IP address

Search at other sites:

--112.124.47.57

Shodan(more info)

Passive DNS

IP blacklists

blocklist.de SSH

112.124.47.57 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-08 05:05:00.598000
Was present on blacklist at: 2025-12-06 11:05, 2025-12-06 17:05, 2025-12-06 23:05, 2025-12-07 05:05, 2025-12-07 11:05, 2025-12-07 17:05, 2025-12-07 23:05, 2025-12-08 05:05

DShield reports (IP summary, reports)

2025-12-09

Number of reports: 200

Distinct targets: 100

2025-12-11

Number of reports: 200

Distinct targets: 100

2025-12-12

Number of reports: 200

Distinct targets: 100

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 13, 17, 19, 21, 23, 25, 43, 70, 102, 111, 119, 143, 175, 195, 264, 311, 389, 502, 513, 515, 636, 666, 675, 789, 809, 832, 943, 998, 1023, 1080, 1200, 1291, 1337, 1433, 1456, 1515, 1604, 1723, 1800, 1801, 1883, 1950, 1962, 1973, 1984, 2002, 2016, 2061, 2067, 2087, 2109, 2181, 2222, 2259, 2323, 2332, 2404, 2455, 2572, 2761, 2762, 3001, 3006, 3073, 3078, 3089, 3094, 3097, 3106, 3131, 3140, 3143, 3199, 3260, 3299, 3306, 3310, 3349, 3388, 3389, 3690, 3780, 4000, 4022, 4063, 4157, 4165, 4242, 4434, 4435, 4445, 4505, 4523, 4531, 4646, 4747, 4786, 4899, 4949, 5009, 5025, 5241, 5251, 5265, 5268, 5269, 5435, 5591, 5603, 5672, 5698, 5986, 6001, 6002, 6602, 6653, 7001, 7006, 7012, 7078, 7171, 7218, 7443, 7500, 7510, 7634, 7999, 8063, 8065, 8087, 8089, 8091, 8147, 8181, 8200, 8236, 8243, 8315, 8384, 8493, 8500, 8533, 8536, 8545, 8554, 8566, 8580, 8607, 8643, 8649, 8688, 8707, 8728, 8732, 8779, 8817, 8822, 8839, 8869, 9016, 9019, 9036, 9040, 9048, 9061, 9071, 9074, 9076, 9079, 9091, 9092, 9100, 9119, 9131, 9151, 9153, 9196, 9201, 9216, 9226, 9305, 9306, 9333, 9398, 9399, 9418, 9804, 9811, 9876, 9916, 9918, 9943, 9994, 9999, 10001, 10002, 10031, 10036, 10134, 10200, 10249, 10398, 10399, 10911, 11027, 11075, 11101, 11112, 11211, 11288, 12056, 12151, 12169, 12174, 12175, 12179, 12183, 12190, 12212, 12231, 12289, 12296, 12307, 12329, 12345, 12446, 12458, 12491, 12505, 12538, 12581, 12902, 13333, 14344, 15040, 16007, 16008, 16012, 16037, 16051, 16083, 16087, 17184, 17443, 18030, 18041, 18046, 18048, 18068, 18086, 18101, 18112, 18200, 18245, 20547, 21083, 21233, 21247, 21272, 21283, 21290, 21292, 21302, 21304, 21357, 23023, 25565, 27015, 27017, 28015, 29984, 30000, 30011, 30017, 30023, 30700, 31380, 32303, 34500, 35000, 35153, 36982, 37215, 38520, 45677, 49682, 49694, 50122, 50999, 52010, 54138, 55000, 55554, 57786, 60000, 60129, 62078, 62080, 62443, 63210, 64295

Tags: proxy, honeypot

CPEs: cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.5, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.9, cpe:/o:microsoft:windows, cpe:/a:eset:nod32_antivirus:99, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:apache:subversion, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:cisco:ssh:3524665.35, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:5.3, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh

ts_added

2025-12-06 11:05:49.731000

ts_last_update

2025-12-16 11:05:50.696000

Warden event timeline

DShield event timeline

Presence on blacklists