IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (3)
- 2026-08-28
-
- ReconScanning (node.f90c6b): 2
- ReconScanning (node.368407): 1
- DShield reports (IP summary, reports)
- 2026-08-28
- Number of reports: 16
- Distinct targets: 8
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 75 | src | scan |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.42.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-28 14:45:30
- last_warden_event
- 2026-08-28 14:45:30
- rep
- 0.009849869450419324
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 17, 23, 26, 43, 79, 102, 111, 119, 135, 143, 154, 175, 179, 385, 389, 452, 485, 487, 491, 503, 515, 541, 554, 685, 771, 873, 902, 990, 1013, 1026, 1080, 1099, 1177, 1234, 1444, 1451, 1515, 1599, 1720, 1800, 1801, 1883, 1911, 1954, 1958, 1977, 2000, 2002, 2008, 2067, 2077, 2078, 2154, 2181, 2201, 2323, 2332, 2345, 2404, 2435, 2455, 2567, 3005, 3022, 3050, 3053, 3068, 3094, 3107, 3114, 3144, 3156, 3173, 3180, 3194, 3198, 3268, 3301, 3342, 3388, 3540, 3790, 3910, 3917, 4064, 4147, 4157, 4282, 4369, 4437, 4444, 4500, 4510, 4520, 4531, 4786, 4840, 4993, 5003, 5009, 5025, 5172, 5222, 5230, 5263, 5274, 5275, 5432, 5433, 5607, 5938, 5987, 5991, 6000, 6001, 6002, 6008, 6432, 6433, 6565, 6580, 6667, 7000, 7001, 7015, 7173, 7443, 7500, 7634, 7788, 7790, 7822, 8009, 8014, 8027, 8029, 8031, 8066, 8089, 8091, 8124, 8129, 8166, 8169, 8239, 8291, 8333, 8402, 8424, 8425, 8484, 8553, 8554, 8575, 8582, 8637, 8680, 8832, 8845, 8851, 8867, 8880, 8883, 9003, 9045, 9046, 9048, 9051, 9060, 9079, 9092, 9159, 9160, 9164, 9168, 9182, 9197, 9207, 9250, 9280, 9295, 9398, 9458, 9530, 9532, 9553, 9633, 9876, 9901, 9916, 9918, 9943, 9966, 9990, 9999, 10066, 10087, 10115, 10134, 10205, 10245, 10390, 10397, 10554, 10894, 10909, 11110, 11210, 11288, 12000, 12106, 12111, 12122, 12123, 12125, 12134, 12135, 12136, 12137, 12140, 12144, 12207, 12212, 12219, 12242, 12261, 12289, 12300, 12309, 12336, 12345, 12347, 12350, 12363, 12372, 12404, 12430, 12439, 12444, 12487, 12497, 12503, 12504, 12515, 12523, 12538, 12545, 12572, 12573, 12773, 14138, 14344, 14383, 14903, 15018, 15588, 16045, 16086, 16888, 17020, 17777, 17780, 18028, 18035, 18050, 18065, 18079, 18081, 18095, 18096, 18109, 18129, 18245, 18264, 19060, 20015, 20084, 20208, 20256, 20440, 20795, 20880, 21025, 21239, 21245, 21270, 21286, 21297, 21318, 22084, 22107, 23236, 24442, 25001, 26597, 27015, 27017, 29742, 29842, 30002, 30003, 30004, 30011, 30110, 30127, 31444, 31550, 32764, 33958, 35241, 35524, 36505, 39238, 40000, 41711, 41771, 41968, 43008, 43221, 44158, 44310, 44510, 45111, 45666, 46000, 48199, 48509, 48724, 49443, 49767, 50000, 50100, 50113, 50408, 51201, 55000, 55555, 57779, 57782, 57785, 57786, 58164, 58532, 60129, 60202, 60478, 60734, 61403, 61450, 61613, 61619, 62164, 62401, 64288
- Tags: honeypot, videogame, proxy
- CPEs: cpe:/a:openbsd:openssh:7.2p2, cpe:/o:microsoft:windows, cpe:/o:canonical:ubuntu_linux, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.6, cpe:/a:apache:subversion, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:6.6.1p1
- ts_added
- 2026-08-28 14:44:21.034000
- ts_last_update
- 2026-08-31 14:44:30.550000
Warden event timeline
DShield event timeline
Presence on blacklists

