IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Origin AS
- AS37963 - CNNIC-ALIBABA-CN-NET-AP
- BGP Prefix
- 112.124.0.0/17
- geo
- China, Hangzhou
- 🕑 Asia/Shanghai
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 112.124.0.0 - 112.127.255.255
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 11, 15, 17, 19, 20, 37, 43, 53, 70, 79, 91, 104, 106, 111, 113, 135, 175, 221, 340, 389, 444, 453, 465, 502, 513, 541, 548, 554, 646, 666, 700, 789, 809, 853, 943, 953, 993, 995, 1099, 1153, 1177, 1181, 1200, 1387, 1433, 1515, 1521, 1604, 1911, 1926, 1951, 1958, 1972, 1977, 1982, 1986, 2000, 2003, 2008, 2010, 2064, 2067, 2081, 2087, 2181, 2202, 2222, 2233, 2323, 2376, 2404, 2554, 2598, 2628, 2761, 2762, 2995, 3001, 3006, 3020, 3030, 3050, 3058, 3075, 3086, 3099, 3109, 3117, 3125, 3131, 3174, 3182, 3184, 3197, 3200, 3211, 3260, 3268, 3269, 3299, 3306, 3310, 3389, 3554, 3563, 3780, 3922, 3951, 3954, 4064, 4150, 4282, 4433, 4500, 4506, 4911, 5003, 5009, 5010, 5022, 5201, 5222, 5236, 5257, 5260, 5271, 5446, 5523, 5543, 5557, 5606, 5672, 5680, 5858, 5903, 5911, 5984, 6000, 6001, 6432, 6503, 6602, 6633, 6650, 6662, 6666, 6667, 6697, 7001, 7016, 7022, 7071, 7078, 7086, 7218, 7283, 7331, 7415, 7434, 7445, 7634, 7778, 7788, 7790, 7878, 8004, 8009, 8032, 8042, 8046, 8060, 8061, 8081, 8083, 8099, 8104, 8161, 8181, 8183, 8200, 8250, 8291, 8333, 8350, 8414, 8443, 8485, 8501, 8513, 8545, 8574, 8649, 8703, 8707, 8728, 8732, 8782, 8788, 8802, 8839, 8840, 8856, 8868, 8877, 8879, 8883, 8912, 9000, 9029, 9048, 9049, 9051, 9054, 9063, 9067, 9073, 9092, 9095, 9104, 9127, 9172, 9181, 9226, 9242, 9333, 9418, 9443, 9465, 9633, 9765, 9898, 9901, 9943, 9998, 10000, 10001, 10010, 10012, 10014, 10033, 10041, 10052, 10084, 10100, 10123, 10134, 10249, 10250, 10399, 10909, 10935, 11027, 11288, 11401, 11680, 12000, 12121, 12127, 12128, 12154, 12170, 12172, 12184, 12194, 12197, 12222, 12224, 12266, 12270, 12278, 12344, 12362, 12388, 12389, 12417, 12419, 12423, 12444, 12454, 12506, 12525, 12533, 12537, 12544, 12557, 12563, 12565, 12578, 12581, 14265, 15038, 16000, 16009, 16021, 16039, 16044, 16045, 16049, 16072, 17000, 17020, 17082, 17771, 17779, 18010, 18011, 18089, 18100, 18104, 18245, 20020, 20050, 20082, 20150, 21025, 21273, 21274, 21283, 21330, 21379, 21400, 22556, 25001, 25006, 27015, 28015, 29842, 30003, 30009, 30011, 30027, 31017, 31210, 31337, 32444, 33060, 35004, 37777, 41800, 42208, 44158, 44302, 44303, 47534, 47990, 50000, 50007, 51002, 51007, 51235, 52230, 52881, 55000, 55554, 57778, 58532, 60129, 61613, 61616, 62078, 63260, 64295, 64671
- Tags: proxy, honeypot
- CPEs: cpe:/a:openbsd:openssh:7.2p2, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:5.3, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:X.X, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.9, cpe:/a:mysql:mysql:5.7.44-log
- ts_added
- 2025-11-13 19:42:07.503000
- ts_last_update
- 2025-12-15 19:52:39.495000
Warden event timeline
DShield event timeline
Presence on blacklists

