IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (19)
- 2026-08-28
-
- ReconScanning (node.f90c6b): 2
- ReconScanning (node.368407): 1
- 2026-08-15
-
- ReconScanning (node.368407): 2
- ReconScanning (node.f90c6b): 2
- 2026-08-10
-
- ReconScanning (node.f90c6b): 1
- 2026-08-09
-
- ReconScanning (node.f90c6b): 2
- 2026-08-08
-
- ReconScanning (node.86eb21): 3
- 2026-08-07
-
- ReconScanning (node.86eb21): 3
- 2026-08-01
-
- ReconScanning (node.368407): 2
- ReconScanning (node.f90c6b): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 44 | src | scan |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.40.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-28 17:28:14
- last_warden_event
- 2026-08-28 17:28:14
- rep
- 0.01072843449392935
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 19, 53, 79, 102, 131, 189, 243, 264, 427, 444, 448, 465, 772, 831, 1023, 1025, 1099, 1355, 1453, 1515, 1800, 1911, 1973, 2008, 2053, 2081, 2087, 2134, 2156, 2222, 2226, 2345, 2404, 2525, 2628, 3010, 3058, 3083, 3086, 3096, 3123, 3154, 3211, 3352, 3409, 3552, 3553, 3922, 4000, 4022, 4064, 4157, 4282, 4506, 4550, 4646, 4840, 4949, 5010, 5011, 5022, 5122, 5123, 5173, 5269, 5440, 5650, 5853, 5858, 6070, 6405, 6440, 6488, 6560, 6667, 6697, 6700, 7086, 7171, 7415, 8107, 8126, 8141, 8143, 8163, 8176, 8184, 8193, 8243, 8291, 8315, 8317, 8452, 8500, 8502, 8554, 8557, 8606, 8705, 8808, 8845, 8858, 8882, 8889, 9042, 9110, 9137, 9175, 9211, 9249, 9280, 9398, 9633, 9761, 9876, 9908, 9955, 10009, 10017, 10134, 10181, 10210, 11112, 11300, 12105, 12107, 12188, 12195, 12220, 12246, 12301, 12326, 12329, 12353, 12406, 12478, 12479, 12490, 12548, 12575, 13711, 14089, 14873, 14875, 16003, 16052, 16094, 16402, 17554, 18008, 18071, 18079, 18081, 18245, 19759, 20000, 20182, 20880, 21238, 21252, 21256, 21274, 21302, 21322, 21324, 22084, 23159, 28193, 30003, 30006, 30112, 30892, 32101, 32469, 32588, 34361, 34795, 36376, 39903, 40471, 41800, 44158, 44302, 44500, 45667, 46507, 49793, 50000, 50103, 50106, 51200, 52718, 55080, 55554, 59012, 59278, 61616
- Tags: –
- CPEs: cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.0, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:dubbo
- ts_added
- 2026-08-01 23:12:18.470000
- ts_last_update
- 2026-08-30 23:12:20.619000
Warden event timeline
DShield event timeline
Presence on blacklists

