IP address

Search at other sites:
.000121.40.45.14
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.40.45.14 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-30 05:09:53.498000
Was present on blacklist at: 2026-07-12 05:04, 2026-07-19 05:04

Threat categories

TLRoleCategoryDetails
No threat category tags assigned
Warden events (8)
2026-08-09
ReconScanning (node.f90c6b): 1
2026-08-07
ReconScanning (node.f90c6b): 1
2026-07-31
ReconScanning (node.86eb21): 1
2026-07-09
ReconScanning (node.f90c6b): 1
2026-07-08
ReconScanning (node.f90c6b): 1
2026-06-17
AnomalyTraffic (node.ce2b59): 1
ReconScanning (node.ce2b59): 2
DShield reports (IP summary, reports)
2026-06-04
Number of reports: 161
Distinct targets: 161
2026-07-01
Number of reports: 74
Distinct targets: 74
2026-08-09
Number of reports: 16
Distinct targets: 16
2026-08-10
Number of reports: 16
Distinct targets: 16
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-09 00:12:20
last_warden_event
2026-08-09 00:12:20
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 11, 15, 21, 25, 102, 111, 113, 135, 143, 175, 221, 264, 389, 440, 443, 444, 465, 480, 513, 831, 902, 1025, 1454, 1458, 1515, 1521, 1883, 1911, 1950, 1957, 1959, 1978, 1983, 1985, 2008, 2049, 2059, 2067, 2085, 2096, 2200, 2323, 2376, 2404, 2423, 2444, 2554, 2568, 3010, 3062, 3074, 3079, 3103, 3106, 3149, 3150, 3155, 3158, 3168, 3182, 3269, 3299, 3345, 3407, 3566, 3780, 4000, 4282, 4369, 4449, 4466, 4602, 4786, 4911, 5003, 5007, 5009, 5190, 5222, 5243, 5269, 5384, 5432, 5620, 5822, 5917, 6001, 6002, 6021, 6308, 6667, 6688, 6748, 7799, 7979, 8025, 8029, 8031, 8038, 8041, 8094, 8119, 8138, 8165, 8176, 8179, 8195, 8230, 8283, 8432, 8443, 8452, 8488, 8500, 8545, 8563, 8584, 8600, 8637, 8641, 8649, 8666, 8702, 8709, 8731, 8811, 8860, 8899, 8913, 9005, 9016, 9041, 9042, 9091, 9095, 9105, 9108, 9121, 9153, 9160, 9165, 9166, 9251, 9253, 9441, 9454, 9458, 9507, 9633, 9663, 9804, 9928, 9999, 10019, 10038, 10039, 10043, 10045, 10100, 10123, 10134, 10225, 10398, 10444, 11211, 11401, 11596, 11920, 12000, 12103, 12112, 12114, 12127, 12145, 12151, 12189, 12242, 12243, 12302, 12306, 12309, 12316, 12336, 12345, 12360, 12365, 12426, 12451, 12478, 12482, 12492, 12503, 12538, 12543, 12570, 12629, 13041, 14344, 14901, 16034, 16037, 16041, 18055, 18061, 18200, 18341, 20150, 20182, 20800, 21002, 21025, 21116, 21248, 21278, 21280, 21281, 21284, 21313, 21400, 21850, 22556, 23023, 25001, 25084, 27017, 28720, 28818, 30006, 30122, 31020, 32080, 32800, 34388, 35100, 35554, 38952, 42125, 44304, 44308, 44818, 46099, 46862, 49686, 50000, 50998, 51376, 53481, 55064, 55554, 57761, 57778, 58443, 59443, 60036, 60129, 63210, 63256, 63408, 64036
Tags: honeypot
CPEs: cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:cisco:ios, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.0, cpe:/a:cisco:ssh:3524665.35, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:5.3, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:microsoft:exchange_server, cpe:/a:apache:subversion, cpe:/o:hp:hp-ux
ts_added
2026-05-10 05:03:54.697000
ts_last_update
2026-08-31 05:06:46.740000

Warden event timeline

DShield event timeline

Presence on blacklists