IP address

DShield reports (IP summary, reports)

2025-12-13

Number of reports: 100

Distinct targets: 100

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

47.98.0.0/15

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

47.96.0.0 - 47.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 11, 17, 21, 25, 49, 53, 70, 94, 104, 110, 113, 119, 175, 199, 285, 311, 385, 427, 502, 513, 636, 873, 992, 993, 1153, 1177, 1193, 1234, 1365, 1387, 1414, 1433, 1515, 1521, 1599, 1883, 1962, 1989, 2006, 2008, 2067, 2087, 2107, 2111, 2181, 2222, 2376, 2455, 2553, 2762, 3001, 3002, 3014, 3016, 3052, 3053, 3073, 3108, 3116, 3120, 3137, 3164, 3192, 3269, 3299, 3301, 3388, 3401, 3531, 3540, 3549, 3780, 3794, 4000, 4064, 4104, 4150, 4159, 4242, 4344, 4369, 4643, 4786, 4840, 4899, 5006, 5007, 5010, 5025, 5053, 5135, 5172, 5230, 5246, 5254, 5269, 5270, 5435, 5500, 5567, 5569, 5590, 5672, 5858, 5907, 5918, 5938, 5984, 5989, 5995, 6000, 6001, 6379, 6432, 6543, 6666, 6667, 6668, 7001, 7013, 7016, 7025, 7071, 7086, 7415, 7434, 7548, 7788, 8015, 8044, 8068, 8072, 8073, 8085, 8089, 8099, 8107, 8140, 8163, 8172, 8174, 8185, 8236, 8237, 8239, 8291, 8319, 8333, 8382, 8418, 8457, 8470, 8481, 8500, 8568, 8581, 8595, 8637, 8703, 8728, 8779, 8782, 8802, 8834, 8837, 8872, 8877, 8880, 8889, 8990, 9015, 9038, 9042, 9050, 9056, 9091, 9100, 9120, 9121, 9127, 9149, 9159, 9178, 9185, 9198, 9199, 9206, 9210, 9333, 9400, 9418, 9530, 9743, 9761, 9779, 9811, 9922, 9999, 10032, 10040, 10048, 10082, 10554, 10911, 11184, 11288, 12000, 12082, 12103, 12106, 12115, 12167, 12183, 12190, 12206, 12269, 12337, 12374, 12375, 12383, 12384, 12394, 12420, 12453, 12505, 12513, 12521, 12525, 12545, 12552, 12583, 13084, 14006, 14147, 14400, 16024, 16030, 16037, 16049, 16060, 16087, 16089, 16400, 16402, 16831, 17020, 17443, 18004, 18021, 18043, 18052, 18056, 18068, 18081, 18103, 18245, 19022, 19233, 20000, 20107, 20150, 20208, 20443, 20880, 21279, 21330, 22345, 23023, 25565, 27015, 28015, 28443, 29798, 30015, 30121, 30892, 32080, 33060, 35100, 35240, 40001, 43200, 44158, 44320, 44818, 45000, 47990, 49690, 50004, 52230, 53490, 54138, 54545, 55553, 55554, 58585, 60129, 62078, 63210, 63260

Tags: proxy, videogame, honeypot

CPEs: cpe:/a:oracle:weblogic_server:10.3.6.0, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:8.6, cpe:/o:canonical:ubuntu_linux, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.9, cpe:/a:microsoft:internet_information_services, cpe:/o:microsoft:qotd::::en, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:5.3

ts_added

2025-12-14 05:03:41.116000

ts_last_update

2025-12-16 05:24:21.680000

Warden event timeline

DShield event timeline