IP address

Search at other sites:
--112.4.139.162
Shodan(more info)
Passive DNS
Tags:
IP blacklists
UCEPROTECT L1
112.4.139.162 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2024-05-13 23:45:00.880000
Was present on blacklist at: 2024-03-29 16:45, 2024-03-30 00:45, 2024-03-30 08:45, 2024-03-30 16:45, 2024-03-31 00:45, 2024-03-31 07:45, 2024-03-31 15:45, 2024-03-31 23:45, 2024-04-01 07:45, 2024-04-01 15:45, 2024-04-01 23:45, 2024-04-02 07:45, 2024-04-02 15:45, 2024-04-02 23:45, 2024-04-03 07:45, 2024-04-03 15:45, 2024-04-03 23:45, 2024-04-04 07:45, 2024-04-04 15:45, 2024-04-04 23:45, 2024-04-05 07:45, 2024-04-05 15:45, 2024-04-05 23:45, 2024-04-06 07:45, 2024-04-06 15:45, 2024-04-06 23:45, 2024-04-07 07:45, 2024-04-07 15:45, 2024-04-07 23:45, 2024-04-08 07:45, 2024-04-08 15:45, 2024-04-08 23:45, 2024-04-09 07:45, 2024-04-09 15:45, 2024-04-09 23:45, 2024-04-10 07:45, 2024-04-10 15:45, 2024-04-10 23:45, 2024-04-11 07:45, 2024-04-11 15:45, 2024-04-11 23:45, 2024-04-12 07:45, 2024-04-12 15:45, 2024-04-12 23:45, 2024-04-13 07:45, 2024-04-13 15:45, 2024-04-13 23:45, 2024-04-14 07:45, 2024-04-14 15:45, 2024-04-14 23:45, 2024-04-15 07:45, 2024-04-15 15:45, 2024-04-15 23:45, 2024-04-16 07:45, 2024-04-16 15:45, 2024-04-16 23:45, 2024-04-17 07:45, 2024-04-17 15:45, 2024-04-17 23:45, 2024-04-18 07:45, 2024-04-18 15:45, 2024-04-18 23:45, 2024-04-19 07:45, 2024-04-19 15:45, 2024-04-19 23:45, 2024-04-20 07:45, 2024-04-20 15:45, 2024-04-20 23:45, 2024-04-21 07:45, 2024-04-21 15:45, 2024-04-21 23:45, 2024-04-22 07:45, 2024-04-22 15:45, 2024-04-22 23:45, 2024-04-23 07:45, 2024-04-23 15:45, 2024-04-23 23:45, 2024-04-24 07:45, 2024-04-24 15:45, 2024-04-24 23:45, 2024-04-25 07:45, 2024-04-25 15:45, 2024-04-25 23:45, 2024-04-26 07:45, 2024-04-26 15:45, 2024-04-26 23:45, 2024-04-27 07:45, 2024-04-27 15:45, 2024-04-27 23:45, 2024-04-28 07:45, 2024-04-28 15:45, 2024-04-28 23:45, 2024-04-29 07:45, 2024-04-29 15:45, 2024-04-29 23:45, 2024-04-30 07:45, 2024-04-30 15:45, 2024-04-30 23:45, 2024-05-01 07:45, 2024-05-01 15:45, 2024-05-01 23:45, 2024-05-02 07:45, 2024-05-02 15:45, 2024-05-02 23:45, 2024-05-03 07:45, 2024-05-03 15:45, 2024-05-03 23:45, 2024-05-04 07:45, 2024-05-04 15:45, 2024-05-04 23:45, 2024-05-05 07:45, 2024-05-05 15:45, 2024-05-05 23:45, 2024-05-06 07:45, 2024-05-06 15:45, 2024-05-06 23:45, 2024-05-07 07:45, 2024-05-07 15:45, 2024-05-07 23:45, 2024-05-08 07:45, 2024-05-08 15:45, 2024-05-08 23:45, 2024-05-09 07:45, 2024-05-09 15:45, 2024-05-09 23:45, 2024-05-10 07:45, 2024-05-10 15:45, 2024-05-10 23:45, 2024-05-11 07:45, 2024-05-11 15:45, 2024-05-11 23:45, 2024-05-12 07:45, 2024-05-12 15:45, 2024-05-12 23:45, 2024-05-13 07:45, 2024-05-13 15:45, 2024-05-13 23:45
AbuseIPDB
112.4.139.162 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>IPs performing malicious activity(DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2024-05-08 04:00:00.651000
Was present on blacklist at: 2024-05-08 04:00
OTX pulses
[66097066dc1fcc39f7625f8b] 2024-03-31 14:17:10.455000 | RDP honeypot logs for 2024/03/31
Author name:jnazario
Pulse modified:2024-03-31 14:17:10.455000
Indicator created:2024-03-31 14:17:11
Indicator role:None
Indicator title:
Indicator expiration:2024-04-30 14:00:00
[660ac1d39f34afb6cb804eac] 2024-04-01 14:16:51.322000 | RDP honeypot logs for 2024/04/01
