Go
221.203.169.50
is an
Open Proxy
used by
Hackers
100 %
China
Report Abuse
55attacks reported
18Brute-Force
8uncategorized
8Brute-ForceMailserver Attack
4Brute-ForceExploited Host
4HackingBrute-Force
3Port ScanBrute-ForceWeb App Attack
3DDoS AttackEmail SpamBrute-Force
3Mailserver Attack
2Web App Attack
1Port Scan
...
48abuse reported
12Email Spam
9Email SpamBrute-Force
8Bad Web BotWeb SpamBlog Spam
7Web SpamForum Spam
4Web SpamBad Web Bot
3Bad Web Bot
2uncategorized
1Web SpamBrute-ForceWeb App AttackEmail Spam
1Email SpamDDoS AttackWeb SpamPort ScanSSH
1Web SpamBad Web BotBlog SpamForum Spam
12anonymizers reported
12Open Proxy
2spam reported
1Email Spam
1uncategorized
from 32 distinct reporters
and 12 distinct sources : BotScout.com, FireHOL, ProxyLists.net, ProxZ.com, sblam.com, Free Proxy List, StopForumSpam.com, BadIPs.com, VoIPBL.org, CleanTalk, Blocklist.de, AbuseIPDB
221.203.169.50 was first signaled at 2017-12-02 14:50 and last record was at 2019-09-06 23:43.
IP

221.203.169.50

Organization
CHINA UNICOM China169 Backbone
Localisation
China
Liaoning, Shenyang
NetRange : First & Last IP
221.200.0.0 - 221.203.255.255
Network CIDR
221.200.0.0/14

