IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (11)
- 2026-08-09
-
- ReconScanning (node.86eb21): 2
- 2026-08-07
-
- ReconScanning (node.f90c6b): 3
- 2026-08-05
-
- ReconScanning (node.f90c6b): 2
- 2026-07-09
-
- ReconScanning (node.f90c6b): 1
- 2026-07-08
-
- ReconScanning (node.f90c6b): 1
- 2026-07-07
-
- ReconScanning (node.f90c6b): 1
- 2026-06-09
-
- ReconScanning (node.f90c6b): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 44 | src | — |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.40.0.0/15
- dshield
- []
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-09 23:43:15
- last_warden_event
- 2026-08-09 23:43:15
- rep
- 0.0
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 43, 79, 102, 111, 113, 143, 179, 221, 264, 389, 462, 513, 548, 587, 773, 886, 992, 999, 1023, 1028, 1103, 1153, 1414, 1443, 1455, 1515, 1723, 1800, 1962, 1965, 1985, 1986, 2003, 2008, 2057, 2067, 2081, 2121, 2154, 2404, 2701, 2985, 3050, 3056, 3070, 3075, 3086, 3091, 3098, 3143, 3169, 3171, 3177, 3182, 3186, 3260, 3268, 3388, 3400, 3410, 3531, 3552, 3557, 3952, 4147, 4157, 4160, 4282, 4443, 4457, 4643, 4786, 4840, 4899, 4949, 5010, 5160, 5201, 5222, 5232, 5241, 5272, 5432, 5672, 5858, 5911, 5986, 6308, 6432, 6500, 6514, 6668, 6887, 7171, 7338, 7415, 7434, 7634, 7801, 7819, 8030, 8035, 8036, 8039, 8077, 8085, 8100, 8101, 8146, 8157, 8162, 8173, 8177, 8193, 8249, 8350, 8415, 8421, 8423, 8428, 8436, 8447, 8455, 8464, 8465, 8501, 8571, 8575, 8705, 8728, 8805, 8826, 8844, 8857, 8862, 8868, 9042, 9053, 9055, 9092, 9095, 9101, 9102, 9103, 9136, 9139, 9159, 9197, 9201, 9205, 9207, 9247, 9333, 9418, 9501, 9633, 9761, 9810, 9876, 9898, 9943, 9992, 9998, 10023, 10043, 10044, 10134, 10254, 10554, 10938, 11027, 11111, 11300, 11601, 12088, 12109, 12171, 12178, 12202, 12247, 12276, 12285, 12291, 12327, 12345, 12351, 12396, 12425, 12427, 12446, 12448, 12452, 12467, 12486, 12508, 12541, 12582, 13128, 14344, 14880, 15040, 15502, 16033, 16044, 16072, 16075, 16098, 18044, 18045, 18051, 18064, 18081, 18110, 18200, 18245, 19084, 19090, 19998, 20000, 20892, 21084, 21241, 21242, 21262, 21281, 21308, 21309, 24579, 25082, 25782, 25952, 27015, 30003, 30005, 30101, 30110, 30452, 30678, 31337, 34225, 35531, 36882, 37452, 39684, 40403, 40450, 43008, 44310, 44336, 44340, 44399, 44676, 45677, 46000, 46167, 47989, 50998, 51007, 52533, 52931, 54138, 54898, 55443, 55550, 55555, 57781, 58418, 59464, 60000, 60129, 61647, 62137, 63003, 63131, 63256, 63307, 65004
- Tags: videogame, honeypot
- CPEs: cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:X.X, cpe:/o:canonical:ubuntu_linux, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:8.6, cpe:/a:eset:nod32_antivirus:99, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:5.3
- ts_added
- 2026-05-07 05:04:47.837000
- ts_last_update
- 2026-08-31 05:09:28.651000
Warden event timeline
DShield event timeline
Presence on blacklists

