IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (3)
- 2026-08-21
-
- ReconScanning (node.f90c6b): 2
- ReconScanning (node.368407): 1
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 44 | src | scan | |
| 25 | src | — |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.42.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- last_activity
- 2026-08-21 20:54:20
- last_warden_event
- 2026-08-21 20:54:20
- rep
- 0.1628625439576311
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 19, 21, 25, 43, 51, 53, 79, 87, 104, 143, 179, 263, 264, 340, 389, 444, 446, 452, 465, 487, 636, 789, 873, 1023, 1025, 1026, 1028, 1050, 1063, 1080, 1190, 1366, 1433, 1515, 1521, 1557, 1800, 1883, 1911, 1962, 1964, 1965, 2070, 2109, 2121, 2154, 2211, 2220, 2222, 2223, 2323, 2345, 2404, 2455, 2601, 2761, 2762, 3001, 3056, 3058, 3059, 3076, 3079, 3089, 3091, 3097, 3135, 3142, 3146, 3155, 3156, 3175, 3299, 3306, 3408, 3409, 3412, 3524, 3790, 4022, 4064, 4080, 4100, 4157, 4190, 4321, 4461, 4506, 4643, 4734, 4786, 4911, 4949, 5006, 5105, 5130, 5140, 5241, 5251, 5271, 5435, 5500, 5538, 5607, 5680, 5938, 5999, 6001, 6308, 6380, 6511, 6543, 6653, 6667, 7000, 7171, 7283, 7403, 7415, 7473, 7519, 7548, 8007, 8011, 8031, 8042, 8061, 8089, 8099, 8141, 8144, 8157, 8237, 8282, 8385, 8413, 8416, 8434, 8473, 8493, 8502, 8505, 8553, 8554, 8558, 8565, 8577, 8594, 8606, 8649, 8728, 8764, 8771, 8788, 8814, 8821, 8846, 8859, 8876, 8969, 9053, 9079, 9092, 9133, 9134, 9152, 9160, 9161, 9162, 9164, 9218, 9230, 9244, 9345, 9376, 9418, 9465, 9600, 9606, 9918, 9928, 9943, 9999, 10000, 10015, 10065, 10082, 10134, 10201, 10354, 10444, 10933, 11112, 11210, 11288, 11300, 12113, 12116, 12162, 12175, 12260, 12264, 12267, 12280, 12289, 12337, 12338, 12345, 12352, 12364, 12366, 12372, 12405, 12428, 12434, 12457, 12465, 12497, 12501, 12502, 12508, 12517, 12519, 12525, 12526, 12532, 12537, 12547, 12569, 12573, 12584, 13128, 14523, 15038, 15443, 16001, 16008, 16047, 16059, 16068, 16084, 16311, 16831, 18005, 18034, 18047, 18066, 18081, 18090, 18368, 18578, 18765, 19000, 19013, 19089, 20185, 20547, 21116, 21168, 21240, 21250, 21254, 21255, 21275, 21306, 23023, 24181, 25001, 27251, 28457, 29840, 30027, 30110, 30892, 34834, 35000, 35554, 37598, 38080, 40029, 40070, 40428, 40789, 42360, 43160, 44021, 44158, 44445, 44520, 44818, 45003, 45006, 45571, 49620, 50000, 50006, 50008, 50073, 50080, 50100, 50329, 51005, 53158, 53523, 55000, 55554, 57778, 58944, 60024, 60129, 61613, 61616, 62078, 63256, 64449
- Tags: honeypot, proxy, eol-product
- CPEs: cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.2p1, cpe:/h:dlink:dls-2750u, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:microsoft:windows, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:eset:nod32_antivirus:99, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:5.3
- ts_added
- 2026-08-21 20:54:17.707000
- ts_last_update
- 2026-08-30 20:54:21.009000
Warden event timeline
DShield event timeline
Presence on blacklists

