IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (23)
- 2026-08-21
-
- IntrusionUserCompromise (node.cfb4f7): 9
- 2026-08-15
-
- ReconScanning (node.86eb21): 1
- 2026-08-08
-
- ReconScanning (node.f90c6b): 2
- 2026-08-07
-
- ReconScanning (node.86eb21): 1
- 2026-08-01
-
- ReconScanning (node.ce2b59): 2
- ReconScanning (node.86eb21): 2
- 2026-07-17
-
- ReconScanning (node.86eb21): 1
- 2026-07-15
-
- ReconScanning (node.f90c6b): 2
- ReconScanning (node.368407): 2
- 2026-07-08
-
- ReconScanning (node.f90c6b): 1
- DShield reports (IP summary, reports)
- 2026-07-31
- Number of reports: 552
- Distinct targets: 224
- 2026-08-01
- Number of reports: 552
- Distinct targets: 224
- 2026-08-05
- Number of reports: 440
- Distinct targets: 220
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | login | protocol: telnet port: 23 |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.42.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-21 20:24:13
- last_warden_event
- 2026-08-21 20:24:13
- rep
- 0.005178500158967814
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 17, 19, 21, 26, 37, 49, 53, 79, 86, 99, 102, 104, 110, 111, 113, 122, 135, 154, 175, 221, 444, 465, 502, 503, 554, 789, 808, 995, 1080, 1153, 1337, 1414, 1433, 1444, 1515, 1599, 1604, 1723, 1800, 1883, 1976, 1984, 2008, 2021, 2048, 2056, 2067, 2081, 2083, 2087, 2109, 2134, 2195, 2376, 2404, 2554, 2555, 2557, 2567, 2568, 2628, 2762, 3001, 3002, 3008, 3030, 3050, 3076, 3084, 3151, 3180, 3260, 3270, 3299, 3301, 3388, 3389, 3551, 3950, 4022, 4063, 4064, 4150, 4282, 4426, 4434, 4477, 4500, 4550, 4646, 4840, 4899, 4911, 5083, 5090, 5135, 5201, 5232, 5256, 5257, 5269, 5432, 5435, 5500, 5542, 5543, 5592, 5595, 5858, 5913, 5938, 6000, 6002, 6004, 6010, 6352, 6379, 6440, 6443, 6500, 6512, 6550, 6601, 6605, 6667, 6668, 6688, 6697, 6775, 6887, 7001, 7105, 7171, 7415, 7537, 7634, 8006, 8034, 8038, 8082, 8083, 8085, 8093, 8118, 8136, 8154, 8155, 8176, 8177, 8200, 8291, 8318, 8383, 8408, 8431, 8453, 8501, 8519, 8523, 8545, 8554, 8558, 8571, 8589, 8600, 8606, 8649, 8663, 8680, 8706, 8767, 8808, 8859, 8879, 8880, 8883, 8899, 9000, 9004, 9015, 9041, 9059, 9092, 9098, 9114, 9146, 9156, 9163, 9177, 9257, 9283, 9306, 9383, 9399, 9501, 9633, 9690, 9704, 9869, 9955, 9999, 10001, 10006, 10010, 10022, 10051, 10087, 10100, 10134, 10225, 10250, 10554, 10892, 10933, 11180, 11182, 11210, 11211, 11288, 11300, 11480, 12001, 12084, 12109, 12114, 12115, 12119, 12134, 12162, 12172, 12192, 12207, 12259, 12262, 12298, 12341, 12345, 12368, 12374, 12414, 12486, 12534, 12581, 12582, 12980, 13391, 13780, 13890, 14344, 14400, 14901, 15417, 16025, 16065, 16074, 16090, 16102, 16832, 17070, 17082, 18009, 18015, 18040, 18051, 18068, 18071, 18106, 18107, 18182, 18245, 18821, 19000, 19091, 20000, 20040, 20202, 20500, 20547, 21001, 21116, 21235, 21240, 21259, 21261, 21283, 21297, 21305, 21316, 21330, 21379, 22022, 22107, 22556, 24082, 25001, 25782, 26374, 26648, 28015, 29106, 29840, 29910, 30002, 30003, 30011, 30025, 30027, 30111, 30479, 32736, 33060, 38212, 40005, 42208, 43008, 44158, 44365, 44500, 44875, 46971, 48553, 48886, 49604, 49684, 49690, 50000, 50006, 50022, 50066, 50100, 50101, 50160, 52287, 53112, 55554, 56368, 57778, 57779, 57781, 57786, 58532, 60129, 61905, 62443, 63210, 63256, 63260, 63676, 65432
- Tags: honeypot, proxy
- CPEs: cpe:/a:openbsd:openssh:7.5, cpe:/a:microsoft:internet_information_services, cpe:/a:vsftpd:vsftpd:1.2.2, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:7.4, cpe:/a:realvnc:realvnc:::enterprise, cpe:/o:hp:hp-ux, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:5.3
- ts_added
- 2026-07-08 05:04:17.853000
- ts_last_update
- 2026-08-31 05:12:30.371000
Warden event timeline
DShield event timeline
Presence on blacklists

