IP address

Search at other sites:
.159121.40.45.65
Shodan(more info)
Passive DNS
Tags:
IP blacklists
UCEPROTECT L1
121.40.45.65 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-08-30 07:45:00.580000
Was present on blacklist at: 2026-08-23 15:45, 2026-08-23 23:45, 2026-08-24 07:45, 2026-08-24 15:45, 2026-08-24 23:45, 2026-08-25 07:45, 2026-08-25 15:45, 2026-08-25 23:45, 2026-08-26 07:45, 2026-08-26 15:45, 2026-08-26 23:45, 2026-08-27 07:45, 2026-08-27 15:45, 2026-08-27 23:45, 2026-08-28 07:45, 2026-08-28 15:45, 2026-08-28 23:45, 2026-08-29 07:45, 2026-08-29 15:45, 2026-08-29 23:45, 2026-08-30 07:45

Threat categories

TLRoleCategoryDetails
40 src —
Warden events (2)
2026-08-09
ReconScanning (node.86eb21): 2
DShield reports (IP summary, reports)
2026-08-05
Number of reports: 440
Distinct targets: 220
2026-08-06
Number of reports: 42
Distinct targets: 42
2026-08-07
Number of reports: 42
Distinct targets: 42
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-09 17:22:44
last_warden_event
2026-08-09 17:22:44
rep
0.1591035847462855
reserved_range
0
Shodan's InternetDB
Open ports: 11, 21, 49, 53, 70, 111, 113, 175, 195, 234, 389, 402, 522, 548, 782, 789, 831, 873, 943, 947, 1023, 1025, 1028, 1099, 1177, 1190, 1364, 1414, 1460, 1800, 1833, 1909, 1911, 1986, 2048, 2062, 2072, 2083, 2087, 2222, 2226, 2338, 2345, 3014, 3023, 3099, 3102, 3136, 3156, 3164, 3187, 3260, 3503, 3572, 3793, 4022, 4064, 4100, 4155, 4157, 4242, 4282, 4294, 5007, 5009, 5070, 5120, 5252, 5256, 5274, 5433, 5494, 5596, 5672, 5721, 5853, 5908, 5984, 6002, 6022, 6380, 6511, 6544, 6550, 6633, 6666, 7687, 7822, 8033, 8047, 8134, 8238, 8250, 8435, 8453, 8454, 8554, 8567, 8643, 8700, 8708, 8859, 8865, 8868, 8912, 9051, 9092, 9101, 9145, 9207, 9306, 9633, 9658, 9704, 9761, 9872, 9918, 9998, 10024, 10029, 10134, 10324, 10480, 10554, 10721, 11000, 11007, 11184, 11288, 11680, 12103, 12189, 12191, 12200, 12229, 12234, 12241, 12287, 12344, 12345, 12350, 12359, 12398, 12399, 12419, 12432, 12438, 12466, 12532, 13361, 13380, 14288, 14401, 15000, 16009, 16064, 16084, 16091, 16443, 17247, 17682, 17783, 18025, 18059, 18065, 18072, 18073, 18080, 18081, 18091, 18098, 18107, 18112, 20018, 20030, 20080, 20417, 20782, 20880, 21025, 21083, 21232, 21236, 21273, 21330, 23023, 23437, 24406, 25003, 25318, 29545, 29814, 30008, 30023, 30029, 33060, 34331, 35000, 37777, 39016, 41800, 44158, 45444, 48002, 49210, 50042, 50073, 50443, 54861, 55475, 55504, 58721, 61014, 62078, 63256, 64683
Tags: honeypot
CPEs: cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.2p2, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:vsftpd:vsftpd:1.2.2, cpe:/a:apache:subversion, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:7.9, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.4, cpe:/a:eset:nod32_antivirus:99, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:8.2p1
ts_added
2026-08-06 05:08:58.298000
ts_last_update
2026-08-31 05:13:12.687000

Warden event timeline

DShield event timeline

Presence on blacklists