IP address

Search at other sites:

--112.124.65.40

Shodan(more info)

Passive DNS

IP blacklists

DataPlane VNC RFB

112.124.65.40 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 03:10:01.225000
Was present on blacklist at: 2025-12-13 03:10, 2025-12-13 07:10, 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-15 03:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-16 03:10

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 13, 15, 23, 49, 79, 110, 113, 139, 175, 221, 311, 389, 444, 449, 548, 554, 593, 636, 666, 675, 843, 888, 1023, 1080, 1099, 1153, 1177, 1181, 1234, 1337, 1364, 1366, 1414, 1457, 1515, 1521, 1604, 1723, 1800, 1901, 1911, 1953, 1954, 1976, 2003, 2008, 2087, 2111, 2181, 2222, 2345, 2455, 2548, 2549, 2558, 2628, 2762, 3002, 3050, 3055, 3068, 3070, 3083, 3140, 3150, 3152, 3176, 3177, 3185, 3260, 3268, 3269, 3306, 3310, 3389, 3498, 3551, 3690, 3790, 4000, 4022, 4063, 4150, 4155, 4157, 4282, 4321, 4369, 4402, 4433, 4434, 4443, 4447, 4500, 4506, 4524, 4808, 4899, 5009, 5010, 5222, 5238, 5255, 5258, 5266, 5270, 5271, 5432, 5435, 5456, 5503, 5542, 5605, 5607, 5672, 5909, 5916, 5938, 5984, 5986, 6000, 6001, 6003, 6100, 6134, 6331, 6432, 6633, 6653, 6667, 6668, 6789, 7001, 7005, 7010, 7087, 7172, 7173, 7218, 7349, 7434, 7510, 7548, 7776, 7822, 7878, 7979, 8009, 8052, 8075, 8081, 8089, 8091, 8136, 8139, 8175, 8191, 8200, 8317, 8382, 8412, 8458, 8459, 8554, 8558, 8561, 8575, 8583, 8589, 8592, 8649, 8728, 8806, 8811, 8834, 8835, 8846, 8874, 8880, 8889, 8999, 9001, 9018, 9021, 9026, 9032, 9042, 9051, 9060, 9069, 9085, 9091, 9095, 9123, 9151, 9177, 9182, 9206, 9292, 9301, 9333, 9444, 9456, 9527, 9553, 9633, 9802, 9876, 9899, 9943, 9998, 9999, 10001, 10017, 10024, 10283, 10443, 10554, 11110, 11596, 12084, 12159, 12169, 12221, 12229, 12233, 12250, 12269, 12271, 12279, 12328, 12336, 12345, 12357, 12382, 12390, 12404, 12407, 12414, 12425, 12428, 12438, 12443, 12464, 12472, 12481, 12506, 12520, 12521, 12527, 12579, 12582, 12583, 12590, 14024, 14147, 14401, 15000, 16006, 16018, 16025, 16029, 16039, 16048, 16311, 16402, 16993, 18010, 18052, 18102, 19100, 20000, 20040, 20084, 20547, 20880, 20892, 21025, 21237, 21262, 21293, 21315, 21326, 21357, 21443, 24082, 24442, 25000, 25001, 25565, 25782, 27015, 28015, 30002, 30003, 30013, 30120, 31337, 31444, 32202, 32303, 35004, 37777, 42235, 44400, 44818, 47990, 49686, 50000, 50011, 50113, 50443, 50777, 51001, 52536, 53200, 55443, 55554, 60023, 60129, 61234, 61613, 61616, 61619, 63256, 63260

Tags: videogame, proxy, honeypot

CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:apache:subversion, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:cisco:ssh:3524665.35, cpe:/o:cisco:ios, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:7.4, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:5.3, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:8.0

ts_added

2025-12-13 03:10:56.394000

ts_last_update

2025-12-16 03:11:01.667000

Warden event timeline

DShield event timeline

Presence on blacklists