Cybercrime IP Feeds

Date UTC Category Sub Categories Source List Source Logs
2019-05-31 21:20 attacks Brute-Force AbuseIPDB Jun 1 01:20:02 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=221
2019-05-30 11:04 abuse Email Spam AbuseIPDB CooMeet - the best video chat with girls online
2019-05-26 13:53 abuse Web SpamBrute-ForceWeb App AttackEmail Spam AbuseIPDB Brute force attack stopped by firewall
2019-05-24 13:55 abuse Email SpamBrute-Force AbuseIPDB Brute force attack to crack SMTP password (port 25 / 587)
2019-05-17 18:55 attacks Brute-ForceExploited Host AbuseIPDB Brute force attempt
2019-05-14 13:39 attacks Brute-Force AbuseIPDB IMAP brute force
2019-05-11 21:49 abuse Email Spam AbuseIPDB Trying to deliver email spam, but blocked by RBL
2019-05-08 16:42 attacks Brute-Force AbuseIPDB  
2019-05-07 04:58 attacks Brute-ForceExploited Host AbuseIPDB Brute force attempt
2019-05-06 13:22 attacks Brute-Force AbuseIPDB May 6 17:22:01 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=221
2019-05-05 03:39 attacks Brute-Force AbuseIPDB IMAP brute force
2019-05-02 19:24 attacks Brute-ForceExploited Host AbuseIPDB Brute force attempt
2019-04-29 17:37 attacks Brute-Force AbuseIPDB failed_logins
2019-04-27 14:21 attacks Brute-ForceExploited Host AbuseIPDB Brute force attempt
2019-04-27 04:51 attacks Brute-Force AbuseIPDB $f2bV_matches
2019-04-13 22:12 abuse Email SpamBrute-Force AbuseIPDB TCP src-port=34635 dst-port=25 dnsbl-sorbs abuseat-org barracuda (Project Honey Pot rated Suspicious
2019-04-10 13:50 abuse Email SpamBrute-Force AbuseIPDB Brute force attack to crack SMTP password (port 25 / 587)
2019-03-27 04:12 abuse Email Spam AbuseIPDB Spam Timestamp : 27-Mar-19 12:56 _ BlockList Provider combined abuse _ (477)
2019-03-22 00:13 abuse Email Spam AbuseIPDB Spam Timestamp : 22-Mar-19 08:39 _ BlockList Provider combined abuse _ (937)
2019-03-20 05:12 abuse Email Spam AbuseIPDB Spam Timestamp : 20-Mar-19 13:25 _ BlockList Provider combined abuse _ (500)
2018-12-31 19:14 abuse Email SpamBrute-Force AbuseIPDB PROTO=TCP . SPT=47603 . DPT=25 . Block List de (199)
2018-12-30 23:29 abuse Email Spam AbuseIPDB Dec 31 19:57:53 our-server-hostname postfix/smtpd[9043]: connect from unknown[221.203.169.50] Dec [email protected] Dec [email protected] De
2018-12-18 11:42 attacks HackingBrute-Force AbuseIPDB Disconnected \(auth failed, 1 attempts in 6 secs\):
2018-12-15 17:35 attacks Port ScanBrute-ForceWeb App Attack AbuseIPDB Dec1604:24:48server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin6secs\):user=\<[email protected]\>\,method=PLAIN\,rip=85.93.36.
2018-12-11 05:10 attacks DDoS AttackEmail SpamBrute-Force AbuseIPDB Autoban F2B 221.203.169.50
2018-12-10 13:00 attacks HackingBrute-Force AbuseIPDB Disconnected \(auth failed, 1 attempts in 6 secs\):
2018-12-08 21:55 attacks HackingBrute-Force AbuseIPDB 09.12.2018 08:54:57 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F
2018-12-08 13:55 attacks Brute-Force AbuseIPDB Dec 8 17:55:07 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=221
2018-12-07 14:46 attacks HackingBrute-Force AbuseIPDB 08.12.2018 01:45:52 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F
2018-12-07 05:14 attacks DDoS AttackEmail SpamBrute-Force AbuseIPDB Autoban F2B 221.203.169.50
2018-12-05 14:47 attacks DDoS AttackEmail SpamBrute-Force AbuseIPDB Autoban F2B 221.203.169.50
2018-12-04 22:00 attacks Port ScanBrute-ForceWeb App Attack AbuseIPDB Dec508:59:58server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin7secs\):user=\<[email protected]\>\,method=PLAIN\,rip=221.203.16
2018-12-04 07:55 attacks Brute-Force AbuseIPDB Dec 4 18:55:07 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:221.203.169.50\]
2018-12-03 18:24 attacks Brute-Force AbuseIPDB $f2bV_matches
2018-12-03 12:44 attacks Brute-Force AbuseIPDB Dec 3 23:44:38 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:221.203.169.50\]
2018-11-29 08:52 attacks Brute-Force AbuseIPDB Nov 29 12:52:43 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=22
2018-11-24 09:30 abuse Email Spam AbuseIPDB SpamReport
2018-11-21 02:37 attacks Brute-Force AbuseIPDB Nov 21 13:37:48 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:221.203.169.50\]
2018-11-20 23:21 abuse Email Spam AbuseIPDB Received: from [127.0.0.1] (unknown [221.203.169.50]) by mail2.cabinetazizdiey.sn (Postfix) with ESMTPSA id DAD002CFFC4; Tue, 20 Nov 2018 19:45:04 +00
2018-11-19 18:29 attacks Brute-Force AbuseIPDB Nov 20 05:29:25 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:221.203.169.50\]
2018-11-18 19:31 abuse Email Spam AbuseIPDB Nov 19 13:29:21 our-server-hostname postfix/smtpd[10172]: connect from unknown[221.203.169.50] Nov [email protected] Nov [email protected] N
2018-11-07 16:28 attacks Brute-Force AbuseIPDB Nov 7 20:28:37 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=221
2018-10-22 12:13 attacks Brute-Force AbuseIPDB $f2bV_matches
2018-10-06 15:17 attacks Brute-Force AbuseIPDB Oct 6 19:17:37 mailman dovecot: imap-login: Disconnected (auth failed, 1 attempts): user=<[email protected][munged]>, method=PLAIN, rip=221
2018-10-05 22:49 attacks Brute-Force AbuseIPDB mail auth brute force
2018-07-16 09:44 abuse Email Spam AbuseIPDB I Missed Fuckbuddy Message
2018-07-03 19:56 attacks Web App Attack AbuseIPDB POST /node/3554?destination=node/3554 HTTP/1.0
2018-06-29 04:45 abuse Web SpamBad Web Bot AbuseIPDB Mass mailinglist subscriptions with fake email addresses.
