IP address
Shodan(more info)

Passive DNS

- IP blacklists
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 34 | src | — |
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.42.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.40.0.0 - 121.43.255.255
- rep
- 0.1591035847462855
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 15, 20, 23, 25, 43, 49, 104, 110, 113, 135, 143, 175, 221, 389, 441, 446, 487, 541, 548, 554, 636, 666, 675, 771, 902, 947, 992, 993, 1080, 1177, 1235, 1414, 1433, 1443, 1515, 1521, 1723, 1893, 1957, 1962, 1965, 1989, 2002, 2008, 2016, 2018, 2052, 2077, 2101, 2154, 2320, 2323, 2404, 2412, 2453, 2554, 2556, 2561, 2566, 2602, 2628, 2762, 3004, 3007, 3018, 3022, 3050, 3083, 3107, 3116, 3153, 3185, 3188, 3191, 3211, 3311, 3404, 3510, 3524, 3550, 3551, 3561, 3780, 4002, 4063, 4072, 4095, 4150, 4157, 4242, 4282, 4300, 4430, 4444, 4463, 4506, 4510, 4531, 4545, 4786, 4821, 4899, 5006, 5009, 5025, 5150, 5190, 5201, 5222, 5236, 5244, 5253, 5261, 5268, 5269, 5432, 5567, 5630, 5660, 5671, 5858, 5902, 5908, 5917, 5992, 6008, 6011, 6020, 6134, 6432, 6580, 6650, 6667, 6668, 6770, 6775, 7000, 7011, 7015, 7050, 7090, 7171, 7218, 7348, 7415, 7634, 7773, 7790, 7998, 8005, 8044, 8054, 8067, 8070, 8083, 8095, 8099, 8126, 8145, 8183, 8291, 8316, 8319, 8393, 8446, 8510, 8519, 8530, 8553, 8554, 8574, 8587, 8599, 8622, 8628, 8649, 8708, 8723, 8767, 8811, 8862, 8865, 8882, 8899, 8980, 9003, 9012, 9054, 9060, 9065, 9116, 9139, 9151, 9152, 9169, 9187, 9210, 9213, 9236, 9303, 9350, 9530, 9550, 9600, 9633, 9898, 9908, 9994, 9998, 9999, 10022, 10046, 10134, 10201, 10205, 10759, 10911, 11000, 11101, 11112, 11159, 11288, 11300, 12000, 12016, 12107, 12109, 12111, 12115, 12117, 12135, 12138, 12156, 12158, 12162, 12171, 12182, 12187, 12200, 12210, 12211, 12235, 12246, 12252, 12258, 12297, 12304, 12307, 12318, 12322, 12327, 12345, 12366, 12378, 12395, 12427, 12469, 12470, 12477, 12489, 12522, 14217, 14265, 14344, 14415, 14577, 15000, 15042, 16006, 16027, 16041, 16058, 16094, 16095, 16667, 17010, 17082, 17536, 18000, 18008, 18016, 18086, 18103, 18110, 18245, 19000, 20000, 20100, 20208, 20547, 20670, 20880, 21025, 21083, 21260, 21261, 21314, 21379, 22084, 22705, 23023, 24892, 27017, 28748, 28808, 30003, 30700, 31210, 31646, 31745, 32764, 33060, 35000, 35554, 35923, 36172, 38962, 39027, 40630, 41196, 42741, 42901, 44158, 44307, 44308, 45243, 45888, 46879, 48483, 49684, 50000, 51001, 52178, 52242, 52536, 53484, 53726, 53869, 54138, 54490, 54857, 54867, 55000, 55554, 55555, 57336, 58378, 60021, 60129, 61424, 61613, 62078, 63045, 63256, 63676, 64106, 64952
- Tags: eol-product, proxy, honeypot
- CPEs: cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:f5:nginx, cpe:/a:apache:subversion, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:7.5, cpe:/a:microsoft:internet_information_services, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:X.X, cpe:/o:canonical:ubuntu_linux, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:5.3, cpe:/a:eset:nod32_antivirus:99
- ts_added
- 2026-08-29 23:48:59.800000
- ts_last_update
- 2026-08-31 15:48:32.910000
Warden event timeline
DShield event timeline
Presence on blacklists

