Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shanghai UCloud Information Technology Company Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Port Scan
...
2020-08-28 16:25:10
attackbotsspam
2020-08-10T06:53:06.553866centos sshd[32627]: Failed password for root from 117.50.34.131 port 35904 ssh2
2020-08-10T06:56:48.194331centos sshd[935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131  user=root
2020-08-10T06:56:49.671386centos sshd[935]: Failed password for root from 117.50.34.131 port 34232 ssh2
...
2020-08-10 17:28:15
attackbotsspam
Aug  6 12:28:12 gw1 sshd[19140]: Failed password for root from 117.50.34.131 port 42278 ssh2
...
2020-08-06 15:46:37
attack
Aug  3 20:34:14 pve1 sshd[10584]: Failed password for root from 117.50.34.131 port 47486 ssh2
...
2020-08-04 04:03:51
attackspambots
Jul 28 07:58:39 *hidden* sshd[398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 Jul 28 07:58:40 *hidden* sshd[398]: Failed password for invalid user zhangkun from 117.50.34.131 port 44796 ssh2 Jul 28 08:03:30 *hidden* sshd[1477]: Invalid user liangying from 117.50.34.131 port 38110
2020-07-28 14:58:45
attackspam
Jul 12 14:57:15 dev0-dcde-rnet sshd[12766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
Jul 12 14:57:17 dev0-dcde-rnet sshd[12766]: Failed password for invalid user solange from 117.50.34.131 port 54254 ssh2
Jul 12 15:05:58 dev0-dcde-rnet sshd[12821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
2020-07-13 01:48:22
attackspambots
Invalid user he from 117.50.34.131 port 45588
2020-07-12 18:10:05
attackbots
Jul 11 23:06:27 [host] sshd[5468]: Invalid user li
Jul 11 23:06:27 [host] sshd[5468]: pam_unix(sshd:a
Jul 11 23:06:29 [host] sshd[5468]: Failed password
2020-07-12 07:06:29
attackspam
sshd jail - ssh hack attempt
2020-07-11 01:58:02
attack
SSH bruteforce
2020-07-10 15:00:00
attack
Jun 25 06:59:17 scw-tender-jepsen sshd[15024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
Jun 25 06:59:19 scw-tender-jepsen sshd[15024]: Failed password for invalid user skaner from 117.50.34.131 port 48354 ssh2
2020-06-25 15:13:52
attackspambots
Jun 11 04:55:09 ajax sshd[26692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 
Jun 11 04:55:11 ajax sshd[26692]: Failed password for invalid user natematias from 117.50.34.131 port 35468 ssh2
2020-06-11 15:08:00
attack
Jun  9 12:12:46 dhoomketu sshd[593010]: Failed password for invalid user olga from 117.50.34.131 port 52010 ssh2
Jun  9 12:15:12 dhoomketu sshd[593053]: Invalid user upload from 117.50.34.131 port 51212
Jun  9 12:15:12 dhoomketu sshd[593053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 
Jun  9 12:15:12 dhoomketu sshd[593053]: Invalid user upload from 117.50.34.131 port 51212
Jun  9 12:15:14 dhoomketu sshd[593053]: Failed password for invalid user upload from 117.50.34.131 port 51212 ssh2
...
2020-06-09 16:05:52
attackbotsspam
May 25 09:03:25 cdc sshd[1299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131  user=root
May 25 09:03:27 cdc sshd[1299]: Failed password for invalid user root from 117.50.34.131 port 50948 ssh2
2020-05-25 16:04:25
attack
Invalid user claudia from 117.50.34.131 port 34956
2020-05-16 06:08:40
attackspam
Brute-force attempt banned
2020-05-15 20:33:00
attackspam
DATE:2020-05-13 07:52:04, IP:117.50.34.131, PORT:ssh SSH brute force auth (docker-dc)
2020-05-13 19:15:29
attackspam
May  5 10:17:59 pi sshd[13244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 
May  5 10:18:00 pi sshd[13244]: Failed password for invalid user test2 from 117.50.34.131 port 44860 ssh2
2020-05-05 20:58:58
attackspambots
May  2 12:07:45 ns381471 sshd[2063]: Failed password for root from 117.50.34.131 port 38998 ssh2
May  2 12:09:12 ns381471 sshd[2300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
2020-05-02 18:13:43
attack
Brute-force attempt banned
2020-04-28 02:56:13
attackbotsspam
$f2bV_matches
2020-04-20 23:02:38
attackspam
Automatic report BANNED IP
2020-04-04 23:27:00
attackspam
Invalid user nyssa from 117.50.34.131 port 58692
2020-04-02 18:20:49
attackspam
Mar 29 14:34:26 v22019038103785759 sshd\[5198\]: Invalid user hkw from 117.50.34.131 port 58352
Mar 29 14:34:26 v22019038103785759 sshd\[5198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
Mar 29 14:34:28 v22019038103785759 sshd\[5198\]: Failed password for invalid user hkw from 117.50.34.131 port 58352 ssh2
Mar 29 14:43:36 v22019038103785759 sshd\[5819\]: Invalid user huxuyang from 117.50.34.131 port 48506
Mar 29 14:43:36 v22019038103785759 sshd\[5819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
...