2018-06-28 22:36 abuse Email Spam AbuseIPDB Delivery of junk email to SMTP.
2018-06-28 03:12 abuse Web SpamBad Web Bot AbuseIPDB Mass mailinglist subscriptions with fake email addresses.
2017-12-02 14:50 abuse Email SpamBrute-Force AbuseIPDB SMTP/25/465/587 Probe, Reject, BadAuth, SPAM -
2017-12-02 14:51 abuse Email SpamBrute-Force AbuseIPDB SMTP/25/465/587 Probe, Reject, BadAuth, SPAM -
2017-12-02 15:44 attacks Port Scan AbuseIPDB Multiple SMTP connections
2017-12-02 22:59 abuse Email SpamDDoS AttackWeb SpamPort Scan AbuseIPDB Received: from 221.203.169.50; 09 Sep 2017 09:06:46 +0200 Return-Path: XXXXXXXXXXXXXXX Received: from apache by 2IxVj7R-67mB9fnz.advancedmedicalequipm
2017-12-08 06:34 abuse Email SpamBrute-Force AbuseIPDB SMTP/25/465/587 Probe, Reject, BadAuth, SPAM -
2018-01-10 20:49 abuse Email SpamBrute-Force AbuseIPDB SMTP/25/465/587 Probe, Reject, BadAuth, SPAM -
2018-02-11 13:19 abuse Email SpamBrute-Force AbuseIPDB SMTP/25/465/587 Probe, Reject, BadAuth, SPAM -
2018-03-09 18:41 attacks Port ScanBrute-ForceWeb App Attack AbuseIPDB [SatMar1005:41:06.8185932018][:error][pid13579][client221.203.169.50:54759][client221.203.169.50]ModSecurity:Accessdeniedwithcode406\(phase2\).File\&q
2018-03-28 14:30 attacks Web App Attack AbuseIPDB Malicious brute force vulnerability hacking attacks
2018-06-11 02:54 abuse Email Spam AbuseIPDB Jun 10 23:08:19 penfold postfix/smtpd[11646]: connect from unknown[221.203.169.50] Jun [email protected] Jun 10 23:08:22 penfold postfix/smtpd[11
2019-03-29 18:21 abuse Bad Web Bot botscout_1d BotScout.com  
2019-03-29 18:22 abuse Bad Web Bot botscout_30d BotScout.com  
2019-03-29 18:22 abuse Bad Web Bot botscout_7d BotScout.com  
2019-03-29 18:24 abuse firehol_abusers_1d FireHOL  
2019-03-29 18:27 abuse firehol_abusers_30d FireHOL  
2019-03-29 18:28 attacks firehol_level4 FireHOL  
2019-03-29 18:34 anonymizers Open Proxy firehol_proxies FireHOL  
2019-03-29 18:41 spam Email Spam nixspam  
2019-03-29 18:42 anonymizers Open Proxy proxylists ProxyLists.net  
2019-03-29 18:42 anonymizers Open Proxy proxylists_1d ProxyLists.net  
2019-03-29 18:42 anonymizers Open Proxy proxylists_30d ProxyLists.net  
2019-03-29 18:42 anonymizers Open Proxy proxylists_7d ProxyLists.net  
2019-03-29 18:42 anonymizers Open Proxy proxz_30d ProxZ.com  
2019-03-29 18:42 anonymizers Open Proxy proxz_7d ProxZ.com  
2019-03-29 18:42 abuse Web SpamBad Web BotBlog SpamForum Spam sblam sblam.com  
2019-03-29 18:42 anonymizers Open Proxy socks_proxy_30d Free Proxy List  
2019-03-29 18:43 anonymizers Open Proxy socks_proxy_7d Free Proxy List  
2019-03-29 18:45 abuse Web SpamForum Spam stopforumspam StopForumSpam.com  
2019-03-29 18:47 abuse Web SpamForum Spam stopforumspam_180d StopForumSpam.com  
2019-03-29 18:48 abuse Web SpamForum Spam stopforumspam_30d StopForumSpam.com  
2019-03-29 18:51 abuse Web SpamForum Spam stopforumspam_365d StopForumSpam.com  
2019-03-29 18:51 abuse Web SpamForum Spam stopforumspam_7d StopForumSpam.com  
2019-03-29 18:52 abuse Web SpamForum Spam stopforumspam_90d StopForumSpam.com  
2019-05-28 23:18 attacks bi_any_1_7d BadIPs.com  
2019-05-28 23:18 attacks bi_any_2_30d BadIPs.com  
2019-05-28 23:19 attacks bi_any_2_7d BadIPs.com  
2019-05-28 23:19 attacks Brute-ForceMailserver Attack bi_dovecot_1_7d BadIPs.com  
2019-05-28 23:19 attacks Brute-ForceMailserver Attack bi_dovecot_2_30d BadIPs.com  
2019-05-28 23:19 attacks Brute-ForceMailserver Attack bi_mail_1_7d BadIPs.com  
2019-05-28 23:19 attacks Brute-ForceMailserver Attack bi_mail_2_30d BadIPs.com  
2019-05-28 23:19 attacks Brute-ForceMailserver Attack bi_postfix_2_30d BadIPs.com  
2019-05-28 23:36 spam lashback_ubl  
2019-05-28 23:39 anonymizers Open Proxy proxz_1d ProxZ.com  
2019-05-28 23:46 attacks Fraud VoIP voipbl VoIPBL.org  
2019-06-05 20:47 anonymizers Open Proxy socks_proxy_1d Free Proxy List  
2019-06-13 13:37 abuse Bad Web BotWeb SpamBlog Spam cleantalk CleanTalk  
2019-06-13 13:37 abuse Bad Web BotWeb SpamBlog Spam cleantalk_1d CleanTalk  
2019-06-13 13:38 abuse Bad Web BotWeb SpamBlog Spam cleantalk_30d CleanTalk  
2019-06-13 13:38 abuse Bad Web BotWeb SpamBlog Spam cleantalk_7d CleanTalk  
2019-06-13 13:39 abuse Bad Web BotWeb SpamBlog Spam cleantalk_updated CleanTalk  
2019-06-13 13:39 abuse Bad Web BotWeb SpamBlog Spam cleantalk_updated_1d CleanTalk  
2019-06-13 13:40 abuse Bad Web BotWeb SpamBlog Spam cleantalk_updated_30d CleanTalk  
2019-06-13 13:40 abuse Bad Web BotWeb SpamBlog Spam cleantalk_updated_7d CleanTalk  
2019-06-16 10:37 anonymizers Open Proxy proxz ProxZ.com  
2019-06-23 02:55 attacks blocklist_de Blocklist.de  
2019-06-23 02:56 attacks Brute-ForceMailserver Attack blocklist_de_mail Blocklist.de  
2019-06-23 03:00 attacks firehol_level2 FireHOL  
2019-06-27 22:31 abuse Web SpamForum Spam stopforumspam_1d StopForumSpam.com  
2019-07-08 11:40 attacks bi_any_0_1d BadIPs.com  
2019-07-08 11:40 attacks bi_any_2_1d BadIPs.com  
2019-07-08 11:40 attacks Brute-ForceMailserver Attack bi_mail_0_1d BadIPs.com  
2019-07-08 11:40 attacks Mailserver Attack bi_sasl_0_1d BadIPs.com  
2019-07-08 11:40 attacks Mailserver Attack bi_sasl_1_7d BadIPs.com  
2019-07-09 10:38 attacks Mailserver Attack bi_sasl_2_30d BadIPs.com  
2019-09-06 23:43 attacks Brute-ForceMailserver Attack bi_dovecot-pop3imap_0_1d BadIPs.com  
only last 50 and first 10 AbuseIPDB logs are shown

