112.117.50.69 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Yunnan Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/112.117.50.69/ CN - 1H : (740) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 112.117.50.69 CIDR : 112.117.0.0/17 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 15 3H - 43 6H - 95 12H - 166 24H - 307 DateTime : 2019-10-29 04:51:43 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-29 16:06:59

Type

Details

Datetime

attack

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/112.117.50.69/ 
 
 CN - 1H : (740)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 112.117.50.69 
 
 CIDR : 112.117.0.0/17 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 15 
  3H - 43 
  6H - 95 
 12H - 166 
 24H - 307 
 
 DateTime : 2019-10-29 04:51:43 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-29 16:06:59

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.117.50.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35076
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.117.50.69.			IN	A

;; AUTHORITY SECTION:
.			464	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102900 1800 900 604800 86400

;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 29 16:06:54 CST 2019
;; MSG SIZE  rcvd: 117

Host info

69.50.117.112.in-addr.arpa domain name pointer 69.50.117.112.broad.km.yn.dynamic.163data.com.cn.

Nslookup info:

Server:		100.100.2.138
Address:	100.100.2.138#53

Non-authoritative answer:
69.50.117.112.in-addr.arpa	name = 69.50.117.112.broad.km.yn.dynamic.163data.com.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.50.149.5	attackspam	email spam	2020-04-16 12:40:17
129.211.30.94	attack	$f2bV_matches	2020-04-16 13:12:32
62.168.57.109	attackspambots	Apr 16 05:48:17 mail.srvfarm.net postfix/smtpd[2665726]: NOQUEUE: reject: RCPT from unknown[62.168.57.109]: 554 5.7.1 Service unavailable; Client host [62.168.57.109] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.168.57.109; from= to= proto=ESMTP helo= Apr 16 05:48:18 mail.srvfarm.net postfix/smtpd[2665726]: NOQUEUE: reject: RCPT from unknown[62.168.57.109]: 554 5.7.1 Service unavailable; Client host [62.168.57.109] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.168.57.109; from= to= proto=ESMTP helo= Apr 16 05:48:19 mail.srvfarm.net postfix/smtpd[2665726]: NOQUEUE: reject: RCPT from unknown[62.168.57.109]: 554 5.7.1 Service unavailable; Client host [62.168.57.109] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?62.168.57.109; from=	2020-04-16 12:44:36
130.185.108.131	attack	SpamScore above: 10.0	2020-04-16 13:09:15
222.186.175.182	attackspam	Apr 16 06:44:36 * sshd[10195]: Failed password for root from 222.186.175.182 port 26864 ssh2 Apr 16 06:44:52 * sshd[10195]: error: maximum authentication attempts exceeded for root from 222.186.175.182 port 26864 ssh2 [preauth]	2020-04-16 12:46:21
164.132.225.229	attack	Apr 16 05:55:33 plex sshd[10578]: Invalid user fastdfs from 164.132.225.229 port 36010	2020-04-16 12:55:57
138.68.40.92	attackbotsspam	Apr 16 06:46:30 mout sshd[1835]: Invalid user justin from 138.68.40.92 port 60304	2020-04-16 12:54:17
78.128.113.99	attackbots	2020-04-16 06:21:36 dovecot_plain authenticator failed for $\[78.128.113.99\]$ \[78.128.113.99\]: 535 Incorrect authentication data $set_id=admin@orogest.it$ 2020-04-16 06:21:53 dovecot_plain authenticator failed for $\[78.128.113.99\]$ \[78.128.113.99\]: 535 Incorrect authentication data 2020-04-16 06:22:08 dovecot_plain authenticator failed for $\[78.128.113.99\]$ \[78.128.113.99\]: 535 Incorrect authentication data 2020-04-16 06:22:25 dovecot_plain authenticator failed for $\[78.128.113.99\]$ \[78.128.113.99\]: 535 Incorrect authentication data $set_id=admin$ 2020-04-16 06:22:26 dovecot_plain authenticator failed for $\[78.128.113.99\]$ \[78.128.113.99\]: 535 Incorrect authentication data	2020-04-16 12:42:46
222.186.175.167	attack	2020-04-16T06:51:13.841431vps751288.ovh.net sshd\[23452\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root 2020-04-16T06:51:16.034828vps751288.ovh.net sshd\[23452\]: Failed password for root from 222.186.175.167 port 57406 ssh2 2020-04-16T06:51:19.723865vps751288.ovh.net sshd\[23452\]: Failed password for root from 222.186.175.167 port 57406 ssh2 2020-04-16T06:51:22.625673vps751288.ovh.net sshd\[23452\]: Failed password for root from 222.186.175.167 port 57406 ssh2 2020-04-16T06:51:28.709900vps751288.ovh.net sshd\[23452\]: Failed password for root from 222.186.175.167 port 57406 ssh2	2020-04-16 12:52:48
140.143.189.177	attackspam	Invalid user abm from 140.143.189.177 port 52966	2020-04-16 13:03:44
198.100.158.173	attackbots	Apr 16 01:58:57 firewall sshd[1309]: Failed password for invalid user ubuntu from 198.100.158.173 port 48714 ssh2 Apr 16 02:04:51 firewall sshd[1474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.100.158.173 user=root Apr 16 02:04:53 firewall sshd[1474]: Failed password for root from 198.100.158.173 port 57342 ssh2 ...	2020-04-16 13:17:56
111.176.206.126	attack	[portscan] Port scan	2020-04-16 13:11:04
213.230.67.32	attackbots	Apr 16 07:14:44 ks10 sshd[498556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.230.67.32 Apr 16 07:14:46 ks10 sshd[498556]: Failed password for invalid user ftpuser from 213.230.67.32 port 33914 ssh2 ...	2020-04-16 13:19:22
69.94.131.36	attackbots	Apr 16 05:44:10 web01.agentur-b-2.de postfix/smtpd[466370]: NOQUEUE: reject: RCPT from unknown[69.94.131.36]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 16 05:44:10 web01.agentur-b-2.de postfix/smtpd[464873]: NOQUEUE: reject: RCPT from unknown[69.94.131.36]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 16 05:44:10 web01.agentur-b-2.de postfix/smtpd[463880]: NOQUEUE: reject: RCPT from unknown[69.94.131.36]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 16 05:44:10 web01.agentur-b-2.de postfix/smtpd[461978]: NOQUEUE: reject: RCPT from unknown[69.94.131.36]: 450 4.7.1	2020-04-16 12:44:18
222.186.30.218	attack	Apr 16 00:37:58 NPSTNNYC01T sshd[15198]: Failed password for root from 222.186.30.218 port 55884 ssh2 Apr 16 00:38:00 NPSTNNYC01T sshd[15198]: Failed password for root from 222.186.30.218 port 55884 ssh2 Apr 16 00:38:02 NPSTNNYC01T sshd[15198]: Failed password for root from 222.186.30.218 port 55884 ssh2 ...	2020-04-16 12:48:37

Recently Reported IPs

7.166.78.113	49.147.87.163	164.59.147.237	116.101.249.185
80.106.46.12	57.193.116.80	109.136.32.112	51.232.209.94
99.183.181.30	54.39.103.203	15.159.103.141	218.240.231.193
190.111.138.75	74.141.52.209	92.0.91.126	109.252.7.3
93.56.214.196	182.96.242.9	35.59.127.176	213.85.110.46