IP address

Search at other sites:
.001121.41.100.68
Shodan(more info)
Passive DNS
Tags:
IP blacklists
Spamhaus XBL CBL
121.41.100.68 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-08-27 13:22:11.458000
Was present on blacklist at: 2026-08-20 13:22

Threat categories

TLRoleCategoryDetails
38 src scan
Warden events (3)
2026-08-21
ReconScanning (node.86eb21): 2
2026-08-06
ReconScanning (node.86eb21): 1
DShield reports (IP summary, reports)
2026-08-06
Number of reports: 440
Distinct targets: 220
2026-08-07
Number of reports: 440
Distinct targets: 220
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
121.40.0.0/15
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
121.40.0.0 - 121.43.255.255
last_activity
2026-08-21 11:53:44
last_warden_event
2026-08-21 11:53:44
rep
0.001444375702468026
reserved_range
0
Shodan's InternetDB
Open ports: 19, 49, 70, 111, 119, 135, 143, 179, 225, 389, 444, 485, 513, 515, 548, 591, 880, 888, 902, 943, 992, 1023, 1099, 1167, 1177, 1387, 1458, 1515, 1516, 1521, 1599, 1720, 1800, 1801, 1976, 1984, 1990, 2000, 2003, 2008, 2051, 2077, 2121, 2126, 2222, 2345, 2423, 2455, 2550, 3050, 3076, 3117, 3119, 3156, 3183, 3221, 3299, 3310, 3342, 4023, 4157, 4243, 4400, 4434, 4437, 4500, 5010, 5025, 5172, 5223, 5227, 5263, 5266, 5269, 5272, 5351, 5543, 5701, 5858, 5904, 5907, 5916, 5984, 6000, 6020, 6050, 6653, 6666, 6667, 7090, 7100, 7171, 7218, 7325, 8046, 8104, 8192, 8194, 8241, 8444, 8500, 8501, 8519, 8523, 8554, 8583, 8630, 8649, 8728, 8731, 8819, 8820, 9042, 9055, 9062, 9064, 9069, 9098, 9141, 9151, 9160, 9184, 9207, 9226, 9289, 9333, 9410, 9513, 9532, 9876, 9970, 9999, 10068, 10108, 10134, 10909, 11000, 11680, 12000, 12122, 12125, 12150, 12175, 12189, 12243, 12256, 12310, 12312, 12333, 12345, 12374, 12384, 12416, 12468, 12494, 12512, 12533, 12539, 12543, 12573, 12588, 12900, 14084, 14443, 14905, 15502, 15942, 16039, 16040, 16080, 16083, 17084, 18038, 18062, 18076, 19000, 20000, 20090, 20185, 20201, 20547, 20892, 21234, 21236, 21268, 21289, 21299, 21311, 23470, 25000, 25001, 25565, 26886, 27105, 28015, 30002, 30101, 31444, 32764, 33534, 35522, 36583, 36731, 38188, 40029, 42600, 43283, 43875, 47043, 47130, 47949, 50000, 50013, 50998, 51695, 54022, 54641, 54806, 55475, 55555, 57778, 60011, 60514, 62244, 64565
Tags: honeypot
CPEs: cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.5, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:7.4rnn, cpe:/a:openbsd:openssh:8.0, cpe:/o:microsoft:windows, cpe:/a:realvnc:realvnc:::enterprise, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:8.2p1
ts_added
2026-08-06 13:22:01.538000
ts_last_update
2026-08-31 13:22:10.074000

Warden event timeline

DShield event timeline

Presence on blacklists