IP address

Search at other sites:

--112.124.56.100

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

112.124.56.100 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-12 23:10:02.120000
Was present on blacklist at: 2025-12-06 07:10, 2025-12-06 11:10, 2025-12-06 15:10, 2025-12-06 19:10, 2025-12-06 23:10, 2025-12-07 03:10, 2025-12-07 07:10, 2025-12-07 11:10, 2025-12-07 15:10, 2025-12-07 19:10, 2025-12-07 23:10, 2025-12-08 03:10, 2025-12-08 07:10, 2025-12-08 11:10, 2025-12-08 15:10, 2025-12-08 19:10, 2025-12-08 23:10, 2025-12-09 03:10, 2025-12-09 07:10, 2025-12-09 11:10, 2025-12-09 15:10, 2025-12-09 19:10, 2025-12-09 23:10, 2025-12-10 03:10, 2025-12-10 07:10, 2025-12-10 11:10, 2025-12-10 15:10, 2025-12-10 19:10, 2025-12-10 23:10, 2025-12-11 03:10, 2025-12-11 07:10, 2025-12-11 11:10, 2025-12-11 15:10, 2025-12-11 19:10, 2025-12-11 23:10, 2025-12-12 03:10, 2025-12-12 07:10, 2025-12-12 11:10, 2025-12-12 15:10, 2025-12-12 19:10, 2025-12-12 23:10

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 13, 15, 19, 21, 22, 25, 43, 49, 70, 79, 104, 113, 143, 195, 221, 234, 264, 389, 427, 442, 443, 453, 465, 513, 515, 593, 789, 808, 873, 995, 999, 1110, 1200, 1234, 1433, 1599, 1700, 1723, 1800, 1833, 1883, 1962, 2008, 2063, 2065, 2067, 2083, 2087, 2202, 2266, 2323, 2332, 2363, 2404, 2455, 2558, 2568, 2572, 2601, 2806, 2995, 3088, 3096, 3105, 3164, 3174, 3299, 3306, 3310, 3389, 3409, 3523, 3524, 3569, 3690, 3838, 4042, 4072, 4118, 4150, 4165, 4282, 4321, 4369, 4402, 4433, 4438, 4455, 4646, 4808, 4899, 4933, 5007, 5025, 5089, 5201, 5231, 5245, 5253, 5596, 5680, 5858, 5986, 6006, 6021, 6022, 6400, 6432, 6602, 6666, 6688, 6697, 7415, 7434, 7603, 8004, 8005, 8009, 8017, 8038, 8041, 8047, 8052, 8075, 8083, 8089, 8107, 8119, 8121, 8126, 8185, 8200, 8222, 8230, 8241, 8249, 8291, 8428, 8443, 8465, 8482, 8532, 8554, 8557, 8561, 8594, 8630, 8649, 8821, 8859, 8860, 8902, 8911, 9000, 9019, 9022, 9042, 9051, 9091, 9100, 9107, 9121, 9137, 9166, 9190, 9216, 9333, 9398, 9400, 9418, 9455, 9530, 9929, 9943, 9998, 9999, 10030, 10031, 10036, 10046, 10048, 10134, 10554, 11000, 11002, 11112, 11288, 11300, 12000, 12114, 12144, 12145, 12151, 12157, 12158, 12173, 12218, 12235, 12305, 12307, 12345, 12387, 12400, 12431, 12433, 12441, 12479, 12487, 12511, 12525, 12527, 12531, 12558, 12561, 12586, 15000, 15502, 16034, 16067, 16068, 16091, 16094, 16095, 16443, 17000, 17084, 17778, 18002, 18005, 18012, 18019, 18025, 18034, 18051, 18070, 18083, 18094, 18102, 18105, 20182, 20880, 21001, 21002, 21273, 21309, 22206, 22609, 25565, 25782, 27015, 28001, 28015, 30002, 30003, 30019, 30120, 34225, 35000, 36501, 44304, 44818, 45677, 46000, 47990, 48002, 49684, 49694, 50100, 50105, 55443, 55553, 57782, 61613, 63210, 63256, 63260, 64295

Tags: eol-product, proxy, honeypot

CPEs: cpe:/a:openbsd:openssh:7.6p1, cpe:/o:microsoft:windows, cpe:/o:canonical:ubuntu_linux, cpe:/a:php:php:5.6.40, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:cisco:ssh:3524665.35, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:f5:nginx, cpe:/a:mysql:mysql:5.5.24-log, cpe:/a:eset:nod32_antivirus:99, cpe:/a:apache:subversion, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:6.6.1, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:8.0

ts_added

2025-12-06 07:56:36.813000

ts_last_update

2025-12-15 07:56:41.276000

Warden event timeline

DShield event timeline

Presence on blacklists