City: unknown
Region: unknown
Country: China
Internet Service Provider: Shanghai UCloud Information Technology Company Limited
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspam | Repeated brute force against a port |
2019-08-18 10:38:10 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.50.21.168 | attackspambots | scans once in preceeding hours on the ports (in chronological order) 32733 resulting in total of 1 scans from 117.50.0.0/16 block. |
2020-06-07 02:49:24 |
| 117.50.21.253 | attack | Jun 2 16:16:21 [host] sshd[32404]: pam_unix(sshd: Jun 2 16:16:23 [host] sshd[32404]: Failed passwor Jun 2 16:18:36 [host] sshd[32473]: pam_unix(sshd: |
2020-06-03 00:03:39 |
| 117.50.21.168 | attack | May 16 04:29:23 melroy-server sshd[26717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.21.168 May 16 04:29:25 melroy-server sshd[26717]: Failed password for invalid user deploy from 117.50.21.168 port 57692 ssh2 ... |
2020-05-16 23:55:48 |
| 117.50.21.168 | attack | May 11 15:10:06 home sshd[13385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.21.168 May 11 15:10:08 home sshd[13385]: Failed password for invalid user ep from 117.50.21.168 port 36036 ssh2 May 11 15:15:19 home sshd[14219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.21.168 ... |
2020-05-11 21:30:34 |
| 117.50.21.168 | attack | May 2 15:27:34 host sshd[19853]: Invalid user admin6 from 117.50.21.168 port 38342 ... |
2020-05-02 23:29:23 |
| 117.50.21.168 | attackbots | Apr 28 18:28:35 xeon sshd[56863]: Failed password for invalid user hal from 117.50.21.168 port 39790 ssh2 |
2020-04-29 01:31:31 |
| 117.50.21.168 | attackbots | 2020-04-25T14:04:56.128059linuxbox-skyline sshd[68394]: Invalid user ts from 117.50.21.168 port 41094 ... |
2020-04-26 04:21:12 |
| 117.50.21.68 | attackbots | Unauthorized connection attempt detected from IP address 117.50.21.68 to port 22 [T] |
2020-01-07 02:12:17 |
| 117.50.21.150 | attackbots | Nov 9 07:19:57 lnxded63 sshd[22570]: Failed password for root from 117.50.21.150 port 36106 ssh2 Nov 9 07:19:58 lnxded63 sshd[22570]: error: Received disconnect from 117.50.21.150 port 36106:3: [munged]:ception: Auth fail [preauth] |
2019-11-09 21:21:44 |
| 117.50.21.68 | attackspam | Failed password for admin from 117.50.21.68 port 57608 ssh2 |
2019-11-09 03:50:40 |
| 117.50.21.150 | attack | SSH Brute-Force reported by Fail2Ban |
2019-09-29 20:30:37 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.50.21.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12886
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.50.21.156. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081701 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 10:38:03 CST 2019
;; MSG SIZE rcvd: 117Host 156.21.50.117.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 156.21.50.117.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.250.141.192 | attack | Honeypot attack, port: 23, PTR: 111-250-141-192.dynamic-ip.hinet.net. |
2019-09-14 14:10:09 |
| 107.180.109.32 | attack | Port Scan: TCP/443 |
2019-09-14 14:44:22 |
| 176.36.49.215 | attackbots | Port Scan: TCP/5555 |
2019-09-14 14:03:12 |
| 186.75.158.83 | attackspambots | Port Scan: TCP/445 |
2019-09-14 14:36:46 |
| 124.19.25.1 | attackbotsspam | Port Scan: TCP/135 |
2019-09-14 14:42:15 |
| 117.34.112.10 | attack | Port Scan: TCP/445 |
2019-09-14 14:42:59 |
| 64.190.75.9 | attackbots | Port Scan: UDP/137 |
2019-09-14 14:23:05 |
| 119.54.237.150 | attackspambots | Port Scan: TCP/23 |
2019-09-14 14:07:24 |
| 116.228.147.46 | attackspambots | Port Scan: UDP/37853 |
2019-09-14 14:43:29 |
| 211.43.207.58 | attack | Port Scan: TCP/445 |
2019-09-14 13:55:33 |
| 209.200.15.177 | attack | Port Scan: TCP/445 |
2019-09-14 13:56:11 |
| 13.90.214.216 | attackbotsspam | Port Scan: TCP/443 |
2019-09-14 14:27:30 |
| 162.244.65.49 | attack | Port Scan: TCP/445 |
2019-09-14 14:03:58 |
| 13.54.221.77 | attack | Port Scan: TCP/135 |
2019-09-14 14:28:09 |
| 101.28.87.185 | attackspambots | Port Scan: TCP/23 |
2019-09-14 14:14:47 |