IP Address
IPv4
103.17.119.12
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 103.17.119.12
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Autonomous System
Geolocation
Reverse DNS
PTR
—
Last seen
—
Network
Prefix
RPKI
—
Open Ports
| Port | Proto | Service | Server | Last seen |
|---|---|---|---|---|
| 23 | tcp | telnet | — | 2026-07-20 07:19:14.000 |
| 81 | tcp | — | — | 2026-07-19 23:34:40.000 |
| 88 | tcp | kerberos | — | 2026-06-15 16:38:25.000 |
| 110 | tcp | pop3 | — | 2026-05-26 00:02:10.000 |
| 264 | tcp | — | — | 2026-06-13 20:26:57.000 |
| 322 | tcp | — | — | 2026-06-22 12:37:53.000 |
| 427 | tcp | — | — | 2026-05-31 07:06:49.000 |
| 443 | tcp | https | openresty | 2026-05-25 21:24:00.000 |
| 513 | tcp | — | — | 2026-06-19 13:24:35.000 |
| 515 | tcp | — | — | 2026-06-21 13:52:03.000 |
| 520 | tcp | — | — | 2026-07-20 20:25:10.000 |
| 548 | tcp | — | — | 2026-06-07 12:56:39.000 |
| 691 | tcp | — | — | 2026-06-06 12:00:01.000 |
| 700 | tcp | — | — | 2026-06-23 20:46:29.000 |
| 783 | tcp | — | — | 2026-06-23 12:57:21.000 |
| 873 | tcp | rsync | — | 2026-07-18 20:55:39.000 |
| 1194 | tcp | openvpn | — | 2026-06-14 00:41:23.000 |
| 1433 | tcp | mssql | — | 2026-06-13 23:46:42.000 |
| 1701 | tcp | l2tp | — | 2026-06-07 19:23:03.000 |
| 1812 | tcp | radius | — | 2026-07-16 17:33:25.000 |
| 2083 | tcp | — | — | 2026-06-21 05:32:26.000 |
| 2087 | tcp | — | — | 2026-07-17 16:20:37.000 |
| 2096 | tcp | — | — | 2026-07-17 10:44:42.000 |
| 2181 | tcp | — | — | 2026-06-15 23:18:24.000 |
| 2222 | tcp | ssh-alt | — | 2026-07-20 23:35:15.000 |
| 3000 | tcp | — | — | 2026-06-20 07:00:50.000 |
| 3306 | tcp | mysql | — | 2026-05-26 07:52:02.000 |
| 4222 | tcp | nats | — | 2026-07-18 17:25:26.000 |
| 5002 | tcp | — | — | 2026-07-18 01:43:41.000 |
| 5061 | tcp | — | — | 2026-06-07 08:36:56.000 |
| 5190 | tcp | — | — | 2026-07-19 15:34:58.000 |
| 5601 | tcp | — | — | 2026-06-16 11:06:40.000 |
| 5672 | tcp | amqp | — | 2026-06-20 06:06:42.000 |
| 5901 | tcp | — | — | 2026-06-16 10:27:12.000 |
| 6379 | tcp | redis | — | 2026-05-26 11:34:51.000 |
| 7000 | tcp | — | — | 2026-06-23 04:58:44.000 |
| 7002 | tcp | — | — | 2026-06-20 04:53:32.000 |
| 8001 | tcp | — | — | 2026-07-22 00:16:41.000 |
| 8008 | tcp | — | — | 2026-07-22 02:35:51.000 |
| 8009 | tcp | — | — | 2026-06-13 10:11:06.000 |
| 8083 | tcp | — | — | 2026-07-21 17:27:29.000 |
| 8089 | tcp | — | — | 2026-06-22 22:16:02.000 |
| 8333 | tcp | — | — | 2026-07-19 05:10:00.000 |
| 8500 | tcp | consul | — | 2026-07-18 11:53:57.000 |
| 8531 | tcp | — | — | 2026-06-18 11:29:04.000 |
| 8649 | tcp | — | — | 2026-07-21 21:50:16.000 |
| 8765 | tcp | — | — | 2026-06-07 11:41:41.000 |
| 8800 | tcp | — | — | 2026-07-19 00:56:53.000 |
| 8834 | tcp | — | — | 2026-06-15 16:49:39.000 |
| 9050 | tcp | — | — | 2026-07-21 22:02:47.000 |
| 9300 | tcp | elasticsearch-tcp | — | 2026-06-20 01:27:21.000 |
| 10250 | tcp | — | — | 2026-06-19 07:48:54.000 |
| 10255 | tcp | — | — | 2026-07-18 21:49:16.000 |
| 17000 | tcp | — | — | 2026-07-21 18:49:07.000 |
| 18091 | tcp | — | — | 2026-07-17 05:47:07.000 |
| 18181 | tcp | — | — | 2026-06-21 07:54:11.000 |
| 19000 | tcp | — | — | 2026-06-15 17:13:25.000 |
| 27019 | tcp | — | — | 2026-07-19 07:10:57.000 |
| 50000 | tcp | — | — | 2026-06-18 04:25:59.000 |
| 50100 | tcp | — | — | 2026-06-21 11:01:17.000 |
| 51820 | tcp | wireguard | — | 2026-06-14 13:22:29.000 |
| 60000 | tcp | — | — | 2026-06-21 20:44:19.000 |
TLS Certificates
Port 443
9bcb805e7ed3…
Subject: 13qianjin.com
Issuer: R13
SANs: 13qianjin.com, 52laozi.com, 9izhubao.com, baoao-services.com, dududestore.com, fkdb520.com, meifengzhushou.com, tianmaomohe.com, www.13qianjin.com, www.52laozi.com, www.9izhubao.com, www.baoao-services.com, www.dududestore.com, www.fkdb520.com, www.meifengzhushou.com, www.tianmaomohe.com, www.xinyuyinghua.com, www.zhanlongjz.com, xinyuyinghua.com, zhanlongjz.com
Valid 2026-04-05 04:15:19 → 2026-07-04 04:15:18
Tech Stack
Wappalyzer fingerprinting pending
HTTP-body analysis identifies web frameworks, CMS platforms, analytics, JS libraries and server-side languages from this host.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
