IP address


--112.124.59.13
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane TELNET login
112.124.59.13 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-15 19:10:03.342000
Was present on blacklist at: 2025-11-13 19:10, 2025-11-13 23:10, 2025-11-14 03:10, 2025-11-14 07:10, 2025-11-14 11:10, 2025-11-14 15:10, 2025-11-14 19:10, 2025-11-14 23:10, 2025-11-15 03:10, 2025-11-15 07:10, 2025-11-15 11:10, 2025-11-15 15:10, 2025-11-15 19:10, 2025-11-15 23:10, 2025-11-16 03:10, 2025-11-16 07:10, 2025-11-16 11:10, 2025-11-16 15:10, 2025-11-16 19:10, 2025-11-16 23:10, 2025-11-17 03:10, 2025-11-17 07:10, 2025-11-17 11:10, 2025-11-17 15:10, 2025-11-17 19:10, 2025-11-17 23:10, 2025-11-18 03:10, 2025-11-18 07:10, 2025-11-18 11:10, 2025-11-18 15:10, 2025-11-18 19:10, 2025-11-18 23:10, 2025-11-19 03:10, 2025-11-19 07:10, 2025-11-19 11:10, 2025-11-19 15:10, 2025-11-19 19:10, 2025-11-19 23:10, 2025-11-20 03:10, 2025-11-20 07:10, 2025-11-20 11:10, 2025-11-20 15:10, 2025-11-20 19:10, 2025-11-20 23:10, 2025-11-21 03:10, 2025-11-21 07:10, 2025-11-21 11:10, 2025-11-21 15:10, 2025-11-21 19:10, 2025-11-21 23:10, 2025-11-22 03:10, 2025-11-22 07:10, 2025-11-22 11:10, 2025-11-22 15:10, 2025-11-22 19:10, 2025-11-22 23:10, 2025-11-23 03:10, 2025-11-23 07:10, 2025-11-23 11:10, 2025-11-23 15:10, 2025-11-23 19:10, 2025-11-23 23:10, 2025-11-24 03:10, 2025-11-24 07:10, 2025-11-24 11:10, 2025-11-24 15:10, 2025-11-24 19:10, 2025-11-24 23:10, 2025-11-25 03:10, 2025-11-25 07:10, 2025-11-25 11:10, 2025-11-25 15:10, 2025-11-25 19:10, 2025-11-25 23:10, 2025-11-26 03:10, 2025-11-26 07:10, 2025-11-26 11:10, 2025-11-26 15:10, 2025-11-26 19:10, 2025-11-26 23:10, 2025-12-05 11:10, 2025-12-05 15:10, 2025-12-05 19:10, 2025-12-05 23:10, 2025-12-06 03:10, 2025-12-06 07:10, 2025-12-06 11:10, 2025-12-06 15:10, 2025-12-06 19:10, 2025-12-06 23:10, 2025-12-07 03:10, 2025-12-07 07:10, 2025-12-07 11:10, 2025-12-07 15:10, 2025-12-07 19:10, 2025-12-07 23:10, 2025-12-08 03:10, 2025-12-08 07:10, 2025-12-08 11:10, 2025-12-08 15:10, 2025-12-08 19:10, 2025-12-08 23:10, 2025-12-09 03:10, 2025-12-09 07:10, 2025-12-09 11:10, 2025-12-09 15:10, 2025-12-09 19:10, 2025-12-09 23:10, 2025-12-10 03:10, 2025-12-10 07:10, 2025-12-10 11:10, 2025-12-10 15:10, 2025-12-10 19:10, 2025-12-10 23:10, 2025-12-11 03:10, 2025-12-11 07:10, 2025-12-11 11:10, 2025-12-11 15:10, 2025-12-11 19:10, 2025-12-11 23:10, 2025-12-12 03:10, 2025-12-12 07:10, 2025-12-12 11:10, 2025-12-12 15:10, 2025-12-12 19:10, 2025-12-12 23:10, 2025-12-13 03:10, 2025-12-13 07:10, 2025-12-13 11:10, 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10
DataPlane VNC RFB
112.124.59.13 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-05 15:10:01.011000
Was present on blacklist at: 2025-11-28 19:10, 2025-11-29 03:10, 2025-11-29 07:10, 2025-11-29 15:10, 2025-11-29 19:10, 2025-11-30 03:10, 2025-11-30 07:10, 2025-11-30 15:10, 2025-11-30 19:10, 2025-12-01 03:10, 2025-12-01 07:10, 2025-12-01 15:10, 2025-12-01 19:10, 2025-12-02 03:10, 2025-12-02 07:10, 2025-12-02 15:10, 2025-12-02 19:10, 2025-12-03 03:10, 2025-12-03 07:10, 2025-12-03 15:10, 2025-12-03 19:10, 2025-12-04 03:10, 2025-12-04 07:10, 2025-12-04 15:10, 2025-12-04 19:10, 2025-12-05 03:10, 2025-12-05 07:10, 2025-12-05 15:10
