IP address

DShield reports (IP summary, reports)

2025-04-29

Number of reports: 11

Distinct targets: 4

2025-04-30

Number of reports: 55

Distinct targets: 10

2025-05-01

Number of reports: 66

Distinct targets: 7

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

116.132.0.0/15

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

116.128.0.0 - 116.191.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 1, 11, 15, 21, 49, 53, 66, 79, 85, 93, 97, 104, 106, 119, 154, 195, 264, 340, 389, 444, 465, 513, 515, 587, 666, 743, 771, 886, 902, 992, 993, 1025, 1099, 1119, 1177, 1200, 1250, 1293, 1337, 1414, 1433, 1521, 1599, 1801, 1883, 1926, 2002, 2003, 2008, 2016, 2020, 2057, 2064, 2083, 2087, 2121, 2154, 2222, 2332, 2345, 2404, 2443, 2455, 2602, 2761, 3001, 3053, 3054, 3060, 3108, 3164, 3166, 3181, 3256, 3299, 3306, 3402, 3523, 3555, 4002, 4040, 4080, 4100, 4117, 4157, 4282, 4321, 4369, 4433, 4500, 4506, 4528, 4545, 4573, 4602, 4747, 4786, 4949, 5003, 5006, 5007, 5009, 5025, 5201, 5230, 5233, 5234, 5243, 5260, 5269, 5279, 5672, 5906, 5938, 5986, 6000, 6001, 6011, 6102, 6440, 6667, 6668, 6686, 7001, 7415, 7493, 7548, 7700, 8015, 8018, 8037, 8049, 8070, 8081, 8083, 8087, 8094, 8099, 8100, 8156, 8169, 8172, 8181, 8189, 8222, 8333, 8384, 8427, 8435, 8502, 8504, 8520, 8561, 8575, 8594, 8600, 8743, 8791, 8825, 8850, 8860, 8872, 8879, 8889, 8901, 8905, 9001, 9095, 9096, 9100, 9145, 9157, 9158, 9160, 9162, 9192, 9193, 9195, 9202, 9209, 9217, 9244, 9304, 9305, 9306, 9333, 9376, 9418, 9480, 9530, 9633, 9898, 9926, 9992, 9999, 10019, 10032, 10050, 10051, 10134, 10210, 10240, 10250, 10348, 10380, 11210, 11288, 11300, 12110, 12194, 12198, 12205, 12217, 12224, 12237, 12252, 12310, 12315, 12329, 12332, 12345, 12347, 12351, 12368, 12387, 12413, 12438, 12447, 12466, 12480, 12544, 12546, 12560, 12574, 12586, 13082, 14147, 14330, 14344, 14403, 14523, 15123, 16008, 16010, 16029, 16058, 16064, 16067, 16068, 16080, 16089, 16404, 17000, 18029, 18031, 18042, 18050, 18078, 18080, 18081, 18085, 18094, 18112, 18239, 18245, 18443, 18553, 19000, 19200, 19443, 20000, 20020, 20121, 20208, 20256, 20547, 20880, 21025, 21234, 21243, 21247, 21264, 21265, 21270, 21303, 21327, 21379, 22000, 22001, 22222, 22556, 24808, 25003, 25010, 25565, 26656, 27015, 27017, 28015, 29984, 30003, 30009, 30104, 30120, 30123, 30301, 30303, 30452, 30522, 30622, 30701, 30718, 30922, 31322, 31422, 31443, 31622, 31722, 31922, 32122, 32303, 32422, 32764, 33060, 35153, 37215, 40000, 40894, 42194, 42420, 43200, 44021, 44158, 44332, 44336, 44341, 44350, 44818, 45444, 47080, 47990, 48001, 48012, 48019, 50000, 50002, 50004, 50014, 50050, 50070, 50100, 50106, 51007, 51235, 52951, 53413, 54138, 55000, 55442, 57779, 58532, 60021, 60099, 60129, 61613, 61616, 62078, 63210, 63676

Tags: proxy, videogame, honeypot, eol-product

CPEs: cpe:/a:microsoft:message_queuing, cpe:/a:postfix:postfix, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:f5:nginx:1.22.1, cpe:/a:cisco:ssh:3524665.35, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:8.6, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.9, cpe:/o:canonical:ubuntu_linux, cpe:/o:cisco:ios

ts_added

2025-04-30 05:04:54.762000

ts_last_update

2025-05-03 05:07:42.839000

Warden event timeline

DShield event timeline