IP address

Search at other sites:

--103.161.113.126

Shodan(more info)

Passive DNS

IP blacklists

DataPlane TELNET login

103.161.113.126 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-20 23:10:02.262000
Was present on blacklist at: 2025-12-13 23:10, 2025-12-14 03:10, 2025-12-14 07:10, 2025-12-14 11:10, 2025-12-14 15:10, 2025-12-14 19:10, 2025-12-14 23:10, 2025-12-15 03:10, 2025-12-15 07:10, 2025-12-15 11:10, 2025-12-15 15:10, 2025-12-15 19:10, 2025-12-15 23:10, 2025-12-16 03:10, 2025-12-16 07:10, 2025-12-16 11:10, 2025-12-16 15:10, 2025-12-16 19:10, 2025-12-16 23:10, 2025-12-17 03:10, 2025-12-17 07:10, 2025-12-17 11:10, 2025-12-17 15:10, 2025-12-17 19:10, 2025-12-17 23:10, 2025-12-18 03:10, 2025-12-18 07:10, 2025-12-18 11:10, 2025-12-18 15:10, 2025-12-18 19:10, 2025-12-18 23:10, 2025-12-19 03:10, 2025-12-19 07:10, 2025-12-19 11:10, 2025-12-19 15:10, 2025-12-19 19:10, 2025-12-19 23:10, 2025-12-20 03:10, 2025-12-20 07:10, 2025-12-20 11:10, 2025-12-20 15:10, 2025-12-20 19:10, 2025-12-20 23:10

Turris greylist

103.161.113.126 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-12-15 22:15:00.177000
Was present on blacklist at: 2025-12-15 22:15

DShield reports (IP summary, reports)

2025-12-13

Number of reports: 17

Distinct targets: 7

Origin AS

AS135918 - DVS-AS-VN

BGP Prefix

103.161.112.0/23

geo

Vietnam

🕑 Asia/Bangkok

hostname

(null)

Address block ('inetnum' or 'NetRange' in whois database)

103.161.112.0 - 103.161.113.255

reserved_range

0

Shodan's InternetDB

Open ports: 22, 80, 443, 3000, 3002, 3003, 3004, 3005, 3009, 3014, 5003, 5009, 5011, 5435, 5555, 5601, 5678, 6379, 6601, 6602, 7011, 7015, 7016, 7018, 7946, 8008, 8011, 8080, 8085, 8086, 8089, 8121, 8123, 8163, 8188, 8189, 8532, 8621, 8680, 8782, 8813, 8901, 8902, 8912, 9000, 9001, 9002, 9082, 9090, 9200, 9210, 9300, 9310, 9600, 9994, 10002, 15002, 27017

Tags: database, eol-product

CPEs: cpe:/o:linux:linux_kernel, cpe:/a:eclipse:jetty:12.0.22, cpe:/a:oracle:jre, cpe:/a:grafana:grafana:10.2.4, cpe:/a:openssl:openssl:3.0.2, cpe:/a:f5:nginx:1.18.0, cpe:/a:f5:nginx:1.27.3, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:f5:nginx:1.27.2, cpe:/a:nodejs:nodejs, cpe:/a:expressjs:express, cpe:/a:jenkins:jenkins:2.516.1, cpe:/a:nodejs:node.js, cpe:/a:f5:nginx:1.25.4, cpe:/a:f5:nginx:1.21.0, cpe:/o:canonical:ubuntu_linux, cpe:/a:mongodb:mongodb:7.0.12, cpe:/a:n8n:n8n, cpe:/a:redislabs:redis, cpe:/a:python:python, cpe:/a:encode:uvicorn

ts_added

2025-12-13 23:54:46.624000

ts_last_update

2025-12-20 23:54:51.073000

Warden event timeline

DShield event timeline

Presence on blacklists