IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (13)
- 2026-08-30
-
- ReconScanning (node.ce2b59): 1
- 2026-08-28
-
- ReconScanning (node.86eb21): 1
- 2026-08-14
-
- ReconScanning (node.f90c6b): 4
- ReconScanning (node.368407): 3
- 2026-08-01
-
- ReconScanning (node.f90c6b): 2
- ReconScanning (node.368407): 2
- DShield reports (IP summary, reports)
- 2026-08-08
- Number of reports: 220
- Distinct targets: 220
- 2026-08-09
- Number of reports: 440
- Distinct targets: 220
- 2026-08-10
- Number of reports: 440
- Distinct targets: 220
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 25 | src | scan | port: many |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.42.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-30 08:13:24
- last_warden_event
- 2026-08-30 08:13:24
- rep
- 0.004483241751563893
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 17, 21, 49, 65, 70, 95, 102, 119, 143, 179, 189, 225, 263, 389, 453, 554, 555, 771, 993, 1023, 1604, 1723, 1801, 1883, 1954, 1962, 1977, 2003, 2008, 2030, 2121, 2222, 2259, 2323, 2345, 2362, 2404, 2567, 2628, 2762, 3020, 3060, 3093, 3116, 3142, 3179, 3192, 3299, 3558, 3792, 3794, 3841, 4000, 4022, 4157, 4321, 4430, 4433, 4457, 4572, 4840, 4911, 5025, 5122, 5173, 5227, 5263, 5269, 5278, 5440, 5906, 6001, 6036, 6331, 6379, 6432, 6601, 6667, 6668, 7001, 7007, 7218, 7373, 7634, 8019, 8028, 8039, 8046, 8048, 8060, 8063, 8081, 8087, 8099, 8137, 8195, 8250, 8343, 8382, 8450, 8452, 8488, 8500, 8513, 8532, 8548, 8554, 8575, 8599, 8649, 8706, 8815, 8827, 8865, 8880, 8884, 8988, 9002, 9012, 9025, 9036, 9054, 9107, 9114, 9135, 9146, 9185, 9187, 9203, 9251, 9350, 9443, 9480, 9633, 9638, 9658, 9758, 9876, 9999, 10005, 10051, 10134, 10256, 10554, 10911, 11182, 11495, 12000, 12088, 12106, 12193, 12206, 12225, 12275, 12277, 12289, 12292, 12306, 12336, 12345, 12380, 12397, 12438, 12455, 12467, 12481, 12503, 12512, 12582, 12669, 12902, 14403, 14897, 15401, 15443, 15466, 16018, 16098, 16601, 16667, 17102, 18016, 18077, 19000, 19018, 20256, 20942, 21100, 21257, 21263, 21285, 21288, 21292, 21295, 21298, 22022, 22556, 22673, 23023, 25002, 25565, 26326, 27015, 28043, 30003, 30111, 32303, 32764, 32816, 35100, 37777, 38314, 38648, 41107, 41800, 42208, 42235, 43691, 44158, 48719, 49501, 50100, 51003, 53800, 54138, 54445, 54849, 55490, 55553, 57582, 57788, 58532, 58603, 60129, 60443, 61393, 61613, 63260, 63443, 64301, 64309
- Tags: honeypot, videogame
- CPEs: cpe:/a:xiongmaitech:uc-httpd:1.0.0, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.4, cpe:/a:microsoft:internet_information_services, cpe:/a:openbsd:openssh:7.4rnn, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:5.3, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:apache:subversion, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:microsoft:qotd::::en
- ts_added
- 2026-08-01 07:54:25.120000
- ts_last_update
- 2026-08-31 07:54:32.793000
Warden event timeline
DShield event timeline
Presence on blacklists