2020-03-30 03:05:58
attackbots
Feb  9 09:08:13 mout sshd[31422]: Invalid user zic from 117.50.34.131 port 52356
2020-02-09 18:08:12
attackbots
Feb  4 12:57:51 ns382633 sshd\[9619\]: Invalid user sa-milt from 117.50.34.131 port 43392
Feb  4 12:57:51 ns382633 sshd\[9619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
Feb  4 12:57:53 ns382633 sshd\[9619\]: Failed password for invalid user sa-milt from 117.50.34.131 port 43392 ssh2
Feb  4 13:20:27 ns382633 sshd\[15218\]: Invalid user victor from 117.50.34.131 port 51292
Feb  4 13:20:27 ns382633 sshd\[15218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131
2020-02-04 20:35:27
Comments on same subnet:
IP Type Details Datetime
117.50.34.6 attackbotsspam
$f2bV_matches
2020-10-07 13:56:26
117.50.34.192 attack
21 attempts against mh-misbehave-ban on hail
2020-06-24 12:01:11
117.50.34.40 attack
Jun  6 08:49:39 web1 sshd[6389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.40  user=root
Jun  6 08:49:42 web1 sshd[6389]: Failed password for root from 117.50.34.40 port 50278 ssh2
Jun  6 09:11:16 web1 sshd[11748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.40  user=root
Jun  6 09:11:18 web1 sshd[11748]: Failed password for root from 117.50.34.40 port 43644 ssh2
Jun  6 09:15:29 web1 sshd[13059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.40  user=root
Jun  6 09:15:31 web1 sshd[13059]: Failed password for root from 117.50.34.40 port 57942 ssh2
Jun  6 09:19:44 web1 sshd[14006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.40  user=root
Jun  6 09:19:45 web1 sshd[14006]: Failed password for root from 117.50.34.40 port 44006 ssh2
Jun  6 09:23:53 web1 sshd[15071]: pam_unix(ssh
...
2020-06-06 09:25:11
117.50.34.40 attackspam
Lines containing failures of 117.50.34.40
May 31 20:28:02 cdb sshd[10603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.40  user=r.r
May 31 20:28:05 cdb sshd[10603]: Failed password for r.r from 117.50.34.40 port 56846 ssh2
May 31 20:28:05 cdb sshd[10603]: Received disconnect from 117.50.34.40 port 56846:11: Bye Bye [preauth]
May 31 20:28:05 cdb sshd[10603]: Disconnected from authenticating user r.r 117.50.34.40 port 56846 [preauth]
May 31 20:36:31 cdb sshd[11540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.40  user=r.r
May 31 20:36:32 cdb sshd[11540]: Failed password for r.r from 117.50.34.40 port 58734 ssh2
May 31 20:36:33 cdb sshd[11540]: Received disconnect from 117.50.34.40 port 58734:11: Bye Bye [preauth]
May 31 20:36:33 cdb sshd[11540]: Disconnected from authenticating user r.r 117.50.34.40 port 58734 [preauth]
May 31 20:38:59 cdb sshd[11788]: pam_unix(sshd:........
------------------------------
2020-06-01 08:16:51
117.50.34.167 attackbots
Mar 24 23:53:53 NPSTNNYC01T sshd[29426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.167
Mar 24 23:53:56 NPSTNNYC01T sshd[29426]: Failed password for invalid user sam from 117.50.34.167 port 51852 ssh2
Mar 24 23:55:30 NPSTNNYC01T sshd[29584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.167
...
2020-03-25 13:19:44
117.50.34.167 attackbots
$f2bV_matches
2020-03-22 12:24:42
117.50.34.167 attackbots
Mar 19 06:56:21 sso sshd[18509]: Failed password for root from 117.50.34.167 port 47230 ssh2
...
