IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 47.98.0.0/15
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 47.96.0.0 - 47.127.255.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 13, 21, 23, 53, 79, 89, 102, 119, 143, 175, 285, 343, 389, 487, 503, 513, 587, 666, 771, 789, 873, 1023, 1029, 1167, 1177, 1234, 1366, 1377, 1387, 1414, 1433, 1500, 1521, 1599, 1604, 1723, 1800, 1883, 1911, 1926, 1962, 1964, 1969, 1970, 1979, 1984, 2000, 2003, 2008, 2010, 2080, 2081, 2087, 2181, 2266, 2323, 2404, 2455, 2567, 2628, 2762, 3001, 3009, 3050, 3059, 3068, 3127, 3138, 3148, 3149, 3260, 3301, 3388, 3566, 3780, 4001, 4063, 4064, 4150, 4157, 4243, 4282, 4300, 4321, 4369, 4499, 4506, 5003, 5006, 5007, 5009, 5010, 5025, 5053, 5061, 5222, 5230, 5268, 5269, 5435, 5440, 5543, 5598, 5608, 5804, 5858, 5918, 5984, 5986, 5994, 6002, 6007, 6432, 6513, 6633, 6667, 6688, 6699, 7010, 7025, 7080, 7171, 7433, 7434, 7443, 7634, 7790, 7878, 8012, 8036, 8056, 8087, 8089, 8099, 8107, 8113, 8116, 8126, 8159, 8166, 8181, 8200, 8284, 8291, 8402, 8410, 8430, 8450, 8458, 8502, 8526, 8554, 8596, 8606, 8706, 8708, 8733, 8809, 8812, 8819, 8834, 8880, 8883, 9000, 9005, 9051, 9100, 9105, 9115, 9123, 9151, 9163, 9182, 9183, 9211, 9216, 9221, 9242, 9280, 9306, 9333, 9398, 9447, 9515, 9633, 9711, 9761, 9800, 9803, 9876, 9898, 9999, 10001, 10005, 10019, 10028, 10071, 10533, 10909, 10911, 10943, 11065, 11112, 11210, 11288, 11300, 11688, 12000, 12129, 12138, 12208, 12246, 12274, 12279, 12301, 12330, 12334, 12345, 12374, 12396, 12446, 12471, 12479, 12520, 12521, 12534, 12538, 12555, 12569, 14147, 14265, 14344, 14875, 14900, 15042, 16039, 16041, 16053, 18010, 18035, 18039, 18076, 18081, 18091, 18106, 18245, 19222, 20018, 20185, 20256, 20547, 20880, 21257, 21288, 21292, 21314, 21327, 21515, 23023, 25565, 28015, 30002, 30003, 30025, 30101, 30112, 31337, 32764, 33060, 35000, 37777, 38080, 43200, 44158, 44818, 45039, 45111, 45886, 49080, 50000, 50014, 50042, 50100, 50106, 50160, 50443, 51235, 52010, 53400, 55000, 55388, 55555, 60129, 63210, 63256, 63260
- Tags: honeypot
- CPEs: cpe:/a:openbsd:openssh:7.6p1, cpe:/o:canonical:ubuntu_linux, cpe:/a:php:php:8.2.9, cpe:/a:postfix:postfix, cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:subversion, cpe:/a:realvnc:realvnc:::enterprise, cpe:/o:microsoft:windows, cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:5.3, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:7.5, cpe:/o:cisco:ios, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:8.0
- ts_added
- 2025-12-13 07:54:03.206000
- ts_last_update
- 2025-12-16 07:54:10.036000
Warden event timeline
DShield event timeline
Presence on blacklists

