IP address

DShield reports (IP summary, reports)

2025-12-13

Number of reports: 304

Distinct targets: 100

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 11, 15, 21, 23, 25, 37, 43, 49, 53, 70, 90, 111, 175, 195, 264, 389, 427, 444, 503, 513, 548, 771, 873, 994, 995, 1029, 1119, 1153, 1177, 1193, 1200, 1337, 1414, 1433, 1456, 1801, 1901, 1962, 1984, 2002, 2003, 2008, 2057, 2081, 2083, 2087, 2181, 2211, 2222, 2223, 2225, 2323, 2332, 2404, 2455, 2555, 2570, 2761, 3001, 3093, 3105, 3152, 3165, 3166, 3268, 3270, 3299, 3306, 3310, 3389, 3540, 3557, 4000, 4063, 4095, 4150, 4157, 4242, 4244, 4321, 4430, 4433, 4435, 4443, 4463, 4643, 4899, 5001, 5006, 5007, 5105, 5119, 5120, 5130, 5172, 5190, 5201, 5247, 5257, 5269, 5270, 5672, 5721, 5858, 5916, 5984, 6001, 6363, 6379, 6510, 6633, 6666, 6755, 6779, 7001, 7071, 7086, 7171, 7218, 7272, 7415, 7535, 7548, 7634, 7799, 7998, 8014, 8047, 8081, 8082, 8085, 8087, 8105, 8129, 8140, 8142, 8152, 8162, 8163, 8171, 8177, 8181, 8182, 8189, 8291, 8318, 8418, 8419, 8421, 8433, 8470, 8525, 8543, 8545, 8564, 8649, 8728, 8732, 8808, 8841, 8852, 8874, 8880, 8883, 8889, 9002, 9028, 9031, 9034, 9039, 9051, 9058, 9075, 9083, 9100, 9121, 9134, 9135, 9141, 9148, 9149, 9150, 9154, 9177, 9202, 9208, 9306, 9447, 9507, 9530, 9600, 9633, 9803, 9876, 9898, 9919, 9950, 9998, 9999, 10000, 10001, 10034, 10084, 10123, 10909, 10911, 11000, 11110, 11112, 11288, 11401, 12000, 12114, 12146, 12155, 12162, 12182, 12204, 12223, 12232, 12272, 12274, 12309, 12311, 12330, 12371, 12374, 12388, 12397, 12434, 12454, 12473, 12511, 12513, 12531, 12554, 12585, 14344, 14401, 14407, 15503, 15588, 16029, 16061, 16068, 16070, 16083, 16993, 17000, 18012, 18015, 18034, 18036, 18052, 18070, 18075, 18081, 18093, 18112, 18802, 19233, 20185, 20256, 20547, 20880, 21025, 21269, 21281, 21283, 21291, 21299, 21305, 22556, 23023, 25565, 25952, 27015, 28015, 30003, 30083, 30113, 30700, 31337, 32443, 32764, 33389, 35000, 42420, 44158, 44302, 45667, 47990, 48002, 49200, 50011, 50014, 51434, 53480, 54138, 54857, 55000, 55443, 55554, 58532, 60129, 61616, 63256, 63260

Tags: ics, honeypot, videogame

CPEs: cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:apache:dubbo, cpe:/a:microsoft:message_queuing, cpe:/a:openbsd:openssh:8.6, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:7.4, cpe:/a:acme:mini-httpd, cpe:/o:microsoft:windows, cpe:/a:mysql:mysql, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:realvnc:realvnc:::enterprise, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:5.3

ts_added

2025-12-14 05:03:18.512000

ts_last_update

2025-12-15 05:05:23.640000

Warden event timeline

DShield event timeline