IP address

Search at other sites:

--112.124.66.28

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

112.124.66.28 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 11:10:03.222000
Was present on blacklist at: 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10, 2025-12-16 07:10, 2025-12-16 11:10

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 11, 13, 21, 25, 26, 37, 49, 70, 86, 102, 110, 122, 135, 175, 177, 179, 195, 264, 311, 314, 427, 442, 443, 444, 503, 513, 515, 541, 636, 666, 789, 809, 873, 880, 992, 993, 999, 1000, 1002, 1023, 1388, 1433, 1494, 1515, 1521, 1554, 1599, 1800, 1911, 1926, 1958, 1973, 2000, 2002, 2008, 2066, 2067, 2222, 2259, 2332, 2404, 2628, 2761, 3001, 3016, 3022, 3051, 3084, 3111, 3165, 3211, 3260, 3301, 3306, 3388, 3403, 3531, 3553, 3570, 3780, 3953, 4000, 4001, 4043, 4100, 4150, 4157, 4242, 4282, 4321, 4369, 4433, 4437, 4499, 4506, 4911, 4933, 4949, 5025, 5053, 5122, 5172, 5269, 5431, 5435, 5558, 5590, 5905, 5914, 5938, 5986, 5996, 6001, 6009, 6021, 6352, 6666, 6667, 6668, 6688, 7021, 7078, 7084, 7272, 7283, 7415, 7443, 7510, 7548, 7634, 7657, 8004, 8009, 8038, 8046, 8067, 8085, 8087, 8089, 8102, 8126, 8153, 8159, 8167, 8168, 8181, 8203, 8333, 8393, 8405, 8421, 8427, 8432, 8452, 8510, 8521, 8530, 8545, 8558, 8563, 8575, 8601, 8649, 8733, 8838, 8911, 9004, 9007, 9020, 9024, 9034, 9042, 9043, 9060, 9062, 9066, 9067, 9079, 9100, 9125, 9183, 9210, 9247, 9251, 9253, 9280, 9315, 9418, 9445, 9513, 9600, 9633, 9674, 9682, 9943, 9950, 9998, 9999, 10004, 10100, 10249, 11000, 11211, 11288, 12056, 12101, 12134, 12147, 12167, 12216, 12286, 12291, 12325, 12337, 12345, 12353, 12371, 12372, 12387, 12417, 12421, 12426, 12439, 12440, 12465, 12470, 12499, 12516, 12522, 12535, 12574, 12578, 13380, 14101, 14265, 14344, 14403, 14443, 14523, 14875, 14901, 14909, 16037, 16040, 16041, 16050, 16054, 16064, 16065, 16079, 16080, 16993, 18016, 18024, 18035, 18036, 18040, 18058, 18060, 18105, 18200, 20000, 20050, 20256, 20547, 20880, 21025, 21244, 21254, 21264, 21272, 21278, 21279, 21295, 21299, 21321, 22403, 25565, 29798, 30123, 30479, 30892, 35000, 35241, 36983, 39001, 43221, 44334, 44365, 47990, 48019, 49200, 49682, 50000, 50100, 51235, 54138, 55443, 55553, 57781, 58392, 60129, 61613, 61616, 62078, 63256, 64683

Tags: honeypot, proxy

CPEs: cpe:/a:eset:nod32_antivirus:99, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:8.6, cpe:/a:apache:subversion, cpe:/a:eclipse:jetty:9.4.14.v20181114, cpe:/o:canonical:ubuntu_linux, cpe:/a:vsftpd:vsftpd:1.2.2, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.9, cpe:/a:mysql:mysql:5.7.44-log, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.5, cpe:/o:microsoft:windows

ts_added

2025-12-13 15:54:00.068000

ts_last_update

2025-12-16 11:49:54.135000

Warden event timeline

DShield event timeline

Presence on blacklists