IP address

Search at other sites:
.000121.40.43.26
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.40.43.26 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-30 05:11:51.262000
Was present on blacklist at: 2026-07-19 05:04, 2026-08-23 05:05

Threat categories

TLRoleCategoryDetails
No threat category tags assigned
Warden events (10)
2026-08-16
ReconScanning (node.ce2b59): 1
2026-08-09
ReconScanning (node.f90c6b): 1
2026-08-05
ReconScanning (node.f90c6b): 1
2026-07-08
ReconScanning (node.f90c6b): 1
2026-07-06
ReconScanning (node.86eb21): 1
2026-06-15
ReconScanning (node.f90c6b): 2
ReconScanning (node.368407): 2
2026-06-06
ReconScanning (node.f90c6b): 1
DShield reports (IP summary, reports)
2026-06-04
Number of reports: 440
Distinct targets: 220
2026-06-17
Number of reports: 440
Distinct targets: 220
2026-07-02
Number of reports: 596
Distinct targets: 224
2026-07-06
Number of reports: 18
Distinct targets: 18
2026-07-07
Number of reports: 18
Distinct targets: 18
2026-07-09
Number of reports: 220
Distinct targets: 220
2026-07-10
Number of reports: 220
Distinct targets: 220
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-16 22:42:48
last_warden_event
2026-08-16 22:42:48
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 13, 23, 100, 104, 119, 122, 139, 175, 177, 221, 427, 548, 636, 666, 902, 999, 1000, 1002, 1023, 1025, 1063, 1200, 1355, 1377, 1515, 1599, 1604, 1723, 1801, 1959, 1971, 2002, 2003, 2008, 2065, 2110, 2133, 2154, 2156, 2181, 2202, 2323, 2332, 2352, 2404, 2558, 2559, 2979, 3002, 3006, 3017, 3084, 3107, 3124, 3125, 3158, 3161, 3260, 3299, 3301, 3306, 3388, 3521, 4021, 4043, 4282, 4402, 4447, 4572, 4602, 4700, 4899, 4949, 5009, 5130, 5135, 5140, 5172, 5231, 5239, 5272, 5446, 5602, 5858, 6001, 6010, 6432, 6653, 6662, 6667, 6755, 7081, 7302, 7603, 7634, 7778, 7887, 7946, 8007, 8026, 8050, 8139, 8151, 8152, 8161, 8333, 8406, 8411, 8416, 8422, 8463, 8515, 8525, 8528, 8550, 8557, 8575, 8587, 8599, 8641, 8649, 8666, 8728, 8764, 8830, 8837, 8850, 8906, 9014, 9033, 9092, 9257, 9301, 9303, 9398, 9445, 9600, 9704, 9810, 9966, 10044, 10050, 10087, 10093, 10134, 10393, 10554, 11000, 11007, 12000, 12107, 12130, 12164, 12167, 12170, 12174, 12222, 12223, 12226, 12231, 12294, 12308, 12333, 12362, 12368, 12387, 12401, 12410, 12447, 12467, 12531, 12537, 12577, 14067, 14330, 14344, 16001, 16007, 16033, 16070, 16089, 18047, 18051, 18079, 18080, 18081, 18084, 18111, 18113, 18888, 20892, 21116, 21247, 21265, 21286, 21311, 21319, 23023, 24223, 27015, 30006, 30443, 32420, 32764, 33060, 33620, 34225, 35002, 36983, 37295, 37777, 40000, 40645, 41782, 43501, 45668, 46001, 46939, 47355, 47815, 47990, 48002, 49690, 50000, 50009, 50042, 51042, 51612, 52951, 54022, 54138, 55554, 56373, 56467, 57782, 58109, 60129, 60443, 61613, 61616, 63045, 63546, 63690, 64303, 64829, 64943
Tags: videogame, honeypot
CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:5.3, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:realvnc:realvnc:::enterprise
ts_added
2026-05-10 05:03:54.668000
ts_last_update
2026-08-31 05:08:52.804000

Warden event timeline

DShield event timeline

Presence on blacklists