1981, 1984, 2000, 2008, 2051, 2057, 2081, 2087, 2111, 2150, 2154, 2323, 2332, 2404, 2433, 2554, 2556, 2650, 2761, 3001, 3010, 3019, 3030, 3070, 3093, 3119, 3164, 3192, 3268, 3307, 3310, 3342, 3412, 3531, 3551, 3558, 3854, 3954, 4000, 4042, 4157, 4282, 4369, 4401, 4438, 4455, 4500, 4506, 4524, 4949, 5007, 5009, 5025, 5051, 5190, 5222, 5233, 5263, 5269, 5439, 5544, 5672, 5912, 5919, 5994, 6006, 6100, 6405, 6500, 6748, 7000, 7004, 7055, 7082, 7415, 7510, 7548, 7634, 7687, 7732, 7773, 8009, 8013, 8019, 8043, 8077, 8111, 8116, 8126, 8127, 8135, 8155, 8178, 8237, 8393, 8407, 8444, 8448, 8463, 8484, 8540, 8545, 8553, 8554, 8601, 8649, 8688, 8824, 8841, 8855, 8863, 8887, 8908, 8916, 8943, 9006, 9013, 9015, 9029, 9032, 9035, 9042, 9043, 9051, 9053, 9076, 9086, 9100, 9102, 9109, 9113, 9132, 9151, 9156, 9170, 9183, 9190, 9197, 9216, 9244, 9291, 9418, 9446, 9488, 9633, 9658, 9898, 9899, 9916, 9930, 9955, 9999, 10001, 10007, 10011, 10019, 10044, 10134, 10348, 10943, 11112, 11210, 11288, 11688, 12149, 12187, 12232, 12253, 12267, 12280, 12289, 12290, 12296, 12297, 12330, 12341, 12345, 12370, 12396, 12419, 12420, 12442, 12475, 12491, 12509, 12522, 12552, 12567, 12901, 14147, 14344, 14403, 14880, 15006, 15482, 15809, 16022, 16023, 16052, 16083, 16098, 16101, 16800, 17000, 17010, 17084, 17443, 17536, 17869, 18002, 18006, 18020, 18053, 18070, 18104, 18124, 18245, 19000, 19233, 20053, 20070, 20082, 20256, 21235, 21272, 21309, 21379, 21381, 22764, 22861, 23211, 24744, 25008, 25009, 25298, 27015, 29312, 29526, 30003, 30050, 30104, 30106, 30110, 30472, 32102, 32303, 36984, 37777, 39001, 40865, 42926, 43268, 44158, 44400, 44444, 44818, 45002, 45006, 45111, 49443, 50122, 51235, 51816, 52931, 53309, 53439, 54138, 56791, 57778, 59012, 60129, 61616, 62078, 63045, 63210, 63260
Tags: proxy, videogame, eol-product, honeypot
CPEs: cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:X.X, cpe:/o:microsoft:windows, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:8.0, cpe:/o:cisco:ios, cpe:/o:canonical:ubuntu_linux, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:cisco:ssh:3524665.35, cpe:/a:dovecot:dovecot, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:6.6.1
ts_added
2026-07-17 14:52:05.510000
ts_last_update
2026-08-31 14:52:10.497000

Warden event timeline

DShield event timeline

Presence on blacklists