9izhubao.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN 9izhubao.com which currently resolves through Cloudflare (AS13335) at 104.21.86.201, 172.67.136.156, 2a06:98c1:3120::3, 2a06:98c1:3121::3
meifengzhushou.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN meifengzhushou.com which currently resolves through Cloudflare (AS13335) at 172.67.139.229, 104.21.54.150, 2606:4700:3036::ac43:8be5, 2606:4700:3034::6815:3696
fkdb520.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN fkdb520.com which currently resolves through Cloudflare (AS13335) at 104.21.80.174, 172.67.152.164, 2606:4700:3035::6815:50ae, 2606:4700:3037::ac43:98a4
52laozi.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN 52laozi.com which currently resolves through Cloudflare (AS13335) at 172.67.213.48, 104.21.35.43, 2606:4700:3031::ac43:d530, 2606:4700:3032::6815:232b
baoao-services.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN baoao-services.com which currently resolves through Cloudflare (AS13335) at 172.67.140.55, 104.21.40.239, 2a06:98c1:3120::3, 2a06:98c1:3121::3
xinyuyinghua.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN www.xinyuyinghua.com which currently resolves through Cloudflare (AS13335) at 104.21.86.156, 172.67.221.155, 2606:4700:3035::6815:569c, 2606:4700:3031::ac43:dd9b
zhanlongjz.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN www.zhanlongjz.com which currently resolves through Cloudflare (AS13335) at 172.67.132.132, 104.21.4.216, 2606:4700:3030::6815:4d8, 2606:4700:3034::ac43:8484
tianmaomohe.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN tianmaomohe.com which currently resolves through Cloudflare (AS13335) at 104.21.20.36, 172.67.191.76, 2606:4700:3031::ac43:bf4c, 2606:4700:3034::6815:1424
13qianjin.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN 13qianjin.com which currently resolves through Cloudflare (AS13335) at 172.67.181.118, 104.21.48.75, 2606:4700:3035::ac43:b576, 2606:4700:3032::6815:304b
dududestore.com
95% confidence
behind AS13335 cert 9bcb805e7ed3… · cert 9bcb805e… served by 103.17.119.12 (AS135357) carries SAN dududestore.com which currently resolves through Cloudflare (AS13335) at 172.67.129.203, 104.21.2.233, 2606:4700:3033::6815:2e9, 2606:4700:3030::ac43:81cb
Multi-Vantage Check
Reachability accrued passively from real user-triggered checks across our 65+ probe nodes. Run a live check to add fresh data.
ICMP responsive
This IP replied to our global ICMP sweep — last confirmed 2026-07-22.
No accumulated reachability data yet
Reachability accrues from real user-triggered checks. Trigger a Ping or HTTP check from our 65+ probe nodes to contribute the first data point.
Web Pages
| Port | Page title | Status | Flags |
|---|---|---|---|
| 443 | 首页 - 我的网站 | 200 |
Threat Intelligence
No threat-intel matches
This IP doesn't appear in any of the feeds we mirror (Tor exits, FireHOL Level 1-3, Spamhaus DROP/EDROP, URLhaus, OpenPhish). Absence here doesn't prove the IP is clean — it just means none of our public-feed sources flag it.
Co-Hosted Domains
No DNS-confirmed domains yet
We cross-reference body-cited domains against our DNS resolver records. Confirmations appear here once both sides have data for the same name.
External References
Domains the body links to whose DNS does NOT resolve to this IP — usually CDN assets, embeds, or third-party services. Boilerplate (Google Fonts, jsDelivr, w3.org…) is already filtered.
push.zhanzhang.baidu.com
href · ×39497
vip.dytt-img.com
href · ×39160
hm.baidu.com
href · ×35245
tu.ikisfyigdaisasdad.com
href · ×12460
ynztctv.com
href · ×11067
zz.bdstatic.com
href · ×5048
wangwangzyimg1.com
href · ×3900
ps.ryzypics.com
href · ×1764
img1.doubanio.com
href · ×1387
img.wmdb.tv
href · ×1376
img9.doubanio.com
href · ×1203
tu.iqiyizyimg.com
href · ×190
wx2.sinaimg.cn
href · ×142
ry-pic.com
href · ×80
History
First observed
2026-05-25 21:23
Last observed
2026-07-22 02:35
Scan observations
134
The full change-log (ASN moves, cert rotations, port-state diffs) accumulates as our archives grow.