IP address

Passive DNS

Tags: Static IP IP in hostname

IP blacklists: DataPlane SSH login
112.25.128.3 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds,<br>and measurement resource for operators, by operators. IPs trying<br>an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-13 14:10:01.876000
Was present on blacklist at: 2025-10-11 14:10, 2025-10-12 06:10, 2025-10-12 14:10, 2025-10-13 06:10, 2025-10-13 14:10

Origin AS: AS56046 - CMNET-Jiangsu-AP
BGP Prefix: 112.25.128.0/24
geo: China; 🕑 Asia/Shanghai
hostname: 3.128.25.112.static.sz.js.chinamobile.com
hostname_class: ['ip_in_hostname', 'static']
Address block ('inetnum' or 'NetRange' in whois database): 112.0.0.0 - 112.63.255.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 8085, 9443; Tags: –; CPEs: cpe:/a:f5:nginx:1.29.1, cpe:/a:portainer:portainer:2.33.1, cpe:/a:openbsd:openssh:9.6, cpe:/a:angularjs:angular.js
ts_added: 2025-10-11 14:56:32.047000
ts_last_update: 2025-10-13 14:57:26.253000

Warden event timeline

DShield event timeline

Presence on blacklists