2020-03-19 14:18:58
117.50.34.167 attackspam
Ssh brute force
2020-03-12 08:03:32
117.50.34.167 attackbots
Feb 23 06:38:10 silence02 sshd[4341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.167
Feb 23 06:38:12 silence02 sshd[4341]: Failed password for invalid user factorio from 117.50.34.167 port 46340 ssh2
Feb 23 06:41:32 silence02 sshd[4588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.167
2020-02-23 14:04:54
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.50.34.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13078
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.50.34.131.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 20:35:18 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 131.34.50.117.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
Server:		183.60.82.98
Address:	183.60.82.98#53

Non-authoritative answer:
*** Can't find 131.34.50.117.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
111.241.68.246 attackbots
445/tcp
[2020-10-04]1pkt
2020-10-05 23:09:40
60.167.177.107 attackspambots
Oct  5 13:03:04 nextcloud sshd\[25074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.107  user=root
Oct  5 13:03:05 nextcloud sshd\[25074\]: Failed password for root from 60.167.177.107 port 53224 ssh2
Oct  5 13:17:27 nextcloud sshd\[10405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.177.107  user=root
2020-10-05 23:36:22
14.232.140.3 attackspam
1601843952 - 10/04/2020 22:39:12 Host: 14.232.140.3/14.232.140.3 Port: 445 TCP Blocked
2020-10-05 23:24:01
222.104.38.206 attackspam
Oct  5 15:16:19 ajax sshd[23258]: Failed password for root from 222.104.38.206 port 60230 ssh2
2020-10-05 23:39:37
113.101.246.129 attack
SSH login attempts.
2020-10-05 23:12:09
17.58.98.182 attack
Bad web bot already banned
2020-10-05 23:09:57
123.130.112.6 attack
"$f2bV_matches"
2020-10-05 23:28:15
74.120.14.36 attackspambots
74.120.14.36 - - [05/Oct/2020:16:53:38 +0200] "GET / HTTP/1.1" 200 29 "-" "-"
74.120.14.36 - - [05/Oct/2020:16:53:39 +0200] "GET / HTTP/1.1" 200 29 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
2020-10-05 23:29:37
194.180.224.130 attackspambots
(sshd) Failed SSH login from 194.180.224.130 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  5 11:23:35 optimus sshd[24311]: Invalid user admin from 194.180.224.130
Oct  5 11:23:37 optimus sshd[24308]: Invalid user admin from 194.180.224.130
Oct  5 11:23:37 optimus sshd[24311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.130 
Oct  5 11:23:37 optimus sshd[24310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.130  user=root
Oct  5 11:23:37 optimus sshd[24309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.180.224.130  user=root
2020-10-05 23:27:08
49.235.28.55 attackbots
Oct  4 19:23:06 ws22vmsma01 sshd[43909]: Failed password for root from 49.235.28.55 port 37822 ssh2
...
2020-10-05 23:20:10
193.169.253.128 attackspam
2020-10-04T22:16:27.915251MailD postfix/smtpd[22364]: warning: unknown[193.169.253.128]: SASL LOGIN authentication failed: authentication failure
2020-10-04T22:27:54.245518MailD postfix/smtpd[23022]: warning: unknown[193.169.253.128]: SASL LOGIN authentication failed: authentication failure
2020-10-04T22:39:23.372045MailD postfix/smtpd[23864]: warning: unknown[193.169.253.128]: SASL LOGIN authentication failed: authentication failure
2020-10-05 23:08:24
178.254.200.51 attackspambots
5555/tcp
[2020-10-04]1pkt
2020-10-05 23:04:12
86.123.15.121 attack
5555/tcp
[2020-10-04]1pkt
2020-10-05 23:15:16
220.186.170.95 attack
Oct  5 13:51:01 slaro sshd\[5946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.170.95  user=root
Oct  5 13:51:03 slaro sshd\[5946\]: Failed password for root from 220.186.170.95 port 52156 ssh2
Oct  5 13:56:02 slaro sshd\[6035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.170.95  user=root
...
2020-10-05 23:38:19
123.163.116.142 attackspambots
Oct  5 05:12:58 inter-technics sshd[4305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.163.116.142  user=root
Oct  5 05:13:00 inter-technics sshd[4305]: Failed password for root from 123.163.116.142 port 57844 ssh2
Oct  5 05:16:29 inter-technics sshd[4531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.163.116.142  user=root
Oct  5 05:16:31 inter-technics sshd[4531]: Failed password for root from 123.163.116.142 port 39376 ssh2
Oct  5 05:19:53 inter-technics sshd[4671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.163.116.142  user=root
Oct  5 05:19:55 inter-technics sshd[4671]: Failed password for root from 123.163.116.142 port 49140 ssh2
...
2020-10-05 23:05:13

Recently Reported IPs

120.77.253.155 43.226.152.191 125.32.26.210 52.190.240.132
52.175.214.160 81.84.159.115 110.36.218.182 157.245.232.114
52.64.246.7 39.121.152.168 172.81.129.216 217.27.121.13
178.47.139.172 13.211.252.231 113.26.83.219 8.187.78.138
21.31.199.94 13.232.178.26 42.119.189.133 13.48.196.156