IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 47.98.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 47.96.0.0 - 47.127.255.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 15, 17, 25, 37, 70, 102, 104, 111, 113, 119, 154, 175, 221, 263, 264, 389, 427, 444, 487, 541, 636, 685, 771, 808, 873, 902, 993, 999, 1028, 1080, 1099, 1111, 1153, 1337, 1343, 1460, 1515, 1521, 1599, 1604, 1800, 1801, 1830, 1883, 1911, 2003, 2006, 2008, 2052, 2081, 2083, 2087, 2090, 2121, 2222, 2226, 2404, 2506, 2628, 2761, 2762, 3001, 3006, 3010, 3050, 3053, 3074, 3110, 3114, 3134, 3143, 3184, 3299, 3306, 3365, 3389, 3409, 3531, 3548, 3566, 4000, 4064, 4150, 4433, 4434, 4443, 4500, 4747, 4840, 4899, 4911, 4949, 5006, 5007, 5009, 5010, 5172, 5222, 5227, 5233, 5247, 5254, 5274, 5277, 5432, 5444, 5590, 5594, 5908, 5938, 5989, 5999, 6001, 6002, 6003, 6264, 6363, 6405, 6432, 6443, 6488, 6500, 6565, 6633, 6653, 6668, 6697, 7001, 7002, 7016, 7057, 7218, 7415, 7548, 7634, 7771, 8009, 8070, 8081, 8083, 8087, 8126, 8135, 8144, 8181, 8200, 8333, 8340, 8403, 8424, 8465, 8488, 8513, 8520, 8554, 8571, 8578, 8591, 8703, 8766, 8834, 8845, 8849, 8857, 8880, 8883, 8891, 8907, 8908, 9000, 9010, 9014, 9018, 9027, 9051, 9052, 9054, 9093, 9095, 9096, 9100, 9111, 9116, 9158, 9177, 9218, 9230, 9251, 9303, 9306, 9309, 9418, 9515, 9527, 9530, 9600, 9606, 9633, 9758, 9761, 9876, 9908, 9930, 9943, 9950, 9999, 10001, 10043, 10051, 10106, 10134, 10200, 10348, 10934, 11000, 11002, 11075, 11182, 11211, 11288, 11300, 11481, 12016, 12118, 12154, 12160, 12161, 12190, 12219, 12221, 12231, 12249, 12274, 12291, 12293, 12305, 12342, 12345, 12352, 12355, 12475, 12488, 12498, 12513, 12544, 12546, 12552, 12601, 12980, 14147, 14265, 14344, 14403, 14443, 14524, 16000, 16011, 16043, 16046, 16401, 16404, 16993, 17084, 18018, 18027, 18036, 18043, 18080, 18089, 18091, 18092, 19998, 19999, 20000, 20547, 21002, 21025, 21081, 21242, 21256, 21266, 21304, 21379, 25001, 25565, 30002, 30025, 30083, 32443, 32444, 36983, 37777, 38080, 40029, 44158, 48001, 48019, 50000, 50006, 50100, 51201, 53400, 55200, 55443, 55554, 57782, 57784, 61616, 62080, 63210, 63256
- Tags: eol-product, proxy, honeypot
- CPEs: cpe:/a:mysql:mysql:5.5.24-log, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:php:php:5.6.40, cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.2p1, cpe:/o:microsoft:windows, cpe:/a:squid-cache:squid:3.5.8, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:canonical:ubuntu_linux
- ts_added
- 2025-12-07 19:55:49.248000
- ts_last_update
- 2025-12-16 11:49:58.117000
Warden event timeline
DShield event timeline
Presence on blacklists

