IP address

DShield reports (IP summary, reports)

2025-05-01

Number of reports: 85

Distinct targets: 5

2025-05-02

Number of reports: 295

Distinct targets: 21

Origin AS

AS4837 - CHINA169-Backbone

BGP Prefix

116.132.0.0/15

geo

China

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

116.128.0.0 - 116.191.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 15, 17, 21, 22, 23, 25, 37, 49, 70, 79, 86, 94, 100, 102, 106, 110, 113, 119, 121, 122, 143, 175, 192, 199, 311, 385, 427, 443, 465, 502, 513, 515, 541, 554, 636, 666, 689, 771, 811, 1023, 1080, 1099, 1193, 1198, 1433, 1443, 1521, 1723, 1800, 1926, 1972, 2008, 2051, 2066, 2081, 2154, 2222, 2323, 2332, 2362, 2404, 2455, 2548, 2552, 2567, 2628, 2650, 3001, 3007, 3050, 3069, 3102, 3104, 3115, 3121, 3139, 3268, 3299, 3301, 3310, 3405, 3524, 3622, 3780, 3790, 4000, 4063, 4064, 4080, 4120, 4147, 4150, 4157, 4242, 4321, 4400, 4436, 4443, 4445, 4500, 4520, 4531, 4786, 4911, 5009, 5010, 5093, 5122, 5140, 5222, 5223, 5230, 5234, 5256, 5263, 5264, 5269, 5280, 5432, 5435, 5444, 5567, 5591, 5858, 5986, 5988, 6000, 6001, 6004, 6379, 6400, 6544, 6565, 6601, 6633, 6700, 6748, 7001, 7006, 7071, 7087, 7218, 7283, 7302, 7403, 7415, 7434, 7441, 7493, 7634, 7676, 7775, 7887, 8000, 8002, 8009, 8019, 8032, 8044, 8056, 8057, 8081, 8083, 8095, 8099, 8107, 8126, 8132, 8135, 8143, 8158, 8169, 8198, 8230, 8251, 8291, 8317, 8333, 8350, 8408, 8410, 8443, 8445, 8456, 8467, 8470, 8548, 8551, 8554, 8574, 8582, 8601, 8649, 8723, 8728, 8731, 8779, 8825, 8839, 8866, 8873, 8880, 8887, 8988, 8993, 9001, 9002, 9005, 9023, 9033, 9042, 9051, 9063, 9064, 9067, 9074, 9077, 9091, 9095, 9100, 9108, 9125, 9138, 9203, 9221, 9222, 9291, 9295, 9304, 9306, 9376, 9398, 9458, 9501, 9530, 9600, 9633, 9658, 9704, 9754, 9761, 9802, 9804, 9876, 9999, 10011, 10047, 10051, 10134, 10250, 10254, 10554, 10934, 11211, 11288, 12000, 12110, 12126, 12150, 12162, 12186, 12199, 12206, 12234, 12248, 12259, 12280, 12300, 12319, 12325, 12329, 12330, 12345, 12356, 12384, 12391, 12403, 12432, 12453, 12463, 12475, 12477, 12509, 12514, 12524, 12560, 12569, 12572, 12578, 13443, 14101, 14401, 14403, 14443, 15006, 15042, 15443, 16025, 16037, 16048, 16068, 16092, 16098, 16667, 16993, 17000, 17182, 18003, 18010, 18042, 18070, 18079, 18080, 18081, 18092, 18099, 18104, 18553, 18765, 18888, 19200, 20000, 20084, 20087, 20325, 20880, 21025, 21236, 21258, 21268, 21276, 21292, 21319, 21379, 22001, 22070, 22206, 22345, 22556, 23424, 25001, 25003, 25565, 27015, 27016, 28015, 28017, 30000, 30003, 30104, 30222, 30301, 30422, 30622, 30722, 30822, 31122, 31322, 31337, 31422, 31443, 31722, 31922, 32122, 32322, 32400, 32722, 32764, 33060, 33338, 35000, 35524, 37215, 37777, 40892, 40894, 41443, 41794, 41800, 43200, 44158, 46862, 47000, 47808, 47990, 48899, 50000, 50001, 50004, 50042, 50070, 50122, 51000, 51106, 51434, 52869, 54984, 55000, 55388, 55442, 55554, 57778, 57781, 58443, 58532, 60000, 62078, 63210, 63257, 65000, 65432

Tags: proxy, honeypot, eol-product

CPEs: cpe:/a:apache:subversion, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:f5:nginx:1.22.1, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.2p2, cpe:/o:microsoft:windows, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.9

ts_added

2025-05-02 05:06:16.719000

ts_last_update

2025-05-03 05:10:09.720000

Warden event timeline

DShield event timeline