IP address

Search at other sites:

--112.124.9.226

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

112.124.9.226 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-06 19:10:03.461000
Was present on blacklist at: 2025-11-30 07:10, 2025-11-30 11:10, 2025-11-30 15:10, 2025-11-30 19:10, 2025-11-30 23:10, 2025-12-01 03:10, 2025-12-01 07:10, 2025-12-01 11:10, 2025-12-01 15:10, 2025-12-01 19:10, 2025-12-01 23:10, 2025-12-02 03:10, 2025-12-02 07:10, 2025-12-02 11:10, 2025-12-02 15:10, 2025-12-02 19:10, 2025-12-02 23:10, 2025-12-03 03:10, 2025-12-03 07:10, 2025-12-03 11:10, 2025-12-03 15:10, 2025-12-03 19:10, 2025-12-03 23:10, 2025-12-04 03:10, 2025-12-04 07:10, 2025-12-04 11:10, 2025-12-04 15:10, 2025-12-04 19:10, 2025-12-04 23:10, 2025-12-05 03:10, 2025-12-05 07:10, 2025-12-05 11:10, 2025-12-05 15:10, 2025-12-05 19:10, 2025-12-05 23:10, 2025-12-06 03:10, 2025-12-06 07:10, 2025-12-06 11:10, 2025-12-06 15:10, 2025-12-06 19:10

DataPlane VNC RFB

112.124.9.226 is listed on the DataPlane VNC RFB blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs initiating<br>an unsolicited VNC remote frame buffer (RFB) session to a remote host.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-13 07:10:00.970000
Was present on blacklist at: 2025-12-06 15:10, 2025-12-06 19:10, 2025-12-07 03:10, 2025-12-07 07:10, 2025-12-07 15:10, 2025-12-07 19:10, 2025-12-08 03:10, 2025-12-08 07:10, 2025-12-08 15:10, 2025-12-08 19:10, 2025-12-09 03:10, 2025-12-09 07:10, 2025-12-09 19:10, 2025-12-10 03:10, 2025-12-10 07:10, 2025-12-10 15:10, 2025-12-10 19:10, 2025-12-11 03:10, 2025-12-11 07:10, 2025-12-11 15:10, 2025-12-11 19:10, 2025-12-12 03:10, 2025-12-12 07:10, 2025-12-12 15:10, 2025-12-12 19:10, 2025-12-13 03:10, 2025-12-13 07:10

Origin AS

AS37963 - CNNIC-ALIBABA-CN-NET-AP

BGP Prefix

112.124.0.0/17

geo

China, Hangzhou

🕑 Asia/Shanghai

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

112.124.0.0 - 112.127.255.255

reserved_range

0

Shodan's InternetDB

Open ports: 13, 15, 21, 23, 79, 104, 122, 189, 195, 264, 389, 427, 443, 450, 513, 548, 554, 666, 771, 772, 777, 789, 808, 873, 992, 1000, 1099, 1153, 1200, 1283, 1355, 1414, 1588, 1723, 1926, 1951, 1986, 2000, 2002, 2003, 2012, 2052, 2067, 2069, 2081, 2107, 2223, 2226, 2259, 2345, 2566, 3001, 3018, 3022, 3058, 3078, 3091, 3103, 3139, 3156, 3164, 3186, 3260, 3268, 3301, 3310, 3388, 3389, 3402, 3412, 3551, 3790, 3952, 4063, 4095, 4150, 4157, 4242, 4369, 4434, 4439, 4447, 4463, 4500, 4506, 5025, 5061, 5172, 5269, 5435, 5456, 5606, 5620, 5672, 5804, 5984, 5986, 5989, 6021, 6264, 6405, 6511, 6560, 6633, 6653, 6661, 6668, 7001, 7171, 7415, 7634, 7780, 7878, 7980, 8023, 8032, 8037, 8039, 8070, 8083, 8085, 8118, 8120, 8125, 8148, 8200, 8243, 8252, 8291, 8333, 8421, 8431, 8500, 8528, 8554, 8566, 8597, 8686, 8706, 8805, 8809, 8815, 8846, 8868, 8880, 8889, 9000, 9001, 9012, 9042, 9052, 9071, 9128, 9141, 9150, 9201, 9214, 9306, 9333, 9383, 9510, 9529, 9779, 9802, 9898, 9930, 10001, 10011, 10039, 10044, 10080, 10083, 10250, 10348, 11001, 11075, 11112, 11443, 12000, 12129, 12169, 12173, 12174, 12179, 12196, 12215, 12238, 12345, 12355, 12397, 12422, 12445, 12468, 12478, 12554, 14104, 14344, 14903, 15042, 15443, 15588, 16034, 16053, 16055, 17771, 18019, 18027, 18034, 18073, 18086, 18088, 18182, 19090, 20001, 20020, 20256, 20547, 20880, 21025, 21242, 21253, 21270, 21287, 21320, 21329, 21379, 21381, 22556, 23184, 25004, 27015, 27017, 28015, 28443, 30002, 30468, 31001, 32746, 32764, 35000, 37777, 44100, 44340, 46862, 47001, 47984, 47990, 48100, 48888, 49200, 50100, 50107, 51235, 55553, 55554, 57783, 58585, 60021, 61616, 62078, 63210

Tags: videogame, proxy, honeypot

CPEs: cpe:/a:vsftpd:vsftpd:3.0.2, cpe:/a:cisco:ssh:3524665.35, cpe:/a:apache:dubbo, cpe:/a:openbsd:openssh:7.5, cpe:/a:openbsd:openssh:X.X, cpe:/a:openbsd:openssh:7.6p1, cpe:/a:openbsd:openssh:7.9, cpe:/a:openbsd:openssh:8.2p1, cpe:/a:openbsd:openssh:6.6.1, cpe:/a:openbsd:openssh:8.6, cpe:/a:opennetworking:openflow:1.1, cpe:/a:openbsd:openssh:5.3, cpe:/a:openbsd:openssh:8.0, cpe:/o:canonical:ubuntu_linux, cpe:/o:hp:hp-ux, cpe:/a:openbsd:openssh:7.4, cpe:/o:cisco:ios, cpe:/o:microsoft:windows

ts_added

2025-11-30 07:57:32.290000

ts_last_update

2025-12-15 07:57:41.291000

Warden event timeline

DShield event timeline

Presence on blacklists