IP address

Search at other sites:
.000121.40.45.99
Shodan(more info)
Passive DNS
Tags:
IP blacklists
UCEPROTECT L1
121.40.45.99 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-07-24 15:45:00.520000
Was present on blacklist at: 2026-07-17 23:45, 2026-07-18 07:45, 2026-07-18 15:45, 2026-07-19 15:45, 2026-07-20 07:45, 2026-07-20 15:45, 2026-07-20 23:45, 2026-07-21 07:45, 2026-07-21 15:45, 2026-07-21 23:45, 2026-07-22 07:45, 2026-07-22 15:45, 2026-07-22 23:45, 2026-07-23 07:45, 2026-07-23 15:45, 2026-07-24 07:45, 2026-07-24 15:45
Spamhaus XBL CBL
121.40.45.99 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-26 06:52:00.358000
Was present on blacklist at: 2026-07-29 06:52, 2026-08-12 06:52, 2026-08-19 06:52

Threat categories

TLRoleCategoryDetails
No threat category tags assigned
Warden events (10)
2026-08-09
ReconScanning (node.86eb21): 1
2026-08-07
ReconScanning (node.86eb21): 1
2026-07-31
ReconScanning (node.f90c6b): 2
ReconScanning (node.368407): 1
2026-07-18
ReconScanning (node.86eb21): 1
2026-07-09
ReconScanning (node.f90c6b): 2
2026-07-01
ReconScanning (node.86eb21): 2
DShield reports (IP summary, reports)
2026-07-06
Number of reports: 220
Distinct targets: 220
2026-07-07
Number of reports: 220
Distinct targets: 220
2026-07-24
Number of reports: 500
Distinct targets: 182
2026-08-06
Number of reports: 467
Distinct targets: 247
2026-08-07
Number of reports: 467
Distinct targets: 247
2026-08-09
Number of reports: 440
Distinct targets: 220
2026-08-10
Number of reports: 440
Distinct targets: 220
2026-08-16
Number of reports: 220
Distinct targets: 220
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-09 02:00:41
last_warden_event
2026-08-09 02:00:41
rep
0.0
reserved_range
0
Shodan's InternetDB
Open ports: 11, 13, 17, 21, 25, 43, 49, 53, 70, 79, 98, 110, 113, 179, 195, 443, 444, 488, 502, 513, 515, 541, 554, 646, 771, 772, 887, 992, 995, 1023, 1025, 1028, 1099, 1177, 1200, 1515, 1599, 1660, 1800, 1965, 1973, 1980, 1985, 2008, 2010, 2067, 2081, 2121, 2140, 2154, 2201, 2222, 2226, 2332, 2345, 2362, 2404, 2455, 2506, 2762, 3001, 3003, 3030, 3052, 3064, 3067, 3077, 3081, 3088, 3101, 3118, 3119, 3154, 3155, 3178, 3191, 3193, 3211, 3306, 3388, 3402, 3559, 3566, 3794, 4022, 4040, 4063, 4118, 4157, 4282, 4369, 4402, 4444, 4461, 4500, 4506, 4643, 4734, 4786, 4933, 5007, 5009, 5010, 5025, 5070, 5080, 5190, 5201, 5222, 5234, 5235, 5244, 5246, 5280, 5598, 5603, 5607, 5671, 5672, 5997, 6002, 6021, 6505, 6588, 6666, 6667, 6697, 7001, 7057, 7326, 7415, 7443, 7634, 7773, 8012, 8021, 8028, 8044, 8068, 8087, 8091, 8104, 8105, 8126, 8187, 8191, 8203, 8284, 8350, 8415, 8417, 8420, 8451, 8463, 8466, 8485, 8533, 8545, 8707, 8728, 8788, 8817, 8836, 8862, 8883, 9014, 9023, 9033, 9034, 9043, 9082, 9091, 9095, 9096, 9100, 9112, 9134, 9184, 9188, 9195, 9213, 9223, 9241, 9246, 9299, 9300, 9418, 9480, 9527, 9600, 9624, 9633, 9876, 9888, 9909, 10003, 10010, 10035, 10134, 10181, 10444, 11084, 11210, 11211, 11892, 12000, 12112, 12119, 12120, 12121, 12160, 12162, 12165, 12167, 12173, 12231, 12232, 12237, 12253, 12255, 12273, 12287, 12303, 12306, 12310, 12322, 12329, 12341, 12345, 12388, 12389, 12391, 12434, 12452, 12483, 12493, 12506, 12524, 12543, 12556, 12559, 12561, 12581, 14265, 14344, 14897, 14970, 16009, 16047, 16062, 16072, 16076, 16080, 16601, 16831, 18022, 18059, 18074, 18080, 18093, 18108, 19022, 19742, 19771, 20000, 20435, 20443, 20547, 20800, 20894, 21100, 21251, 21277, 21291, 21299, 21311, 22159, 22556, 22705, 25001, 27015, 27017, 28015, 29798, 30003, 30083, 30104, 31576, 32764, 32800, 32894, 33172, 34225, 35531, 37117, 37706, 37777, 39068, 40775, 40841, 42235, 42443, 42448, 43200, 43908, 44100, 44158, 44308, 44818, 45005, 45929, 49520, 50000, 50113, 51235, 53481, 54490, 55554, 56370, 57780, 60099, 60129, 61613, 61619, 62078, 63421, 63443
Tags: videogame, honeypot, eol-product
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:5.3, cpe:/o:microsoft:qotd::::en, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.5, cpe:/a:f5:nginx:1.22.1, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:eset:nod32_antivirus:99, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.9
ts_added
2026-07-01 06:51:59.961000
ts_last_update
2026-08-31 06:52:00.573000

Warden event timeline

DShield event timeline

Presence on blacklists