IP address

Search at other sites:

.033112.124.38.228

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

112.124.38.228 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:10:03.776000
Was present on blacklist at: 2025-12-12 23:10, 2025-12-13 03:10, 2025-12-13 07:10, 2025-12-13 11:10, 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10

Warden events (1)

2025-12-15

ReconScanning (node.f90c6b): 1

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

last_activity

2025-12-15 22:43:09

last_warden_event

2025-12-15 22:43:09

rep

0.03333333333333333

reserved_range

0

Shodan's InternetDB

Open ports: 15, 17, 21, 23, 25, 43, 79, 86, 93, 111, 175, 180, 385, 400, 465, 685, 689, 873, 880, 992, 995, 1023, 1177, 1200, 1250, 1337, 1414, 1446, 1515, 1521, 1800, 1801, 1926, 1958, 1962, 1988, 2002, 2016, 2065, 2082, 2083, 2087, 2121, 2122, 2134, 2154, 2195, 2222, 2225, 2232, 2323, 2332, 2404, 2525, 2626, 2628, 2762, 3001, 3030, 3047, 3050, 3060, 3073, 3088, 3110, 3113, 3114, 3139, 3168, 3191, 3195, 3260, 3301, 3306, 3408, 3443, 3780, 3790, 4000, 4022, 4063, 4242, 4282, 4321, 4369, 4400, 4433, 4443, 4506, 4646, 4786, 4933, 5007, 5025, 5051, 5093, 5172, 5201, 5222, 5233, 5269, 5432, 5433, 5599, 5603, 5858, 5938, 6001, 6002, 6006, 6102, 6405, 6433, 6560, 6590, 6633, 6653, 6668, 6697, 6699, 7070, 7071, 7082, 7083, 7090, 7171, 7443, 7548, 7634, 8009, 8015, 8048, 8081, 8087, 8089, 8099, 8108, 8109, 8132, 8140, 8142, 8148, 8151, 8166, 8181, 8183, 8185, 8191, 8381, 8402, 8405, 8423, 8443, 8449, 8526, 8544, 8554, 8562, 8575, 8580, 8594, 8630, 8663, 8707, 8791, 8803, 8810, 8812, 8834, 8853, 8860, 8880, 8910, 9001, 9003, 9033, 9036, 9050, 9054, 9082, 9092, 9095, 9100, 9146, 9151, 9159, 9163, 9176, 9203, 9242, 9245, 9306, 9418, 9530, 9633, 9876, 9898, 9955, 9999, 10001, 10016, 10080, 10089, 10106, 10200, 10250, 10324, 10399, 10554, 10892, 10909, 10911, 11112, 11180, 11210, 11211, 11300, 11920, 12000, 12114, 12170, 12171, 12177, 12182, 12183, 12262, 12315, 12342, 12345, 12351, 12357, 12369, 12384, 12388, 12396, 12416, 12430, 12439, 12471, 12487, 12546, 12547, 14344, 14402, 15038, 16006, 16012, 16014, 16016, 16039, 16061, 16071, 16075, 16082, 16097, 16401, 16888, 17102, 17182, 17184, 18006, 18022, 18037, 18068, 18071, 18074, 18075, 18081, 18109, 18110, 18245, 18368, 19000, 20000, 20256, 20500, 20880, 21025, 21255, 21290, 21309, 21321, 21325, 22345, 22556, 25084, 25565, 25782, 27015, 30003, 30007, 30021, 31337, 32444, 33060, 35000, 35100, 35524, 36501, 36505, 37777, 38080, 40070, 42420, 43200, 44320, 44341, 44444, 44510, 45003, 47000, 49592, 50000, 50005, 50500, 52200, 54022, 54138, 55554, 58603, 60129, 61613

Tags: honeypot

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:eset:nod32_antivirus:99, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:php:php:8.2.9, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:openbsd:openssh:7.5, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.4, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:5.3, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:8.0

ts_added

2025-12-12 23:51:24.322000

ts_last_update

2025-12-16 03:53:25.453000

Warden event timeline

DShield event timeline

Presence on blacklists