IP address

Search at other sites:

--112.124.56.29

Shodan(more info)

Passive DNS

IP blacklists

DataPlane VNC RFB

112.124.56.29 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:10:01.225000
Was present on blacklist at: 2025-12-13 19:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-15 03:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-16 03:10

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 11, 13, 15, 17, 19, 21, 25, 26, 49, 70, 79, 104, 179, 189, 195, 221, 264, 311, 446, 451, 452, 461, 503, 513, 587, 771, 873, 995, 1023, 1025, 1029, 1099, 1153, 1198, 1365, 1414, 1515, 1521, 1604, 1723, 1901, 1911, 1926, 1985, 2002, 2003, 2008, 2057, 2061, 2063, 2083, 2087, 2095, 2121, 2154, 2181, 2222, 2332, 2345, 2353, 2376, 2404, 2443, 2598, 2762, 3001, 3021, 3022, 3058, 3089, 3110, 3129, 3132, 3175, 3190, 3199, 3260, 3269, 3301, 3569, 3780, 3838, 4000, 4063, 4064, 4150, 4157, 4242, 4369, 4400, 4435, 4443, 4444, 4449, 4510, 4550, 4786, 4821, 4949, 5051, 5123, 5130, 5201, 5231, 5240, 5246, 5432, 5444, 5591, 5598, 5672, 5721, 5938, 5992, 6000, 6002, 6005, 6379, 6400, 6432, 6650, 6666, 6667, 6668, 6998, 7001, 7014, 7085, 7170, 7171, 7218, 7415, 7434, 7473, 7535, 7548, 7634, 7676, 7687, 8040, 8052, 8065, 8073, 8089, 8093, 8109, 8132, 8139, 8145, 8175, 8181, 8251, 8252, 8409, 8413, 8428, 8501, 8521, 8545, 8556, 8562, 8599, 8649, 8787, 8790, 8805, 8806, 8811, 8813, 8815, 8836, 8846, 8849, 8969, 9001, 9015, 9042, 9048, 9064, 9067, 9084, 9091, 9095, 9100, 9101, 9105, 9140, 9143, 9168, 9177, 9230, 9303, 9306, 9333, 9513, 9600, 9663, 9761, 9993, 9998, 9999, 10001, 10002, 10025, 10040, 10134, 10250, 10302, 10477, 10533, 10911, 10943, 11065, 11075, 11112, 11300, 12000, 12088, 12106, 12133, 12155, 12174, 12198, 12232, 12266, 12277, 12302, 12321, 12380, 12382, 12407, 12411, 12447, 12454, 12459, 12461, 12477, 12481, 12498, 12547, 12570, 13443, 14403, 15001, 15082, 16018, 16019, 16031, 16041, 16057, 16067, 16084, 16100, 16316, 16800, 16831, 17100, 17184, 17775, 17778, 18037, 18062, 18081, 18113, 18264, 19017, 19902, 20106, 20512, 20547, 21025, 21084, 21230, 21253, 21255, 21282, 21290, 21292, 21300, 21311, 21314, 21329, 21379, 21500, 23023, 25001, 25565, 29798, 30010, 30021, 31444, 32764, 33060, 34225, 35000, 44303, 44308, 44336, 44365, 45888, 47000, 49443, 50000, 50080, 50106, 50257, 50580, 51201, 55553, 57785, 60129, 61613, 61616, 63210, 63256, 63260

Tags: proxy, database, honeypot

CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:6.2_hpn13v11, cpe:/a:vsftpd:vsftpd:1.2.2, cpe:/a:eset:nod32_antivirus:99, cpe:/a:xiongmaitech:uc-httpd:1.0.0, cpe:/o:canonical:ubuntu_linux, cpe:/o:microsoft:windows, cpe:/o:freebsd:freebsd, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:pgbouncer:pgbouncer

ts_added

2025-12-13 19:10:54.936000

ts_last_update

2025-12-16 03:11:01.153000

Warden event timeline

DShield event timeline

Presence on blacklists