IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 47.96.0.0/16
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 47.96.0.0 - 47.127.255.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 15, 23, 25, 43, 49, 53, 70, 92, 104, 106, 175, 179, 221, 222, 311, 385, 389, 444, 446, 452, 465, 502, 503, 513, 515, 541, 548, 593, 636, 666, 789, 832, 843, 992, 1023, 1099, 1111, 1153, 1200, 1234, 1355, 1500, 1515, 1599, 1723, 1800, 1801, 1883, 1926, 1956, 1962, 1967, 1969, 2000, 2002, 2008, 2031, 2051, 2067, 2080, 2087, 2100, 2103, 2154, 2181, 2222, 2323, 2443, 2455, 2551, 2563, 2626, 2628, 2761, 2762, 3001, 3050, 3081, 3137, 3140, 3148, 3260, 3268, 3299, 3307, 3345, 3388, 3406, 3551, 3780, 3841, 4000, 4001, 4063, 4064, 4080, 4150, 4242, 4282, 4321, 4400, 4433, 4434, 4437, 4443, 4482, 4499, 4500, 4530, 4840, 5001, 5022, 5120, 5172, 5201, 5222, 5228, 5231, 5269, 5321, 5558, 5599, 5672, 5902, 5912, 5938, 5986, 5998, 6000, 6081, 6161, 6379, 6405, 6443, 6544, 6633, 6650, 6661, 6666, 6667, 6955, 7001, 7010, 7020, 7071, 7171, 7218, 7443, 7465, 7634, 7780, 8011, 8013, 8016, 8017, 8035, 8039, 8073, 8077, 8081, 8083, 8126, 8139, 8140, 8149, 8168, 8181, 8189, 8239, 8249, 8291, 8405, 8420, 8449, 8450, 8454, 8500, 8505, 8528, 8550, 8564, 8569, 8573, 8575, 8805, 8824, 8839, 8844, 8877, 8880, 8882, 8887, 8889, 8935, 9000, 9001, 9014, 9015, 9032, 9070, 9072, 9091, 9118, 9122, 9132, 9167, 9171, 9192, 9194, 9195, 9204, 9217, 9242, 9246, 9350, 9398, 9418, 9443, 9456, 9480, 9550, 9876, 9998, 9999, 10000, 10021, 10030, 10080, 10134, 10250, 10554, 10936, 11180, 11288, 12115, 12155, 12169, 12183, 12195, 12215, 12229, 12248, 12261, 12266, 12292, 12314, 12317, 12354, 12386, 12419, 12425, 12461, 12462, 12488, 12525, 12543, 12578, 12615, 13228, 13443, 14147, 14184, 14330, 14344, 15443, 15503, 16012, 16038, 16077, 16464, 16831, 17000, 17001, 17184, 18012, 18037, 18050, 18245, 20150, 20202, 20440, 20547, 20880, 20894, 21027, 21237, 21246, 21255, 21264, 21285, 21299, 21320, 21323, 21381, 21935, 22001, 22069, 22103, 22222, 23023, 25105, 25565, 27015, 27017, 28015, 30002, 30006, 30017, 30023, 30029, 30422, 30473, 30722, 31022, 31337, 31443, 32622, 33060, 35000, 36984, 37777, 40471, 42194, 44100, 44306, 44337, 44365, 44818, 45777, 47989, 47990, 48012, 48018, 48899, 49121, 50000, 50997, 51000, 51434, 55442, 55475, 55553, 55554, 60001, 60129, 61616, 62080
- Tags: honeypot
- CPEs: cpe:/a:openbsd:openssh:7.6p1, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:X.X, cpe:/a:cisco:ssh:3524665.35, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:cisco:ios, cpe:/o:microsoft:windows
- ts_added
- 2025-05-06 06:13:07.967000
- ts_last_update
- 2025-05-07 18:13:13.442000
Warden event timeline
DShield event timeline
Presence on blacklists