Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shanghai UCloud Information Technology Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
2020-09-13 09:28:44.341256-0500  localhost sshd[69370]: Failed password for root from 117.50.13.13 port 55836 ssh2
2020-09-13 22:34:34
attack
Sep 13 07:51:10 MainVPS sshd[21638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.13  user=root
Sep 13 07:51:12 MainVPS sshd[21638]: Failed password for root from 117.50.13.13 port 56794 ssh2
Sep 13 07:56:39 MainVPS sshd[23591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.13  user=root
Sep 13 07:56:41 MainVPS sshd[23591]: Failed password for root from 117.50.13.13 port 48626 ssh2
Sep 13 07:58:45 MainVPS sshd[24355]: Invalid user 1922 from 117.50.13.13 port 39166
...
2020-09-13 14:30:25
attackbotsspam
Sep 13 02:17:40 lunarastro sshd[11646]: Failed password for root from 117.50.13.13 port 39300 ssh2
2020-09-13 06:14:02
Comments on same subnet:
IP Type Details Datetime
117.50.13.54 attackbots
2020-09-14T02:28:13.751153ks3355764 sshd[25189]: Invalid user admin from 117.50.13.54 port 45496
2020-09-14T02:28:15.465900ks3355764 sshd[25189]: Failed password for invalid user admin from 117.50.13.54 port 45496 ssh2
...
2020-09-15 03:07:18
117.50.13.167 attack
Sep 14 07:30:34 fhem-rasp sshd[7914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.167  user=root
Sep 14 07:30:36 fhem-rasp sshd[7914]: Failed password for root from 117.50.13.167 port 52142 ssh2
...
2020-09-14 21:50:26
117.50.13.54 attackspam
2020-09-14T02:28:13.751153ks3355764 sshd[25189]: Invalid user admin from 117.50.13.54 port 45496
2020-09-14T02:28:15.465900ks3355764 sshd[25189]: Failed password for invalid user admin from 117.50.13.54 port 45496 ssh2
...
2020-09-14 18:59:52
117.50.13.167 attackspam
Sep 14 07:30:34 fhem-rasp sshd[7914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.167  user=root
Sep 14 07:30:36 fhem-rasp sshd[7914]: Failed password for root from 117.50.13.167 port 52142 ssh2
...
2020-09-14 13:44:10
117.50.13.167 attackbotsspam
ssh brute force
2020-09-14 05:41:29
117.50.137.36 attack
Port Scan/VNC login attempt
...
2020-09-06 04:00:37
117.50.137.36 attack
Port Scan/VNC login attempt
...
2020-09-05 19:43:34
117.50.137.10 attack
RDPBruteMak
2020-08-12 06:35:25
117.50.13.29 attackbotsspam
Invalid user administrator from 117.50.13.29 port 53876
2020-07-18 23:18:25
117.50.13.170 attack
Jul  8 02:17:09 server sshd[27232]: Failed password for invalid user yoshizu from 117.50.13.170 port 57058 ssh2
Jul  8 02:21:33 server sshd[30853]: Failed password for invalid user xsbk from 117.50.13.170 port 47602 ssh2
Jul  8 02:25:40 server sshd[34046]: Failed password for invalid user demo from 117.50.13.170 port 38146 ssh2
2020-07-08 08:41:24
117.50.132.62 attackbotsspam
TCP Port: 25     invalid blocked  Listed on   dnsbl-sorbs also barracuda and spam-sorbs           (6)
2020-07-04 07:30:32
117.50.13.170 attack
SSH login attempts.
2020-06-15 02:18:09
117.50.13.170 attackspam
$f2bV_matches
2020-06-11 17:35:15
117.50.13.170 attack
Jun  9 22:57:36 ns3033917 sshd[19613]: Invalid user xilon from 117.50.13.170 port 37098
Jun  9 22:57:38 ns3033917 sshd[19613]: Failed password for invalid user xilon from 117.50.13.170 port 37098 ssh2
Jun  9 23:23:06 ns3033917 sshd[19901]: Invalid user temp from 117.50.13.170 port 49790
...
2020-06-10 08:12:08
117.50.13.29 attack
Unauthorized connection attempt detected from IP address 117.50.13.29 to port 22
2020-05-31 21:01:35
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.50.13.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53623
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.50.13.13.			IN	A

