IP address

Search at other sites:
.001121.40.47.190
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.40.47.190 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-27 05:13:08.472000
Was present on blacklist at: 2026-08-20 05:10, 2026-08-27 05:13

Threat categories

TLRoleCategoryDetails
38 src scan
Warden events (5)
2026-08-21
ReconScanning (node.86eb21): 2
2026-08-09
ReconScanning (node.f90c6b): 2
2026-08-06
ReconScanning (node.f90c6b): 1
DShield reports (IP summary, reports)
2026-08-05
Number of reports: 220
Distinct targets: 220
2026-08-09
Number of reports: 220
Distinct targets: 220
2026-08-10
Number of reports: 220
Distinct targets: 220
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-21 11:54:57
last_warden_event
2026-08-21 11:54:57
rep
0.001444375702468026
reserved_range
0
Shodan's InternetDB
Open ports: 15, 53, 111, 113, 135, 143, 195, 264, 343, 389, 427, 444, 480, 554, 887, 990, 1050, 1080, 1153, 1177, 1452, 1453, 1800, 2008, 2078, 2087, 2090, 2222, 2332, 2345, 2363, 2382, 2404, 2709, 3001, 3075, 3076, 3122, 3157, 3168, 3175, 3197, 3269, 3410, 3561, 4022, 4063, 4157, 4242, 4243, 4282, 4400, 4401, 4524, 4572, 4899, 4949, 5172, 5223, 5229, 5244, 5672, 5673, 5680, 5701, 5919, 5989, 5997, 6000, 6002, 6060, 6667, 7218, 7343, 7415, 7514, 7774, 8021, 8034, 8043, 8078, 8081, 8091, 8126, 8137, 8144, 8146, 8198, 8280, 8435, 8443, 8485, 8526, 8564, 8641, 8702, 8843, 8886, 8901, 9007, 9055, 9059, 9092, 9109, 9159, 9162, 9198, 9209, 9218, 9333, 9633, 9950, 9988, 9994, 9999, 10010, 10134, 10398, 10909, 10933, 10934, 11112, 12124, 12130, 12131, 12142, 12153, 12190, 12203, 12280, 12308, 12324, 12327, 12345, 12433, 12453, 12529, 12546, 12565, 12579, 12691, 14006, 14104, 14344, 14880, 15042, 15781, 16003, 16018, 16060, 16080, 16401, 16402, 17182, 18080, 18264, 18575, 20151, 20200, 20201, 20547, 21081, 21082, 21264, 21273, 21278, 21325, 21379, 22556, 24415, 25001, 25565, 30003, 30106, 31337, 31380, 31600, 32487, 32764, 33637, 34387, 37169, 39781, 48018, 48889, 49688, 50005, 51001, 51003, 53482, 55000, 55443, 55555, 57541, 58169, 58532, 59804, 61613, 62193, 64477
Tags: honeypot
CPEs: cpe:/a:dovecot:dovecot, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.2p2, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:5.3, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.5, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:6.2_hpn13v11, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:freebsd:freebsd
ts_added
2026-08-06 05:08:53.856000
ts_last_update
2026-08-31 05:11:24.607000

Warden event timeline

DShield event timeline

Presence on blacklists