Threats Categories :

abuse
IPs used to spam forum, boards, blogs or smtp servers, automated web scripts or scrappers (bad bots)
anonymizer
Onion Router IP addresses. TOR network IPs, TOR exit points, socks or ssl proxy.
attacks
bruteforce ssh/ftp/system account, IPs that have been detected by fail2ban, ports scan, vulnerabilities scan, DDoS.
malware
Addresses that have been identified distributing malware, form-grabber and stealer, Viruses, Worms, Trojans, Ransomware, Adware, Spyware

Whois

inetnum: 221.200.0.0 - 221.203.255.255
netname: UNICOM-LN
descr: China Unicom Liaoning Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: GZ84-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-LN
mnt-routes: MAINT-CNCGROUP-RR
status: ALLOCATED PORTABLE
mnt-irt: IRT-CU-CN
last-modified: 2013-08-08T23:30:26Z
source: APNIC

irt: IRT-CU-CN
address: No.21,Financial Street
address: Beijing,100033
address: P.R.China
e-mail: hqs-ipabuse@chinaunicom.cn
abuse-mailbox: hqs-ipabuse@chinaunicom.cn
admin-c: CH1302-AP
tech-c: CH1302-AP
auth: # Filtered
mnt-by: MAINT-CNCGROUP
last-modified: 2017-10-23T05:59:13Z
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100033
address: P.R.China
phone: +86-10-66259764
fax-no: +86-10-66259764
country: CN
mnt-by: MAINT-CNCGROUP
last-modified: 2017-08-17T06:13:16Z
source: APNIC

person: Guangyu Zhan
nic-hdl: GZ84-AP
e-mail: hqs-ipabuse@chinaunicom.cn
address: DATA Communication Bureau of Liaoning Province,China
address: 38 Lianhe Road,Dadong District Shenyang 110044,China
phone: +86-24-22800809
fax-no: +86-24-22800077
country: CN
mnt-by: MAINT-CNCGROUP-LN
last-modified: 2017-08-17T06:16:09Z
source: APNIC

route: 221.200.0.0/14
descr: CNC Group CHINA169 Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
last-modified: 2008-09-04T07:54:44Z
source: APNIC
most specific ip range is highlighted
Updated : 2019-07-06