IP address

Search at other sites:
.002121.40.44.67
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.40.44.67 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-27 12:14:20.513000
Was present on blacklist at: 2026-08-06 12:14

Threat categories

TLRoleCategoryDetails
25 src scan port: many
Warden events (6)
2026-08-30
ReconScanning (node.ce2b59): 1
2026-08-15
ReconScanning (node.86eb21): 1
2026-08-08
ReconScanning (node.f90c6b): 1
2026-08-06
ReconScanning (node.f90c6b): 3
DShield reports (IP summary, reports)
2026-08-06
Number of reports: 236
Distinct targets: 236
2026-08-07
Number of reports: 236
Distinct targets: 236
2026-08-09
Number of reports: 656
Distinct targets: 436
2026-08-10
Number of reports: 656
Distinct targets: 436
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-30 08:15:42
last_warden_event
2026-08-30 08:15:42
rep
0.0024284226154304145
reserved_range
0
Shodan's InternetDB
Open ports: 21, 23, 70, 98, 104, 119, 122, 179, 264, 502, 513, 515, 632, 943, 998, 1023, 1099, 1153, 1177, 1200, 1234, 1250, 1388, 1515, 1723, 2000, 2008, 2063, 2066, 2095, 2111, 2121, 2122, 2154, 2332, 2345, 2363, 2404, 2455, 3001, 3049, 3073, 3081, 3092, 3109, 3111, 3190, 3269, 3299, 3306, 3551, 3780, 3852, 4022, 4063, 4080, 4157, 4242, 4282, 4369, 4506, 4523, 4530, 4899, 5222, 5273, 5915, 5938, 6020, 6440, 6667, 6668, 6699, 7006, 7007, 7079, 7086, 7171, 7218, 7331, 7422, 8009, 8011, 8016, 8050, 8070, 8074, 8095, 8104, 8139, 8153, 8154, 8162, 8166, 8179, 8192, 8200, 8388, 8500, 8505, 8524, 8528, 8545, 8554, 8590, 8643, 8666, 8709, 8731, 8771, 8787, 8790, 8831, 8847, 8855, 8859, 8862, 8915, 9014, 9131, 9133, 9155, 9213, 9222, 9306, 9418, 9443, 9444, 9611, 9633, 9696, 9700, 9754, 9773, 9861, 9993, 10010, 10037, 10050, 10052, 10134, 10390, 10810, 10909, 11084, 11110, 12110, 12190, 12195, 12268, 12271, 12288, 12339, 12345, 12355, 12428, 12442, 12467, 12472, 12493, 12495, 12497, 12516, 12567, 12580, 13333, 13780, 15503, 16026, 16061, 16402, 16667, 17000, 17771, 17779, 18018, 18027, 18043, 18102, 20084, 20880, 20892, 21262, 21288, 21313, 23023, 24181, 25005, 25565, 25797, 27015, 30892, 32443, 32764, 37059, 37777, 39675, 39769, 40220, 40790, 40926, 44302, 44400, 45333, 45668, 45714, 48001, 49684, 50104, 53985, 54160, 54961, 55451, 56206, 60129, 61616, 61803, 62856
Tags: proxy, honeypot, videogame
CPEs: cpe:/a:apache:dubbo, cpe:/a:eset:nod32_antivirus:99, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:microsoft:windows, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:5.3, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:openbsd:openssh:7.6p1
ts_added
2026-08-06 12:14:14.258000
ts_last_update
2026-08-31 12:14:20.139000

Warden event timeline

DShield event timeline

Presence on blacklists