IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 121.199.0.0/16
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 121.196.0.0 - 121.199.255.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 21, 23, 26, 37, 49, 79, 101, 113, 175, 177, 179, 211, 264, 389, 443, 444, 491, 502, 513, 515, 554, 593, 632, 666, 685, 789, 811, 873, 995, 1025, 1026, 1027, 1029, 1099, 1111, 1153, 1177, 1180, 1200, 1207, 1235, 1337, 1388, 1414, 1433, 1451, 1458, 1460, 1515, 1599, 1605, 1833, 1962, 1970, 1973, 2000, 2003, 2008, 2010, 2022, 2063, 2067, 2081, 2087, 2121, 2154, 2156, 2181, 2196, 2222, 2250, 2271, 2320, 2327, 2332, 2345, 2376, 2382, 2404, 2444, 2455, 2557, 2761, 3001, 3016, 3017, 3019, 3050, 3074, 3075, 3079, 3092, 3104, 3110, 3114, 3117, 3159, 3190, 3195, 3196, 3198, 3260, 3310, 3365, 3388, 3389, 3404, 3409, 3410, 3460, 3523, 3557, 3559, 3780, 3790, 3953, 4064, 4150, 4172, 4242, 4282, 4321, 4369, 4436, 4443, 4500, 4506, 4530, 4620, 4786, 4840, 4899, 4993, 5001, 5007, 5010, 5080, 5119, 5150, 5172, 5201, 5222, 5230, 5238, 5241, 5248, 5264, 5271, 5276, 5435, 5558, 5858, 5907, 5917, 5984, 5986, 5993, 6001, 6002, 6008, 6379, 6443, 6561, 6588, 6666, 6667, 6668, 7001, 7020, 7171, 7272, 7403, 7415, 7434, 7603, 7777, 8001, 8002, 8003, 8009, 8019, 8026, 8031, 8077, 8081, 8083, 8089, 8099, 8122, 8126, 8133, 8139, 8141, 8153, 8157, 8169, 8180, 8181, 8200, 8282, 8322, 8333, 8382, 8383, 8384, 8402, 8406, 8407, 8409, 8421, 8425, 8433, 8451, 8455, 8465, 8500, 8554, 8556, 8564, 8574, 8575, 8576, 8592, 8640, 8732, 8771, 8819, 8862, 8873, 8881, 8883, 8887, 8899, 8901, 8911, 8980, 9001, 9002, 9012, 9042, 9048, 9051, 9055, 9076, 9079, 9091, 9095, 9098, 9099, 9111, 9116, 9129, 9131, 9151, 9160, 9162, 9167, 9179, 9191, 9192, 9193, 9194, 9196, 9199, 9200, 9222, 9226, 9243, 9252, 9305, 9306, 9309, 9345, 9398, 9400, 9418, 9510, 9515, 9600, 9633, 9761, 9803, 9811, 9998, 9999, 10000, 10001, 10006, 10007, 10011, 10041, 10051, 10134, 10390, 10480, 10533, 10909, 10911, 11184, 11210, 11288, 12112, 12132, 12133, 12146, 12147, 12158, 12160, 12170, 12239, 12262, 12294, 12304, 12306, 12312, 12315, 12330, 12338, 12345, 12347, 12353, 12364, 12365, 12401, 12405, 12421, 12428, 12450, 12463, 12469, 12541, 12553, 13047, 13128, 14026, 14182, 14344, 14400, 14403, 15002, 16010, 16020, 16024, 16042, 16069, 16082, 16088, 16091, 16403, 16443, 16464, 16993, 17000, 18042, 18048, 18055, 18057, 18064, 18083, 18090, 18100, 18556, 19000, 19080, 19200, 19233, 20000, 20010, 20060, 20185, 20256, 20547, 21025, 21083, 21281, 21293, 21300, 21310, 21379, 22001, 22070, 22556, 23128, 27016, 27017, 28015, 30002, 30017, 30029, 30050, 30122, 30422, 30701, 30718, 31022, 31122, 31380, 31722, 31822, 32080, 32122, 32422, 32764, 32800, 35000, 35002, 35524, 35554, 36984, 37777, 39001, 40000, 41794, 44100, 44158, 44301, 44444, 44818, 47808, 47990, 48899, 50000, 50007, 50010, 50014, 50070, 50073, 50100, 52200, 53413, 54138, 54984, 55000, 55443, 55481, 55554, 57779, 57785, 58532, 61616, 62078, 62080, 63210, 63256, 63260, 63443
- Tags: proxy, honeypot
- CPEs: cpe:/a:openbsd:openssh:8.6, cpe:/a:f5:nginx, cpe:/a:oracle:weblogic_server:10.3.6.0, cpe:/a:cisco:ssh:3524665.35, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.4, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:hp:hp-ux, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:filezilla-project:filezilla, cpe:/o:windriver:vxworks
- ts_added
- 2025-05-05 22:11:13.905000
- ts_last_update
- 2025-05-06 22:11:21.076000
Warden event timeline
DShield event timeline
Presence on blacklists