Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: PT Delta Nusantara Networks

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackbots
Dovecot Invalid User Login Attempt.
2020-08-27 18:58:10
attack
Dovecot Invalid User Login Attempt.
2020-08-22 13:50:28
attackspam
VNC brute force attack detected by fail2ban
2020-07-06 16:20:56
attack
Sending SPAM email
2020-04-05 10:17:22
attack
spam
2020-01-24 17:05:53
attackbots
2019-09-22 07:38:03 H=(luvass.it) [116.50.29.50]:36740 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/116.50.29.50)
2019-09-22 07:38:04 H=(luvass.it) [116.50.29.50]:36740 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-09-22 07:38:05 H=(luvass.it) [116.50.29.50]:36740 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/116.50.29.50)
...
2019-09-23 04:08:08
attackspambots
proto=tcp  .  spt=58550  .  dpt=25  .     (listed on     Github Combined on 4 lists )     (1491)
2019-09-03 23:46:11
attack
"Account brute force using dictionary attack against Exchange Online"
2019-08-06 03:37:12
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.50.29.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39249
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.50.29.50.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052200 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed May 22 14:35:23 CST 2019
;; MSG SIZE  rcvd: 116

Host info
Host 50.29.50.116.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 50.29.50.116.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
45.136.111.24 attackspambots
1574317651 - 11/21/2019 07:27:31 Host: 45.136.111.24/45.136.111.24 Port: 6001 TCP Blocked
2019-11-21 16:44:38
93.149.79.247 attackspambots
Nov 20 20:53:50 kapalua sshd\[3278\]: Invalid user webmaster from 93.149.79.247
Nov 20 20:53:50 kapalua sshd\[3278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-93-149-79-247.cust.vodafonedsl.it
Nov 20 20:53:53 kapalua sshd\[3278\]: Failed password for invalid user webmaster from 93.149.79.247 port 45270 ssh2
Nov 20 21:00:30 kapalua sshd\[3801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-93-149-79-247.cust.vodafonedsl.it  user=root
Nov 20 21:00:32 kapalua sshd\[3801\]: Failed password for root from 93.149.79.247 port 34894 ssh2
2019-11-21 16:39:30
183.208.134.41 attack
Fail2Ban Ban Triggered
2019-11-21 16:30:35
43.249.194.245 attackbots
2019-11-21T08:43:20.164745abusebot-5.cloudsearch.cf sshd\[18660\]: Invalid user carl from 43.249.194.245 port 38921
2019-11-21 16:48:41
93.174.93.171 attackbotsspam
11/21/2019-01:28:10.478818 93.174.93.171 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-11-21 16:13:47
192.99.86.53 attackspambots
192.99.86.53 was recorded 16 times by 2 hosts attempting to connect to the following ports: 1433. Incident counter (4h, 24h, all-time): 16, 76, 76
2019-11-21 16:28:09
186.24.50.166 attack
445/tcp 445/tcp
[2019-10-27/11-21]2pkt
2019-11-21 16:46:56
192.162.68.244 attackbotsspam
192.162.68.244 - - \[21/Nov/2019:07:27:38 +0100\] "POST /wp-login.php HTTP/1.0" 200 4404 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
192.162.68.244 - - \[21/Nov/2019:07:27:39 +0100\] "POST /wp-login.php HTTP/1.0" 200 4236 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
192.162.68.244 - - \[21/Nov/2019:07:27:40 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-11-21 16:36:06
222.152.188.5 attackbotsspam
TCP Port Scanning
2019-11-21 16:21:07
106.13.148.44 attackspambots
Nov 21 07:54:30 localhost sshd\[21620\]: Invalid user cream from 106.13.148.44 port 41652
Nov 21 07:54:30 localhost sshd\[21620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
Nov 21 07:54:31 localhost sshd\[21620\]: Failed password for invalid user cream from 106.13.148.44 port 41652 ssh2
Nov 21 07:58:55 localhost sshd\[21711\]: Invalid user test1test from 106.13.148.44 port 47534
Nov 21 07:58:55 localhost sshd\[21711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.148.44
...
2019-11-21 16:08:38
167.71.223.191 attack
Nov 21 09:01:34 sd-53420 sshd\[28951\]: User www-data from 167.71.223.191 not allowed because none of user's groups are listed in AllowGroups
Nov 21 09:01:34 sd-53420 sshd\[28951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191  user=www-data
Nov 21 09:01:37 sd-53420 sshd\[28951\]: Failed password for invalid user www-data from 167.71.223.191 port 37578 ssh2
Nov 21 09:05:40 sd-53420 sshd\[30298\]: User root from 167.71.223.191 not allowed because none of user's groups are listed in AllowGroups
Nov 21 09:05:40 sd-53420 sshd\[30298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.223.191  user=root
...
2019-11-21 16:09:55
197.45.117.200 attackbotsspam
Honeypot attack, port: 23, PTR: host-197.45.117.200.tedata.net.
2019-11-21 16:30:03
23.129.64.203 attack
detected by Fail2Ban
2019-11-21 16:19:57
140.143.242.159 attack
2019-11-21T08:30:53.553088  sshd[14444]: Invalid user kcep from 140.143.242.159 port 40920
2019-11-21T08:30:53.568607  sshd[14444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.242.159
2019-11-21T08:30:53.553088  sshd[14444]: Invalid user kcep from 140.143.242.159 port 40920
2019-11-21T08:30:55.295076  sshd[14444]: Failed password for invalid user kcep from 140.143.242.159 port 40920 ssh2
2019-11-21T08:35:20.893327  sshd[14509]: Invalid user krysko from 140.143.242.159 port 44322
...
2019-11-21 16:11:23
162.144.117.232 attack
Automatic report - Port Scan Attack
2019-11-21 16:45:45

Recently Reported IPs

77.182.209.116 186.120.97.26 94.227.225.64 35.107.228.216
235.41.1.196 176.8.212.182 160.44.108.35 230.149.232.36
188.161.79.156 193.32.163.97 220.130.134.190 202.175.187.74
197.248.30.25 195.158.31.181 189.112.81.67 109.228.227.207
172.247.194.2 42.9.174.138 109.100.2.99 154.40.174.194