117.50.100.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shanghai UCloud Information Technology Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Jul 26 05:59:22 vpn01 sshd[22600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.100.13 Jul 26 05:59:23 vpn01 sshd[22600]: Failed password for invalid user developer from 117.50.100.13 port 56894 ssh2 ...	2020-07-26 12:35:22
attack	Jul 22 05:59:13 * sshd[631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.100.13 Jul 22 05:59:15 * sshd[631]: Failed password for invalid user tat from 117.50.100.13 port 44914 ssh2	2020-07-22 12:27:49
attackspam	2020-07-06T20:01:19.115007hostname sshd[11446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.100.13 2020-07-06T20:01:19.089698hostname sshd[11446]: Invalid user ljs from 117.50.100.13 port 36062 2020-07-06T20:01:21.007218hostname sshd[11446]: Failed password for invalid user ljs from 117.50.100.13 port 36062 ssh2 ...	2020-07-07 01:59:35
attackbots	firewall-block, port(s): 12005/tcp	2020-07-02 07:42:35
attackbots	Jun 25 08:49:27 debian-2gb-nbg1-2 kernel: \[15326429.700192\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=117.50.100.13 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=4645 PROTO=TCP SPT=59284 DPT=4398 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-25 14:50:31
attackspam	Jun 22 00:27:14 lukav-desktop sshd\[26651\]: Invalid user sie from 117.50.100.13 Jun 22 00:27:15 lukav-desktop sshd\[26651\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.100.13 Jun 22 00:27:17 lukav-desktop sshd\[26651\]: Failed password for invalid user sie from 117.50.100.13 port 37436 ssh2 Jun 22 00:30:20 lukav-desktop sshd\[26684\]: Invalid user ubuntu from 117.50.100.13 Jun 22 00:30:20 lukav-desktop sshd\[26684\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.100.13	2020-06-22 05:34:08
attackbots	Jun 12 12:05:26 ip-172-31-61-156 sshd[30217]: Invalid user edata from 117.50.100.13 Jun 12 12:05:28 ip-172-31-61-156 sshd[30217]: Failed password for invalid user edata from 117.50.100.13 port 43454 ssh2 Jun 12 12:05:26 ip-172-31-61-156 sshd[30217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.100.13 Jun 12 12:05:26 ip-172-31-61-156 sshd[30217]: Invalid user edata from 117.50.100.13 Jun 12 12:05:28 ip-172-31-61-156 sshd[30217]: Failed password for invalid user edata from 117.50.100.13 port 43454 ssh2 ...	2020-06-13 00:03:40
attackspam	Jun 3 00:01:28 vpn01 sshd[15984]: Failed password for root from 117.50.100.13 port 35910 ssh2 ...	2020-06-03 06:54:29

Comments on same subnet:

IP	Type	Details	Datetime
117.50.100.216	attack	firewall-block, port(s): 20000/tcp	2020-02-13 06:27:44
117.50.100.216	attackspambots	01/21/2020-12:30:02.028495 117.50.100.216 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-01-22 04:19:14
117.50.100.216	attackspambots	scan z	2020-01-09 19:57:10
117.50.100.216	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-12-28 17:48:07
117.50.100.216	attack	Dec 15 17:54:36 debian-2gb-nbg1-2 kernel: \[81665.907222\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=117.50.100.216 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=16643 PROTO=TCP SPT=58914 DPT=636 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-16 06:45:51
117.50.100.216	attackspam	" "	2019-11-08 04:08:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.50.100.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39932
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.50.100.13.			IN	A

