IP address


--112.124.8.90
Shodan(more info)
Passive DNS
Tags:
IP blacklists
DataPlane TELNET login
112.124.8.90 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-16 07:10:02.553000
Was present on blacklist at: 2025-12-11 23:10, 2025-12-12 03:10, 2025-12-12 07:10, 2025-12-12 11:10, 2025-12-12 15:10, 2025-12-12 19:10, 2025-12-12 23:10, 2025-12-13 03:10, 2025-12-13 07:10, 2025-12-13 11:10, 2025-12-13 15:10, 2025-12-13 19:10, 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10, 2025-12-16 07:10
Origin AS
AS37963 - CNNIC-ALIBABA-CN-NET-AP
BGP Prefix
112.124.0.0/17
geo
China, Hangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
112.124.0.0 - 112.127.255.255
reserved_range
0
Shodan's InternetDB
Open ports: 11, 17, 19, 21, 23, 25, 37, 53, 95, 106, 110, 113, 175, 179, 190, 221, 311, 427, 449, 451, 502, 503, 513, 515, 541, 743, 789, 993, 999, 1080, 1111, 1177, 1198, 1234, 1521, 1801, 1926, 1952, 1962, 1969, 1970, 1985, 2000, 2003, 2052, 2081, 2083, 2087, 2095, 2181, 2202, 2222, 2225, 2320, 2345, 2376, 2404, 2435, 2455, 2567, 2628, 2761, 3001, 3005, 3011, 3050, 3076, 3159, 3197, 3299, 3301, 3306, 3345, 3389, 3404, 3551, 3557, 3559, 3570, 4063, 4101, 4157, 4242, 4369, 4402, 4434, 4447, 4506, 4786, 4899, 5001, 5002, 5006, 5007, 5009, 5248, 5269, 5433, 5568, 5605, 5620, 5987, 5990, 5998, 6000, 6001, 6003, 6588, 6602, 6666, 6668, 6998, 7001, 7083, 7171, 7218, 7415, 7443, 7480, 7778, 8022, 8083, 8089, 8093, 8097, 8107, 8126, 8128, 8140, 8141, 8166, 8182, 8191, 8243, 8248, 8291, 8382, 8415, 8423, 8426, 8453, 8464, 8470, 8515, 8526, 8529, 8554, 8575, 8581, 8585, 8705, 8728, 8784, 8805, 8834, 8843, 8857, 8865, 8876, 8886, 8889, 9001, 9002, 9017, 9038, 9041, 9063, 9081, 9089, 9095, 9114, 9127, 9148, 9151, 9160, 9175, 9182, 9186, 9193, 9194, 9246, 9292, 9333, 9393, 9398, 9455, 9600, 9633, 9690, 9898, 9993, 9998, 9999, 10001, 10012, 10023, 10031, 10033, 10046, 10048, 10050, 10080, 10089, 10100, 10134, 10256, 10909, 11182, 11288, 12104, 12152, 12172, 12180, 12236, 12245, 12276, 12279, 12323, 12345, 12355, 12362, 12364, 12409, 12427, 12431, 12432, 12465, 12472, 12479, 12547, 12568, 12601, 14265, 14344, 15831, 16029, 16033, 16064, 16068, 16076, 16100, 16800, 16888, 17776, 18032, 18042, 18047, 18048, 18059, 18068, 18081, 18091, 18100, 18109, 18245, 18888, 19014, 19084, 20000, 20040, 20080, 21025, 21100, 21248, 21327, 23082, 24472, 25565, 28015, 30013, 30468, 32443, 35000, 35522, 40099, 40892, 41800, 44158, 44300, 44305, 44336, 44818, 45886, 47989, 47990, 50000, 50005, 50010, 50073, 50100, 51294, 52230, 53483, 54138, 55443, 55553, 55554, 58603, 62443, 64477
Tags: honeypot
CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:mysql:mysql, cpe:/a:f5:nginx, cpe:/a:openbsd:openssh:8.2p1, cpe:/h:dlink:dls-2750u, cpe:/a:php:php:8.2.9, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:7.2p2, cpe:/a:openbsd:openssh:8.6, cpe:/a:openbsd:openssh:6.6.1p1, cpe:/a:openbsd:openssh:7.5, cpe:/o:microsoft:windows, cpe:/a:openbsd:openssh:7.4, cpe:/a:openbsd:openssh:5.3
ts_added
2025-12-11 23:53:12.211000
ts_last_update
2025-12-16 07:51:18.194000

Warden event timeline

DShield event timeline

Presence on blacklists