Author name:jnazario
Pulse modified:2024-04-01 14:16:51.322000
Indicator created:2024-04-01 14:16:52
Indicator role:None
Indicator title:
Indicator expiration:2024-05-01 14:00:00
[6617f0cdbc14b9950f387a36] 2024-04-11 14:16:45.494000 | RDP honeypot logs for 2024/04/11
Author name:jnazario
Pulse modified:2024-04-11 14:16:45.494000
Indicator created:2024-04-11 14:16:46
Indicator role:None
Indicator title:
Indicator expiration:2024-05-11 14:00:00
[661a93f5afbe83d097f5b105] 2024-04-13 14:17:25.220000 | RDP honeypot logs for 2024/04/13
Author name:jnazario
Pulse modified:2024-04-13 14:17:25.220000
Indicator created:2024-04-13 14:17:25
Indicator role:None
Indicator title:
Indicator expiration:2024-05-13 14:00:00
[661be56dae8130c7e0ba7642] 2024-04-14 14:17:17.155000 | RDP honeypot logs for 2024/04/14
Author name:jnazario
Pulse modified:2024-04-14 14:17:17.155000
Indicator created:2024-04-14 14:17:17
Indicator role:None
Indicator title:
Indicator expiration:2024-05-14 14:00:00
[66212b5f809eff28a40d1913] 2024-04-18 14:17:03.795000 | RDP honeypot logs for 2024/04/18
Author name:jnazario
Pulse modified:2024-04-18 14:17:03.795000
Indicator created:2024-04-18 14:17:04
Indicator role:None
Indicator title:
Indicator expiration:2024-05-18 14:00:00
[6623ce70336a015ce1900cea] 2024-04-20 14:17:20.795000 | RDP honeypot logs for 2024/04/20
Author name:jnazario
Pulse modified:2024-04-20 14:17:20.795000
Indicator created:2024-04-20 14:17:21
Indicator role:None
Indicator title:
Indicator expiration:2024-05-20 14:00:00
[6629146ae5bb35d1b391510d] 2024-04-24 14:17:14.791000 | RDP honeypot logs for 2024/04/24
Author name:jnazario
Pulse modified:2024-04-24 14:17:14.791000
Indicator created:2024-04-24 14:17:15
Indicator role:None
Indicator title:
Indicator expiration:2024-05-24 14:00:00
[6630fd5edafec6364a696303] 2024-04-30 14:17:01.469000 | RDP honeypot logs for 2024/04/30
Author name:jnazario
Pulse modified:2024-04-30 14:17:01.469000
Indicator created:2024-04-30 14:17:03
Indicator role:None
Indicator title:
Indicator expiration:2024-05-30 14:00:00
[66324edc987813cbc5a9c8c2] 2024-05-01 14:17:00.638000 | RDP honeypot logs for 2024/05/01
Author name:jnazario
Pulse modified:2024-05-01 14:17:00.638000
Indicator created:2024-05-01 14:17:01
Indicator role:None
Indicator title:
Indicator expiration:2024-05-31 14:00:00
[6638e660e3ff2b647ca47c81] 2024-05-06 14:17:04.776000 | RDP honeypot logs for 2024/05/06
Author name:jnazario
Pulse modified:2024-05-06 14:17:04.776000
Indicator created:2024-05-06 14:17:05
Indicator role:None
Indicator title:
Indicator expiration:2024-06-05 14:00:00
[6640cf1601b5979bad787c51] 2024-05-12 14:15:50.704000 | RDP honeypot logs for 2024/05/12
Author name:jnazario
Pulse modified:2024-05-12 14:15:50.704000
Indicator created:2024-05-12 14:15:51
Indicator role:None
Indicator title:
Indicator expiration:2024-06-11 14:00:00
Origin AS
AS56046 - CMNET-Jiangsu-AP
BGP Prefix
112.4.128.0/19
geo
China, Yangzhou
🕑 Asia/Shanghai
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
112.0.0.0 - 112.63.255.255
last_activity
2024-05-12 16:05:11.966000
reserved_range
0
Shodan's InternetDB
Open ports: 1801, 6080
Tags: –
CPEs: –
ts_added
2024-03-29 16:48:02.310000
ts_last_update
2024-05-13 23:47:47.079000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses