JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

117.57.22.217

Neutral Activity

Abuse confidence score ?

0% Low Risk

16 reports

14 reporters · latest 3 years ago

ISP	CHINANET anhui province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Hefei, Anhui

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

117.57.22.217 has been reported 16 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 117.57.22.217

Export CSV

This IP address has been reported a total of 16 times from 14 distinct sources. 117.57.22.217 was first reported on July 13th 2021, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 DumaNet	2023-07-06 02:54:42 (3 years ago)	Blocked for port scanning. Time: Tue Jul 4. 19:49:17 2023 +0200 IP: 117.57.22.217 (CN/China/-) ... show more Blocked for port scanning. Time: Tue Jul 4. 19:49:17 2023 +0200 IP: 117.57.22.217 (CN/China/-) Sample of block hits: Jul 4 19:48:09 vserv kernel: [979276.546069] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=52 TOS=0x08 PREC=0x20 TTL=104 ID=15949 DF PROTO=TCP SPT=56814 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 4 19:48:12 vserv kernel: [979279.551645] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=52 TOS=0x08 PREC=0x20 TTL=104 ID=17126 DF PROTO=TCP SPT=56814 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 4 19:48:18 vserv kernel: [979285.548126] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=48 TOS=0x08 PREC=0x20 TTL=104 ID=19725 DF PROTO=TCP SPT=56814 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 4 19:48:30 vserv kernel: [979297.553706] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=25026 DF PROTO=TCP SPT=58250 DPT=587 WINDOW=8192 RES=0x00 show less	Port Scan
🇭🇺 DumaNet	2023-07-06 02:07:33 (3 years ago)	Blocked for port scanning. Time: Tue Jul 4. 10:58:21 2023 +0200 IP: 117.57.22.217 (CN/China/-) ... show more Blocked for port scanning. Time: Tue Jul 4. 10:58:21 2023 +0200 IP: 117.57.22.217 (CN/China/-) Sample of block hits: Jul 4 10:57:09 vserv kernel: [947416.862798] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=3313 DF PROTO=TCP SPT=50967 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 4 10:57:12 vserv kernel: [947419.875344] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=52 TOS=0x08 PREC=0x20 TTL=105 ID=4432 DF PROTO=TCP SPT=50967 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 4 10:57:18 vserv kernel: [947425.882300] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=48 TOS=0x08 PREC=0x20 TTL=105 ID=6830 DF PROTO=TCP SPT=50967 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 4 10:57:31 vserv kernel: [947439.651290] Firewall: TCP_IN Blocked IN=eth0 OUT= MAC= SRC=117.57.22.217 DST=[removed] LEN=52 TOS=0x08 PREC=0x20 TTL=104 ID=12128 DF PROTO=TCP SPT=52491 DPT=587 WINDOW=8192 RES=0x00 SYN show less	Port Scan
Anonymous	2023-07-04 18:39:10 (3 years ago)	Jul 4 20:39:09 ns3104219 postfix/smtpd[32020]: NOQUEUE: reject: RCPT from unknown[117.57.22.217]: 4 ... show more Jul 4 20:39:09 ns3104219 postfix/smtpd[32020]: NOQUEUE: reject: RCPT from unknown[117.57.22.217]: 450 4.7.1 <Q43EnZ7Zl>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<Q43EnZ7Zl> ... show less	Email Spam Web App Attack
🇺🇸 NXTwoThou	2023-07-04 17:35:55 (3 years ago)	SMTP relay attempt	Brute-Force
🇩🇪 Dennis	2023-07-04 17:14:03 (3 years ago)	117.57.22.217 has been banned for triggering postfix-spam (11 events over 54.249295694s).	Email Spam Port Scan Brute-Force
🇬🇧 Mendip_Defender	2023-07-04 16:27:43 (3 years ago)	Jul 4 17:27:39 jackstringer postfix/smtpd[2103030]: warning: unknown[117.57.22.217]: SASL LOGIN aut ... show more Jul 4 17:27:39 jackstringer postfix/smtpd[2103030]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure Jul 4 17:27:41 jackstringer postfix/smtpd[2103030]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇩🇪 Nagilum	2023-07-04 15:09:36 (3 years ago)	The IP 117.57.22.217 has just been banned by Fail2Ban after too many attempts against sasl.	Brute-Force
Anonymous	2023-07-04 11:49:16 (3 years ago)	Jul 4 13:49:16 ns3130050 postfix/smtpd[22528]: NOQUEUE: reject: RCPT from unknown[117.57.22.217]: 4 ... show more Jul 4 13:49:16 ns3130050 postfix/smtpd[22528]: NOQUEUE: reject: RCPT from unknown[117.57.22.217]: 450 4.7.1 <HEVI1kGrM>: Helo command rejected: Host not found; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<HEVI1kGrM> ... show less	Email Spam Web App Attack
🇬🇧 Paul Smith	2023-07-04 11:22:18 (3 years ago)	Email Auth Brute force attack 4/2 in last day	Brute-Force
🇺🇸 hostseries	2023-07-04 10:39:23 (3 years ago)	Trigger: LF_SMTPAUTH	Brute-Force
🇩🇪 mwgbr	2023-07-04 08:58:09 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 117.57.22.217 (CN/China/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 117.57.22.217 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Jul 4 10:57:47 mail postfix/smtpd[1314]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure Jul 4 10:57:51 mail postfix/smtpd[1314]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure Jul 4 10:57:59 mail postfix/smtpd[1314]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure Jul 4 10:58:02 mail postfix/smtpd[1314]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure Jul 4 10:58:08 mail postfix/smtpd[1314]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: authentication failure show less	Port Scan
🇺🇸 vestibtech	2023-07-04 08:54:07 (3 years ago)	Jul 4 02:54:01 Host-KLAX-C postfix/smtp/smtpd[3985456]: lost connection after AUTH from unknown[117 ... show more Jul 4 02:54:01 Host-KLAX-C postfix/smtp/smtpd[3985456]: lost connection after AUTH from unknown[117.57.22.217] Jul 4 02:54:03 Host-KLAX-C postfix/smtp/smtpd[3985954]: lost connection after AUTH from unknown[117.57.22.217] Jul 4 02:54:06 Host-KLAX-C postfix/smtp/smtpd[3985456]: lost connection after AUTH from unknown[117.57.22.217] Jul 4 02:54:07 Host-KLAX-C postfix/smtp/smtpd[3985954]: lost connection after AUTH from unknown[117.57.22.217] ... show less	DDoS Attack Port Scan
🇩🇪 final	2023-07-04 08:12:45 (3 years ago)	Jul 4 10:12:42 xxxxx postfix/smtpd[166436]: lost connection after AUTH from unknown[117.57.22.217] ... show more Jul 4 10:12:42 xxxxx postfix/smtpd[166436]: lost connection after AUTH from unknown[117.57.22.217] Jul 4 10:12:42 xxxxx postfix/smtpd[166436]: disconnect from unknown[117.57.22.217] ehlo=2 starttls=1 auth=0/1 commands=3/4 Jul 4 10:12:44 xxxxx postfix/smtpd[166436]: lost connection after AUTH from unknown[117.57.22.217] Jul 4 10:12:44 xxxxx postfix/smtpd[166436]: disconnect from unknown[117.57.22.217] ehlo=2 starttls=1 auth=0/1 commands=3/4 show less	Phishing Email Spam Spoofing
🇩🇪 ipcop.net	2023-05-10 07:00:47 (3 years ago)	May 10 09:00:28 web01.schwick.de postfix/smtpd[2683276]: warning: unknown[117.57.22.217]: SASL LOGIN ... show more May 10 09:00:28 web01.schwick.de postfix/smtpd[2683276]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 09:00:28 web01.schwick.de postfix/smtpd[2683276]: lost connection after AUTH from unknown[117.57.22.217] May 10 09:00:35 web01.schwick.de postfix/smtpd[2680822]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 10 09:00:35 web01.schwick.de postfix/smtpd[2680822]: lost connection after AUTH from unknown[117.57.22.217] May 10 09:00:47 web01.schwick.de postfix/smtpd[2683276]: warning: unknown[117.57.22.217]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Fraud VoIP Brute-Force
🇮🇹 www.tana.it	2023-03-19 23:17:06 (3 years ago)	SMTP auth dictionary attack	Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 190.112.210.251

🇪🇸 85.87.139.177

🇺🇸 69.176.44.111

🇺🇸 208.122.8.18

🇺🇸 206.189.233.36

🇳🇱 193.47.62.69

🇨🇱 186.189.99.87

🇰🇭 175.100.59.111

🇩🇪 154.194.97.102

🇺🇸 144.225.187.68

🇺🇸 66.132.172.130

🇯🇵 34.104.158.38

🇩🇪 23.132.164.96

🇰🇷 221.168.97.214

🇨🇴 190.90.255.254

🇺🇸 154.219.120.155

🇰🇷 116.123.150.231

🇺🇸 67.205.154.9

🇫🇷 62.171.151.75

🇺🇸 47.133.24.41