IP address
Shodan(more info)

Passive DNS

- Warden events (2)
- 2026-08-28
-
- ReconScanning (node.368407): 1
- ReconScanning (node.f90c6b): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 38 | src | scan |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.40.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-28 13:43:24
- last_warden_event
- 2026-08-28 13:43:24
- rep
- 0.00678068477972682
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 19, 23, 25, 37, 49, 65, 104, 121, 135, 175, 179, 182, 195, 243, 264, 451, 503, 548, 554, 587, 632, 666, 703, 771, 789, 830, 832, 902, 993, 1023, 1028, 1080, 1099, 1177, 1200, 1234, 1250, 1290, 1370, 1433, 1443, 1515, 1521, 1554, 1723, 1741, 1800, 1801, 1820, 1955, 2008, 2021, 2056, 2121, 2154, 2196, 2201, 2345, 2404, 2455, 2552, 2554, 2555, 2561, 2628, 2761, 2762, 2806, 3001, 3049, 3057, 3070, 3108, 3129, 3131, 3135, 3145, 3167, 3169, 3182, 3195, 3310, 3342, 3388, 3406, 3531, 3551, 3554, 3780, 3922, 4000, 4022, 4063, 4064, 4148, 4157, 4159, 4242, 4282, 4321, 4344, 4369, 4466, 4506, 4523, 4786, 4949, 4999, 5002, 5007, 5025, 5070, 5172, 5273, 5500, 5542, 5590, 5594, 5609, 5858, 5908, 5913, 5938, 5986, 6001, 6002, 6010, 6379, 6550, 6560, 6590, 6661, 6666, 6668, 6789, 6955, 7000, 7003, 7007, 7050, 7080, 7090, 7102, 7171, 7415, 7535, 7799, 7931, 8009, 8028, 8038, 8061, 8065, 8081, 8097, 8111, 8157, 8159, 8230, 8238, 8285, 8291, 8417, 8419, 8422, 8433, 8462, 8484, 8526, 8530, 8554, 8577, 8595, 8601, 8649, 8728, 8784, 8801, 8816, 8832, 8834, 8847, 8854, 8883, 8889, 9008, 9019, 9051, 9071, 9087, 9115, 9138, 9139, 9144, 9160, 9171, 9184, 9195, 9198, 9204, 9243, 9257, 9306, 9310, 9312, 9400, 9418, 9456, 9530, 9633, 9704, 9711, 9888, 9997, 9998, 10014, 10028, 10030, 10044, 10050, 11112, 11601, 11920, 12082, 12133, 12193, 12254, 12258, 12267, 12273, 12291, 12310, 12326, 12345, 12350, 12353, 12357, 12374, 12423, 12433, 12447, 12449, 12453, 12471, 12509, 12523, 12576, 14084, 14254, 14344, 15657, 16004, 16016, 16019, 16040, 16047, 16062, 16099, 16104, 16403, 16601, 18014, 18036, 18044, 18068, 18069, 18086, 18112, 18182, 18423, 18556, 19000, 20000, 20010, 20060, 20184, 20547, 21230, 21249, 21262, 21302, 21381, 22022, 22861, 23023, 23861, 24442, 25001, 25084, 25952, 27015, 27017, 28015, 28443, 29634, 30002, 31987, 32800, 33060, 35000, 35531, 35560, 38834, 39030, 40029, 41204, 41781, 44158, 44336, 44337, 44444, 44500, 45717, 45777, 46249, 48002, 49430, 49501, 50003, 50085, 50105, 50113, 50997, 50999, 51612, 52352, 53481, 53483, 55481, 55553, 56597, 58933, 60099, 60129, 60223, 61534, 61616, 62078, 63210, 63256, 65030, 65147
- Tags: eol-product, honeypot, videogame, proxy
- CPEs: cpe:/a:openbsd:openssh:7.2p2, cpe:/o:microsoft:windows, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:X.X, cpe:/a:microsoft:message_queuing, cpe:/a:vsftpd:vsftpd:3.0.2, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:cisco:ios, cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:6.6.1p1
- ts_added
- 2026-08-28 13:42:25.040000
- ts_last_update
- 2026-08-31 13:42:30.338000
Warden event timeline
DShield event timeline