;; AUTHORITY SECTION:
.			294	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060202 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 03 06:54:26 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 13.100.50.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.100.50.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.13.183.92	attackbotsspam	$f2bV_matches	2019-12-24 02:38:29
207.107.139.150	attack	Lines containing failures of 207.107.139.150 Dec 23 13:07:42 shared09 sshd[31463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.107.139.150 user=r.r Dec 23 13:07:44 shared09 sshd[31463]: Failed password for r.r from 207.107.139.150 port 20236 ssh2 Dec 23 13:07:44 shared09 sshd[31463]: Received disconnect from 207.107.139.150 port 20236:11: Bye Bye [preauth] Dec 23 13:07:44 shared09 sshd[31463]: Disconnected from authenticating user r.r 207.107.139.150 port 20236 [preauth] Dec 23 14:45:43 shared09 sshd[30599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.107.139.150 user=r.r Dec 23 14:45:44 shared09 sshd[30599]: Failed password for r.r from 207.107.139.150 port 46895 ssh2 Dec 23 14:45:44 shared09 sshd[30599]: Received disconnect from 207.107.139.150 port 46895:11: Bye Bye [preauth] Dec 23 14:45:44 shared09 sshd[30599]: Disconnected from authenticating user r.r 207.107.139.150 p........ ------------------------------	2019-12-24 02:35:46
79.99.108.102	attack	Unauthorized connection attempt detected from IP address 79.99.108.102 to port 445	2019-12-24 02:28:12
106.13.204.251	attackbotsspam	Dec 23 18:10:34 ip-172-31-62-245 sshd\[28700\]: Failed password for invalid user server from 106.13.204.251 port 45298 ssh2\ Dec 23 18:15:05 ip-172-31-62-245 sshd\[28719\]: Invalid user matsumoto from 106.13.204.251\ Dec 23 18:15:07 ip-172-31-62-245 sshd\[28719\]: Failed password for invalid user matsumoto from 106.13.204.251 port 55038 ssh2\ Dec 23 18:19:39 ip-172-31-62-245 sshd\[28734\]: Invalid user dbus from 106.13.204.251\ Dec 23 18:19:41 ip-172-31-62-245 sshd\[28734\]: Failed password for invalid user dbus from 106.13.204.251 port 36542 ssh2\	2019-12-24 02:29:34
85.204.246.240	attackbots	PHI,WP GET /wp-login.php	2019-12-24 02:56:13
124.156.241.185	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-24 02:46:30
129.204.78.16	attackbots	Mar 17 20:51:38 yesfletchmain sshd\[15128\]: Invalid user richard from 129.204.78.16 port 41418 Mar 17 20:51:38 yesfletchmain sshd\[15128\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.78.16 Mar 17 20:51:40 yesfletchmain sshd\[15128\]: Failed password for invalid user richard from 129.204.78.16 port 41418 ssh2 Mar 17 20:57:47 yesfletchmain sshd\[15218\]: Invalid user andres from 129.204.78.16 port 39254 Mar 17 20:57:48 yesfletchmain sshd\[15218\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.78.16 ...	2019-12-24 02:58:34
118.89.108.152	attackbotsspam	Dec 23 17:02:46 localhost sshd\[19456\]: Invalid user esc from 118.89.108.152 port 57062 Dec 23 17:02:46 localhost sshd\[19456\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.108.152 Dec 23 17:02:48 localhost sshd\[19456\]: Failed password for invalid user esc from 118.89.108.152 port 57062 ssh2	2019-12-24 03:06:00
124.113.219.201	attackbots	Dec 23 15:56:57 icecube postfix/smtpd[69815]: NOQUEUE: reject: RCPT from unknown[124.113.219.201]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=	2019-12-24 02:27:52
188.254.0.160	attackspambots	Dec 23 15:48:38 icinga sshd[35681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 Dec 23 15:48:41 icinga sshd[35681]: Failed password for invalid user stiglich from 188.254.0.160 port 38650 ssh2 Dec 23 15:56:50 icinga sshd[43440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 ...	2019-12-24 02:32:40
211.193.58.173	attackbots	Dec 23 13:35:08 plusreed sshd[24987]: Invalid user rimas from 211.193.58.173 ...	2019-12-24 02:41:32
129.204.77.45	attack	Dec 1 14:27:56 yesfletchmain sshd\[3234\]: User root from 129.204.77.45 not allowed because not listed in AllowUsers Dec 1 14:27:56 yesfletchmain sshd\[3234\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.77.45 user=root Dec 1 14:27:58 yesfletchmain sshd\[3234\]: Failed password for invalid user root from 129.204.77.45 port 46119 ssh2 Dec 1 14:35:31 yesfletchmain sshd\[3500\]: Invalid user 810278 from 129.204.77.45 port 45110 Dec 1 14:35:31 yesfletchmain sshd\[3500\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.77.45 ...	2019-12-24 03:01:28
129.211.110.18	attackspambots	Mar 7 07:55:30 dillonfme sshd\[21038\]: Invalid user tb from 129.211.110.18 port 53538 Mar 7 07:55:30 dillonfme sshd\[21038\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.110.18 Mar 7 07:55:32 dillonfme sshd\[21038\]: Failed password for invalid user tb from 129.211.110.18 port 53538 ssh2 Mar 7 08:01:57 dillonfme sshd\[21233\]: Invalid user assistant from 129.211.110.18 port 49208 Mar 7 08:01:57 dillonfme sshd\[21233\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.110.18 ...	2019-12-24 02:31:42
14.161.36.31	attackbotsspam	1577113015 - 12/23/2019 15:56:55 Host: 14.161.36.31/14.161.36.31 Port: 445 TCP Blocked	2019-12-24 02:30:19
129.204.8.122	attackbots	Mar 5 19:27:57 dillonfme sshd\[2249\]: Invalid user teamspeak from 129.204.8.122 port 53066 Mar 5 19:27:57 dillonfme sshd\[2249\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.8.122 Mar 5 19:27:59 dillonfme sshd\[2249\]: Failed password for invalid user teamspeak from 129.204.8.122 port 53066 ssh2 Mar 5 19:33:57 dillonfme sshd\[2626\]: Invalid user sz from 129.204.8.122 port 49884 Mar 5 19:33:57 dillonfme sshd\[2626\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.8.122 ...	2019-12-24 02:56:42

Recently Reported IPs

203.2.33.141	189.141.31.70	81.202.252.190	118.4.109.85
187.96.94.81	219.48.45.38	28.127.114.150	80.54.129.219
55.190.188.252	82.196.83.47	156.218.195.151	136.169.193.92
91.193.75.236	23.96.61.141	2.164.180.187	63.122.58.18
181.133.130.90	163.142.202.182	221.36.137.31	130.58.121.227