IP address


--112.124.57.42
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane TELNET login
112.124.57.42 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:10:03.776000
Was present on blacklist at: 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10
Spamhaus XBL CBL
112.124.57.42 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-12-13 23:51:01.938000
Was present on blacklist at: 2025-12-13 23:51
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
112.124.0.0/17
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
112.124.0.0 - 112.127.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 11, 17, 19, 21, 43, 66, 70, 79, 102, 104, 111, 113, 122, 143, 175, 179, 192, 264, 311, 389, 427, 444, 449, 480, 502, 503, 548, 591, 743, 771, 785, 801, 853, 943, 1023, 1099, 1153, 1177, 1234, 1366, 1387, 1433, 1515, 1521, 1599, 1604, 1723, 1800, 1801, 1911, 1926, 1958, 1962, 1982, 2001, 2002, 2067, 2087, 2090, 2091, 2121, 2181, 2222, 2323, 2345, 2376, 2404, 2455, 2566, 2569, 2628, 2762, 2985, 3001, 3018, 3050, 3059, 3075, 3091, 3095, 3100, 3164, 3196, 3221, 3260, 3270, 3310, 3389, 3409, 3443, 3524, 3550, 4002, 4022, 4023, 4063, 4064, 4157, 4321, 4443, 4488, 4500, 4506, 4840, 4899, 4911, 4949, 5006, 5009, 5025, 5090, 5130, 5201, 5222, 5231, 5261, 5269, 5271, 5432, 5435, 5495, 5500, 5607, 6000, 6001, 6050, 6348, 6379, 6432, 6565, 6666, 6668, 6697, 7007, 7050, 7071, 7081, 7170, 7218, 7443, 8009, 8018, 8032, 8042, 8054, 8085, 8089, 8118, 8122, 8139, 8143, 8179, 8190, 8197, 8200, 8222, 8251, 8350, 8425, 8442, 8465, 8475, 8482, 8500, 8533, 8557, 8560, 8601, 8630, 8649, 8663, 8709, 8728, 8831, 8834, 8861, 8863, 8883, 8886, 8902, 8908, 8989, 9000, 9001, 9002, 9016, 9020, 9022, 9042, 9065, 9082, 9088, 9096, 9106, 9151, 9192, 9197, 9199, 9211, 9304, 9306, 9333, 9398, 9410, 9443, 9455, 9734, 9761, 9876, 9898, 9916, 9943, 9998, 9999, 10010, 10036, 10049, 10909, 11065, 11210, 11288, 11401, 12000, 12016, 12056, 12084, 12123, 12180, 12186, 12190, 12223, 12234, 12235, 12249, 12251, 12304, 12308, 12332, 12343, 12345, 12384, 12397, 12414, 12419, 12442, 12449, 12480, 12517, 12528, 12533, 12538, 14344, 14443, 14524, 14903, 15001, 15084, 15123, 16002, 16005, 16010, 16014, 16016, 16044, 16065, 16403, 16404, 16831, 16993, 17010, 17773, 17776, 17780, 18000, 18031, 18038, 18057, 18071, 18083, 18108, 18182, 20000, 20020, 20256, 20880, 21025, 21235, 21240, 21263, 21269, 21281, 21289, 21304, 21379, 22556, 25001, 25565, 27015, 27017, 27105, 28015, 30002, 30008, 30021, 30027, 33060, 35000, 35554, 44158, 44308, 44310, 44340, 44410, 44818, 47990, 48012, 48889, 49080, 49501, 50004, 51005, 53480, 54138, 57783, 58603, 61616, 62078, 63256, 63260, 64671, 65004
Tags: honeypot, proxy, videogame
CPEs: cpe:/a:cisco:ssh:3524665.35, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:apache:subversion, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.5, cpe:/a:f5:nginx, cpe:/o:microsoft:windows, cpe:/a:xiongmaitech:uc-httpd:1.0.0, cpe:/a:apache:dubbo, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.6p1, cpe:/o:freebsd:freebsd, cpe:/a:vsftpd:vsftpd:3.0.2, cpe:/a:openbsd:openssh:6.2_hpn13v11, cpe:/a:openbsd:openssh:5.3, cpe:/a:acme:mini-httpd
ts_added
2025-12-13 23:51:01.726000
ts_last_update
2025-12-16 03:53:25.616000

Warden event timeline

DShield event timeline

Presence on blacklists