IP address

DShield reports (IP summary, reports)

2025-12-13

Number of reports: 100

Distinct targets: 100

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

121.40.0.0/15

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

121.40.0.0 - 121.43.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 17, 21, 23, 37, 38, 43, 53, 79, 99, 102, 104, 110, 111, 113, 119, 465, 485, 502, 513, 548, 554, 666, 772, 789, 873, 992, 1099, 1153, 1177, 1195, 1200, 1235, 1293, 1377, 1433, 1450, 1515, 1577, 1660, 1723, 1800, 1926, 1958, 1962, 1972, 1978, 2002, 2008, 2053, 2057, 2067, 2095, 2150, 2154, 2195, 2209, 2211, 2323, 2404, 2601, 2626, 2628, 2761, 3001, 3003, 3009, 3019, 3062, 3076, 3094, 3103, 3116, 3117, 3141, 3143, 3168, 3172, 3186, 3260, 3268, 3299, 3306, 3342, 3352, 3388, 3405, 3790, 3922, 3950, 4063, 4064, 4120, 4160, 4242, 4282, 4369, 4433, 4434, 4443, 4502, 4899, 4949, 5001, 5006, 5010, 5053, 5090, 5201, 5223, 5228, 5229, 5244, 5269, 5270, 5435, 5495, 5557, 5567, 5568, 5672, 5910, 5938, 5986, 5997, 6000, 6001, 6002, 6050, 6443, 6510, 6544, 6653, 6666, 6668, 6697, 7001, 7011, 7071, 7083, 7443, 7822, 8009, 8018, 8023, 8038, 8081, 8083, 8091, 8135, 8138, 8151, 8171, 8173, 8174, 8200, 8248, 8291, 8381, 8415, 8422, 8427, 8448, 8454, 8462, 8536, 8556, 8563, 8569, 8700, 8784, 8801, 8822, 8825, 8826, 8834, 8844, 8848, 8883, 8889, 8915, 9001, 9002, 9059, 9063, 9085, 9095, 9100, 9106, 9117, 9126, 9131, 9133, 9145, 9147, 9165, 9177, 9185, 9222, 9242, 9249, 9305, 9398, 9418, 9480, 9500, 9530, 9633, 9943, 9998, 9999, 10019, 10038, 10052, 10134, 10180, 10210, 10399, 10934, 11000, 11075, 11180, 11300, 12106, 12107, 12125, 12147, 12161, 12163, 12175, 12195, 12205, 12216, 12217, 12220, 12239, 12242, 12278, 12287, 12311, 12344, 12345, 12361, 12380, 12415, 12452, 12458, 12460, 12461, 12504, 12520, 12521, 12534, 12554, 12575, 14104, 14147, 14344, 14523, 14903, 15151, 16002, 16014, 16066, 16074, 16103, 16666, 18004, 18007, 18018, 18024, 18027, 18028, 18038, 18051, 18065, 18081, 18082, 18102, 18245, 19902, 20050, 20053, 20110, 20256, 20500, 20880, 21280, 21281, 21290, 21305, 21306, 25001, 25010, 27017, 27105, 30121, 30473, 31001, 33060, 35000, 35100, 35522, 40894, 44818, 45001, 45333, 50010, 50085, 51200, 54138, 55443, 57784, 58585, 60129, 61616, 62237

Tags: honeypot

CPEs: cpe:/a:openbsd:openssh:7.6p1, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:7.4, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:8.0, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.5, cpe:/a:f5:nginx

ts_added

2025-12-14 05:03:19.195000

ts_last_update

2025-12-15 05:05:29.629000

Warden event timeline

DShield event timeline