AS49720 · GIGACLOUD-AS - Gigacloud LLC, UA · 185.250.21.0/24 · UA registry
Source descriptions describe reported observations. They are not a CTIDAO verdict.
SSH login attempts observed. SSH shell commands submitted. SSH activity triggered Fail2Ban bans.
ip-reputation · blocklist · fail2ban · honeypots · ssh · scanning · exploitation
First observed Sep 9, 2026 · Last observed Sep 21, 2026
Reported source: CTIDAO Blocklist Feed
Observed 7 times. Targeted ports: 65463. Country: Ukraine. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
honeypot · historical
First observed Sep 12, 2026 · Last observed Sep 12, 2026
Reported source: tpot-honeypot
1 observed relationships
0 observed services · stale snapshot
Recorded observations do not establish that a port is open now.
AS49720 · 185.250.21.0/24
Not present in the current list
Popularity is neutral context, not threat evidence.
Use the evidence tabs to inspect complete observations and follow related entities. An absence of observations does not establish safety.
CTIDAO Blocklist Feed: SSH login attempts observed. SSH shell commands submitted. SSH activity triggered Fail2Ban bans.
Honeypot infrastructure watch: Observed 7 times. Targeted ports: 65463. Country: Ukraine. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| 185.250.21.217 | ip | ip-reputation, blocklist, fail2ban | 2026-09-21 09:31:12 | |
CTIDAO Blocklist Feed: SSH login attempts observed. SSH shell commands submitted. SSH activity triggered Fail2Ban bans. Honeypot infrastructure watch: Observed 7 times. Targeted ports: 65463. Country: Ukraine. Reputation: known attacker. Alert categories: Misc activity. Signatures: ET INFO SSH session in progress on Unusual Port. | ||||
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| mail.vplast.com.ua | 185.250.21.217 | Oct 2026First seen: Oct 2026 | 1 | CTIDAO DNS |
BGP origin and registry data from Team Cymru.
GIGACLOUD-AS - Gigacloud LLC, UA
Registry country is RIR assignment data, not IP geolocation.
Checked 10/19/2026, 8:13:00 AM
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
Not present in the current Top 1M lists.
Current scanner state. Times mean last observed open, not open now.
The last good scanner snapshot is stale; a refresh is queued.
| Port | Transport | Service | Product | Last observed open |
|---|
1 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.