IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists

DShield reports (IP summary, reports)

2025-12-11: Number of reports: 100; Distinct targets: 100
2025-12-12: Number of reports: 100; Distinct targets: 100

Origin AS: AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix: 47.98.0.0/15
geo: China, Hangzhou; 🕑 Asia/Shanghai
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 47.96.0.0 - 47.127.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 13, 17, 19, 23, 24, 49, 79, 85, 102, 179, 195, 243, 311, 347, 389, 444, 465, 554, 666, 689, 992, 995, 1023, 1080, 1099, 1207, 1291, 1292, 1337, 1364, 1387, 1414, 1433, 1660, 1723, 1833, 1911, 1926, 1959, 1962, 1966, 2002, 2021, 2059, 2083, 2087, 2108, 2181, 2323, 2332, 2345, 2404, 2550, 2572, 2762, 3001, 3072, 3131, 3145, 3175, 3199, 3269, 3299, 3306, 3388, 3524, 3780, 3838, 3953, 3954, 4000, 4010, 4063, 4072, 4080, 4101, 4148, 4242, 4321, 4433, 4434, 4444, 4500, 4520, 4545, 4643, 4786, 4899, 4911, 4949, 5025, 5150, 5172, 5224, 5232, 5240, 5249, 5259, 5269, 5279, 5595, 5614, 5671, 5804, 5858, 5984, 6001, 6008, 6011, 6134, 6432, 6565, 6581, 6789, 7002, 7015, 7087, 7105, 7171, 7283, 7415, 7434, 7443, 7500, 7782, 8009, 8035, 8064, 8085, 8110, 8118, 8126, 8129, 8139, 8140, 8147, 8151, 8173, 8181, 8251, 8252, 8291, 8384, 8461, 8500, 8524, 8528, 8533, 8548, 8601, 8643, 8728, 8817, 8834, 8859, 8863, 8870, 8878, 8882, 8883, 8980, 9000, 9001, 9016, 9031, 9042, 9050, 9067, 9082, 9092, 9095, 9157, 9178, 9236, 9304, 9306, 9398, 9454, 9458, 9530, 9532, 9658, 9754, 9758, 9872, 9898, 9943, 9999, 10003, 10006, 10007, 10008, 10029, 10035, 10046, 10249, 10250, 10443, 10480, 11002, 11112, 12019, 12122, 12126, 12129, 12138, 12186, 12189, 12203, 12260, 12269, 12276, 12280, 12310, 12337, 12341, 12342, 12345, 12347, 12350, 12363, 12384, 12429, 12434, 12446, 12452, 12457, 12472, 12473, 12484, 12498, 12505, 12520, 12521, 12564, 12578, 13084, 14265, 14523, 14909, 16003, 16085, 16091, 16401, 17000, 18014, 18029, 18050, 18059, 18072, 18108, 18245, 18765, 19015, 19233, 20060, 20107, 20182, 20547, 20880, 21254, 21255, 21272, 21286, 21313, 21328, 21379, 21500, 22107, 22703, 25001, 25004, 25010, 27015, 28015, 30083, 30106, 32001, 32764, 33060, 35000, 36984, 41800, 44158, 44500, 44818, 45555, 46000, 47990, 49210, 50000, 50002, 50100, 50202, 52536, 54545, 55000, 55553, 57784, 60001, 60129, 61617, 62078, 63210, 63256; Tags: eol-product, videogame, honeypot; CPEs: cpe:/a:openbsd:openssh:7.5, cpe:/a:php:php:5.5.9, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:cisco:telnet, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:microsoft:windows, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:8.2p1, cpe:/h:cisco:aironet_1200, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.6, cpe:/a:mysql:mysql
ts_added: 2025-12-06 07:56:38.917000
ts_last_update: 2025-12-17 03:53:24.774000

Warden event timeline

DShield event timeline

Presence on blacklists