;; AUTHORITY SECTION:
.			408	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091202 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 13 06:13:58 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 13.13.50.117.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 13.13.50.117.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
112.198.194.11 attack
Fail2Ban Ban Triggered
2020-02-13 17:58:23
106.12.83.217 attackspam
Feb 13 09:52:11 sd-53420 sshd\[3046\]: Invalid user tv from 106.12.83.217
Feb 13 09:52:11 sd-53420 sshd\[3046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.83.217
Feb 13 09:52:13 sd-53420 sshd\[3046\]: Failed password for invalid user tv from 106.12.83.217 port 43426 ssh2
Feb 13 09:56:45 sd-53420 sshd\[3531\]: Invalid user tootsie from 106.12.83.217
Feb 13 09:56:45 sd-53420 sshd\[3531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.83.217
...
2020-02-13 17:32:17
49.88.112.65 attack
Feb 13 09:29:16 game-panel sshd[20362]: Failed password for root from 49.88.112.65 port 31467 ssh2
Feb 13 09:31:59 game-panel sshd[20476]: Failed password for root from 49.88.112.65 port 59571 ssh2
Feb 13 09:32:01 game-panel sshd[20476]: Failed password for root from 49.88.112.65 port 59571 ssh2
2020-02-13 17:36:03
50.227.195.3 attackspam
Invalid user spark from 50.227.195.3 port 60704
2020-02-13 17:32:34
125.127.125.125 attackbots
Telnet/23 MH Probe, BF, Hack -
2020-02-13 18:15:16
5.94.193.45 attackspam
SSH Bruteforce attack
2020-02-13 17:41:23
51.255.170.213 attackspam
ZTE Router Exploit Scanner
2020-02-13 18:04:24
183.83.33.130 attackspambots
Unauthorized connection attempt from IP address 183.83.33.130 on Port 445(SMB)
2020-02-13 17:43:28
54.36.183.33 attack
Feb 12 23:23:26 web1 sshd\[16855\]: Invalid user 12345 from 54.36.183.33
Feb 12 23:23:26 web1 sshd\[16855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.33
Feb 12 23:23:29 web1 sshd\[16855\]: Failed password for invalid user 12345 from 54.36.183.33 port 40436 ssh2
Feb 12 23:25:59 web1 sshd\[17092\]: Invalid user cdcrawford from 54.36.183.33
Feb 12 23:25:59 web1 sshd\[17092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.183.33
2020-02-13 17:46:27
2.194.66.8 attackbots
Telnet/23 MH Probe, BF, Hack -
2020-02-13 17:41:49
157.230.248.89 attack
Automatic report - XMLRPC Attack
2020-02-13 17:30:47
180.243.92.167 attackbots
Unauthorized connection attempt from IP address 180.243.92.167 on Port 445(SMB)
2020-02-13 17:29:36
54.39.201.105 attackbotsspam
Feb 12 22:51:03 web1 sshd\[13479\]: Invalid user uftp from 54.39.201.105
Feb 12 22:51:03 web1 sshd\[13479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.201.105
Feb 12 22:51:05 web1 sshd\[13479\]: Failed password for invalid user uftp from 54.39.201.105 port 58772 ssh2
Feb 12 22:54:22 web1 sshd\[13806\]: Invalid user ann from 54.39.201.105
Feb 12 22:54:22 web1 sshd\[13806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.201.105
2020-02-13 17:29:20
179.190.39.132 attack
trying to access non-authorized port
2020-02-13 18:09:03
123.195.97.98 attackbotsspam
DATE:2020-02-13 05:48:01, IP:123.195.97.98, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-02-13 17:44:40

Recently Reported IPs

125.64.94.136 114.231.104.89 59.127.165.252 186.94.13.161
104.224.190.146 23.160.208.250 177.188.172.250 118.97.128.83
46.100.57.134 119.28.51.97 217.23.2.182 95.152.24.115
94.2.61.17 116.75.115.205 86.98.34.165 89.122.14.250
166.170.220.2 37.98.196.42 197.45.63.224 125.99.206.245