IP address

Passive DNS

Tags:

IP blacklists

Threat categories

TL	Role	Category	Details
38	src	scan

Warden events (2)

2026-08-28: ReconScanning (node.86eb21): 2

Origin AS: AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix: 121.42.0.0/15
geo: China, Hangzhou; 🕑 Asia/Shanghai
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 121.40.0.0 - 121.43.255.255
last_activity: 2026-08-28 20:01:32
last_warden_event: 2026-08-28 20:01:32
rep: 0.004333127107404189
reserved_range: 0
Shodan's InternetDB: Open ports: 11, 13, 19, 26, 79, 100, 102, 104, 110, 111, 113, 119, 122, 175, 179, 190, 192, 389, 491, 502, 513, 587, 646, 771, 789, 873, 902, 994, 999, 1000, 1080, 1099, 1177, 1190, 1200, 1234, 1326, 1433, 1452, 1459, 1515, 1521, 1720, 1800, 1954, 1972, 1990, 2002, 2003, 2008, 2067, 2072, 2081, 2087, 2090, 2103, 2130, 2154, 2181, 2323, 2345, 2353, 2404, 2460, 2628, 2650, 2762, 3001, 3020, 3073, 3107, 3119, 3132, 3136, 3166, 3173, 3177, 3181, 3260, 3310, 3388, 3405, 3408, 3410, 3551, 3558, 3780, 4000, 4063, 4080, 4100, 4157, 4242, 4281, 4282, 4369, 4434, 4459, 4500, 4505, 4604, 4786, 4911, 5007, 5010, 5150, 5209, 5222, 5231, 5239, 5251, 5271, 5433, 5435, 5500, 5558, 5606, 5640, 5673, 5858, 5916, 5917, 5995, 5998, 6000, 6001, 6002, 6070, 6432, 6464, 6628, 6653, 6667, 6668, 7001, 7087, 7171, 7218, 7325, 7349, 7415, 7434, 7634, 7700, 7878, 8004, 8017, 8036, 8037, 8038, 8039, 8055, 8093, 8094, 8126, 8167, 8168, 8185, 8194, 8197, 8237, 8291, 8420, 8500, 8501, 8543, 8548, 8554, 8564, 8573, 8582, 8666, 8803, 8829, 8832, 8835, 8868, 8877, 8881, 8883, 8906, 8989, 9000, 9005, 9007, 9021, 9033, 9041, 9042, 9051, 9067, 9100, 9134, 9135, 9139, 9141, 9151, 9163, 9167, 9181, 9188, 9189, 9193, 9203, 9215, 9243, 9299, 9333, 9350, 9398, 9500, 9505, 9510, 9600, 9633, 9690, 9711, 9761, 9943, 9950, 10001, 10018, 10022, 10026, 10038, 10050, 10080, 10093, 10100, 10106, 10134, 10225, 10250, 10255, 10393, 10554, 11000, 11002, 11112, 11740, 11841, 12126, 12127, 12128, 12145, 12152, 12161, 12166, 12204, 12208, 12229, 12243, 12247, 12259, 12272, 12277, 12280, 12287, 12289, 12331, 12345, 12353, 12357, 12368, 12375, 12382, 12387, 12396, 12404, 12408, 12409, 12419, 12420, 12448, 12453, 12455, 12461, 12469, 12477, 12480, 12490, 12517, 12518, 12527, 12542, 12559, 12560, 12568, 12576, 12581, 12590, 13000, 13274, 13443, 14027, 14147, 14265, 14344, 14404, 14523, 14524, 15831, 16004, 16008, 16012, 16021, 16024, 16028, 16044, 16058, 16059, 16097, 17184, 18012, 18015, 18036, 18058, 18091, 18105, 18111, 18365, 19000, 19013, 19022, 20256, 21025, 21233, 21253, 21307, 21309, 21312, 21321, 21323, 21325, 21330, 22222, 22371, 22556, 23023, 25003, 25046, 25082, 25782, 27017, 27105, 29798, 30000, 30120, 30700, 31444, 32102, 32976, 33060, 33280, 34044, 34053, 34225, 34650, 35000, 35298, 37777, 40261, 40493, 41002, 42391, 44158, 44309, 44341, 44410, 44818, 45003, 45111, 45592, 47080, 47248, 48019, 48861, 50000, 50010, 50022, 50100, 50112, 50443, 51201, 51235, 51447, 53322, 53434, 53538, 54138, 54327, 55350, 55553, 57782, 57876, 58392, 60021, 60129, 60532, 62237, 63210; Tags: honeypot, proxy; CPEs: cpe:/a:openbsd:openssh:7.2p2, cpe:/o:microsoft:windows, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:X.X, cpe:/a:squid-cache:squid:3.5.8, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:cisco:ios, cpe:/a:cisco:ssh:3524665.35, cpe:/a:microsoft:internet_information_services, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:5.3, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:6.6.1p1
ts_added: 2026-08-28 20:02:18.579000
ts_last_update: 2026-08-30 20:02:20.335000

Warden event timeline

DShield event timeline

Presence on blacklists