This IP address has been reported a total of
51
times from
43 distinct
sources.
117.199.170.28 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
Anonymous
Web Spam
Email Spam
Blog Spam
Bad Web Bot
Web App Attack
2022-12-10 00:07:28 server sshd[64251]: Failed password for invalid user kjk from 117.199.170.28 por ...
show more2022-12-10 00:07:28 server sshd[64251]: Failed password for invalid user kjk from 117.199.170.28 port 54983 ssh2
show less
Dec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 1 ...
show moreDec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 117.199.170.28 port 60454 [preauth]
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Invalid user csgoserver from 117.199.170.28 port 58354
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Disconnected from invalid user csgoserver 117.199.170.28 port 58354 [preauth]
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Invalid user postgres from 117.199.170.28 port 58302
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Disconnected from invalid user postgres 117.199.170.28 port 58302 [preauth]
show less
Dec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 1 ...
show moreDec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 117.199.170.28 port 60454 [preauth]
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Invalid user csgoserver from 117.199.170.28 port 58354
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Disconnected from invalid user csgoserver 117.199.170.28 port 58354 [preauth]
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Invalid user postgres from 117.199.170.28 port 58302
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Disconnected from invalid user postgres 117.199.170.28 port 58302 [preauth]
show less
Dec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 1 ...
show moreDec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 117.199.170.28 port 60454 [preauth]
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Invalid user csgoserver from 117.199.170.28 port 58354
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Disconnected from invalid user csgoserver 117.199.170.28 port 58354 [preauth]
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Invalid user postgres from 117.199.170.28 port 58302
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Disconnected from invalid user postgres 117.199.170.28 port 58302 [preauth]
show less
Dec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 1 ...
show moreDec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 117.199.170.28 port 60454 [preauth]
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Invalid user csgoserver from 117.199.170.28 port 58354
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Disconnected from invalid user csgoserver 117.199.170.28 port 58354 [preauth]
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Invalid user postgres from 117.199.170.28 port 58302
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Disconnected from invalid user postgres 117.199.170.28 port 58302 [preauth]
show less
Dec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 1 ...
show moreDec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 117.199.170.28 port 60454 [preauth]
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Invalid user csgoserver from 117.199.170.28 port 58354
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Disconnected from invalid user csgoserver 117.199.170.28 port 58354 [preauth]
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Invalid user postgres from 117.199.170.28 port 58302
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Disconnected from invalid user postgres 117.199.170.28 port 58302 [preauth]
show less
Dec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 1 ...
show moreDec 10 07:54:59 gw02.dial-in-auth.srvfarm.net sshd[705385]: Disconnected from invalid user ftpuser 117.199.170.28 port 60454 [preauth]
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Invalid user csgoserver from 117.199.170.28 port 58354
Dec 10 08:03:08 gw02.dial-in-auth.srvfarm.net sshd[706339]: Disconnected from invalid user csgoserver 117.199.170.28 port 58354 [preauth]
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Invalid user postgres from 117.199.170.28 port 58302
Dec 10 08:07:10 gw02.dial-in-auth.srvfarm.net sshd[706773]: Disconnected from invalid user postgres 117.199.170.28 port 58302 [preauth]
show less
Dec 10 07:19:55 DVSwitch-GM0WUR sshd[793]: pam_unix(sshd:auth): authentication failure; logname= uid ...
show moreDec 10 07:19:55 DVSwitch-GM0WUR sshd[793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.199.170.28
Dec 10 07:19:57 DVSwitch-GM0WUR sshd[793]: Failed password for invalid user ubuntu from 117.199.170.28 port 38592 ssh2
...
show less
Dec 10 01:03:51 skylands sshd[3798013]: Invalid user csgoserver from 117.199.170.28 port 34934
Dec 1 ...
show moreDec 10 01:03:51 skylands sshd[3798013]: Invalid user csgoserver from 117.199.170.28 port 34934
Dec 10 01:03:51 skylands sshd[3798013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.199.170.28
Dec 10 01:03:53 skylands sshd[3798013]: Failed password for invalid user csgoserver from 117.199.170.28 port 34934 ssh2
Dec 10 01:07:54 skylands sshd[3799673]: Connection from 117.199.170.28 port 34878 on 207.244.236.142 port 4445 rdomain ""
Dec 10 01:07:56 skylands sshd[3799673]: User postgres from 117.199.170.28 not allowed because none of user's groups are listed in AllowGroups
...
show less
Brute-Force
SSH
Showing 1 to
15
of 51 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