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
112.124.0.0/17
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
112.124.0.0 - 112.127.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 11, 15, 17, 19, 20, 37, 43, 53, 70, 79, 91, 104, 106, 111, 113, 135, 175, 221, 340, 389, 444, 453, 465, 502, 513, 541, 548, 554, 646, 666, 700, 789, 809, 853, 943, 953, 993, 995, 1099, 1153, 1177, 1181, 1200, 1387, 1433, 1515, 1521, 1604, 1911, 1926, 1951, 1958, 1972, 1977, 1982, 1986, 2000, 2003, 2008, 2010, 2064, 2067, 2081, 2087, 2181, 2202, 2222, 2233, 2323, 2376, 2404, 2554, 2598, 2628, 2761, 2762, 2995, 3001, 3006, 3020, 3030, 3050, 3058, 3075, 3086, 3099, 3109, 3117, 3125, 3131, 3174, 3182, 3184, 3197, 3200, 3211, 3260, 3268, 3269, 3299, 3306, 3310, 3389, 3554, 3563, 3780, 3922, 3951, 3954, 4064, 4150, 4282, 4433, 4500, 4506, 4911, 5003, 5009, 5010, 5022, 5201, 5222, 5236, 5257, 5260, 5271, 5446, 5523, 5543, 5557, 5606, 5672, 5680, 5858, 5903, 5911, 5984, 6000, 6001, 6432, 6503, 6602, 6633, 6650, 6662, 6666, 6667, 6697, 7001, 7016, 7022, 7071, 7078, 7086, 7218, 7283, 7331, 7415, 7434, 7445, 7634, 7778, 7788, 7790, 7878, 8004, 8009, 8032, 8042, 8046, 8060, 8061, 8081, 8083, 8099, 8104, 8161, 8181, 8183, 8200, 8250, 8291, 8333, 8350, 8414, 8443, 8485, 8501, 8513, 8545, 8574, 8649, 8703, 8707, 8728, 8732, 8782, 8788, 8802, 8839, 8840, 8856, 8868, 8877, 8879, 8883, 8912, 9000, 9029, 9048, 9049, 9051, 9054, 9063, 9067, 9073, 9092, 9095, 9104, 9127, 9172, 9181, 9226, 9242, 9333, 9418, 9443, 9465, 9633, 9765, 9898, 9901, 9943, 9998, 10000, 10001, 10010, 10012, 10014, 10033, 10041, 10052, 10084, 10100, 10123, 10134, 10249, 10250, 10399, 10909, 10935, 11027, 11288, 11401, 11680, 12000, 12121, 12127, 12128, 12154, 12170, 12172, 12184, 12194, 12197, 12222, 12224, 12266, 12270, 12278, 12344, 12362, 12388, 12389, 12417, 12419, 12423, 12444, 12454, 12506, 12525, 12533, 12537, 12544, 12557, 12563, 12565, 12578, 12581, 14265, 15038, 16000, 16009, 16021, 16039, 16044, 16045, 16049, 16072, 17000, 17020, 17082, 17771, 17779, 18010, 18011, 18089, 18100, 18104, 18245, 20020, 20050, 20082, 20150, 21025, 21273, 21274, 21283, 21330, 21379, 21400, 22556, 25001, 25006, 27015, 28015, 29842, 30003, 30009, 30011, 30027, 31017, 31210, 31337, 32444, 33060, 35004, 37777, 41800, 42208, 44158, 44302, 44303, 47534, 47990, 50000, 50007, 51002, 51007, 51235, 52230, 52881, 55000, 55554, 57778, 58532, 60129, 61613, 61616, 62078, 63260, 64295, 64671
Tags: proxy, honeypot
CPEs: cpe:/a:openbsd:openssh:7.2p2, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.0, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:5.3, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:X.X, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:7.9, cpe:/a:mysql:mysql:5.7.44-log
ts_added
2025-11-13 19:42:07.503000
ts_last_update
2025-12-15 19:52:39.495000

Warden event timeline

DShield event timeline

Presence on blacklists