IP address

Passive DNS

Tags:

IP blacklists

Threat categories

TL	Role	Category	Details
25	src	scan	port: many

Warden events (1)

2026-08-31: ReconScanning (node.ce2b59): 1

Origin AS: AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix: 121.42.0.0/15
geo: China, Hangzhou; 🕑 Asia/Shanghai
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 121.40.0.0 - 121.43.255.255
last_activity: 2026-08-31 08:38:27
last_warden_event: 2026-08-31 08:38:27
rep: 0.0026152243550789933
reserved_range: 0
Shodan's InternetDB: Open ports: 11, 13, 17, 19, 21, 37, 43, 70, 79, 104, 110, 111, 119, 131, 143, 175, 179, 264, 443, 502, 503, 515, 636, 806, 1023, 1177, 1414, 1454, 1471, 1515, 1599, 1604, 1800, 1801, 1911, 1926, 1959, 1960, 1962, 1970, 2003, 2008, 2018, 2067, 2072, 2080, 2087, 2111, 2154, 2222, 2323, 2332, 2345, 2351, 2353, 2404, 2550, 2554, 2602, 2628, 3001, 3056, 3057, 3068, 3081, 3088, 3110, 3153, 3156, 3179, 3180, 3268, 3299, 3301, 3306, 3310, 3402, 3403, 3503, 3563, 3569, 3975, 4022, 4063, 4064, 4117, 4150, 4282, 4369, 4401, 4430, 4431, 4433, 4436, 4437, 4506, 4528, 4786, 4840, 4911, 4949, 4993, 5007, 5025, 5123, 5160, 5172, 5222, 5231, 5243, 5269, 5321, 5435, 5542, 5596, 5598, 5599, 5858, 5911, 5984, 5999, 6010, 6020, 6218, 6257, 6379, 6380, 6561, 6633, 6650, 6662, 6666, 7002, 7070, 7331, 7415, 7445, 7548, 7773, 7780, 7896, 8018, 8027, 8041, 8042, 8064, 8077, 8087, 8103, 8110, 8119, 8126, 8128, 8131, 8147, 8154, 8159, 8161, 8164, 8192, 8249, 8382, 8388, 8402, 8418, 8440, 8460, 8464, 8485, 8500, 8506, 8545, 8554, 8588, 8591, 8598, 8623, 8728, 8821, 8863, 8883, 8889, 8899, 8912, 9001, 9024, 9037, 9042, 9044, 9047, 9048, 9062, 9077, 9118, 9142, 9151, 9160, 9174, 9176, 9184, 9193, 9203, 9205, 9206, 9215, 9247, 9256, 9283, 9292, 9300, 9306, 9333, 9387, 9410, 9418, 9458, 9600, 9633, 9797, 9811, 9919, 9944, 9997, 9998, 10045, 10050, 10052, 10089, 10134, 10240, 10255, 10348, 10480, 10554, 10909, 10936, 11000, 11111, 11112, 11210, 11419, 11596, 12000, 12056, 12084, 12107, 12110, 12137, 12191, 12198, 12212, 12223, 12246, 12261, 12263, 12297, 12299, 12318, 12345, 12349, 12356, 12368, 12393, 12409, 12412, 12414, 12425, 12444, 12458, 12467, 12481, 12494, 12500, 12545, 13217, 14147, 14182, 14245, 14407, 14875, 14894, 14905, 15006, 15123, 15329, 15389, 15673, 15813, 16023, 16031, 16050, 16070, 16074, 16082, 16088, 16993, 17082, 17775, 18008, 18026, 18040, 18042, 18047, 18062, 18069, 18087, 18088, 18091, 18101, 18107, 18108, 18245, 19000, 19211, 20000, 20053, 20201, 20256, 20547, 20800, 21002, 21025, 21116, 21253, 21256, 21271, 21288, 21289, 22556, 23023, 23997, 25001, 25002, 25697, 25952, 26284, 26849, 26957, 27015, 27752, 27994, 28973, 29799, 29842, 30004, 30700, 30701, 32764, 32999, 33060, 35000, 35100, 35153, 35554, 36984, 37497, 40005, 40416, 40471, 40837, 40894, 41118, 41800, 42813, 43220, 44307, 44336, 44700, 45444, 45667, 45821, 45886, 47990, 48013, 50106, 50122, 50500, 51001, 51004, 53484, 54138, 55293, 55555, 57103, 57201, 59197, 59293, 59663, 59959, 59991, 61613, 61616, 61731, 62078, 62370, 62865, 63260, 63632; Tags: honeypot, videogame; CPEs: cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.5, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.0, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:7.3rn, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:7.4, cpe:/o:microsoft:windows
ts_added: 2026-08-31 08:41:47.923000
ts_last_update: 2026-08-31 08:41:48.060000

Warden event timeline

DShield event timeline

Presence on blacklists