AbuseIPDB » 117.50.198.67

117.50.198.67 was found in our database!

This IP was reported 8,613 times. Confidence of Abuse is 74%: ?

74%

ISP	Shanghai UCloud Information Technology Company Limited
Usage Type	Commercial
ASN	AS4808
Hostname(s)	kxczjjb.cn cjmxdaa.cn wmsizjw.cn xapdecg.cn yvzubfi.cn
Domain Name	ucloud.cn
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 117.50.198.67

Whois 117.50.198.67

IP Abuse Reports for 117.50.198.67:

This IP address has been reported a total of 8,613 times from 1,241 distinct sources. 117.50.198.67 was first reported on December 22nd 2023, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Porter	2025-07-02 20:00:51 (6 days ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-06-20 01:47:06 (2 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
nickto	2025-06-20 00:11:54 (2 weeks ago)		Brute-Force SSH
Porter	2025-06-17 11:44:00 (3 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-06-10 11:24:30 (4 weeks ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
sh97	2025-05-28 17:33:16 (1 month ago)	SG02-GC: SSH Brute Force from 117.50.198.67 at 2025-05-28 23:03:15 IST	Brute-Force SSH
Porter	2025-05-28 17:27:41 (1 month ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
Porter	2025-05-23 11:53:48 (1 month ago)	Automated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or p ... show moreAutomated report: IP triggered Fail2Ban after multiple intrusion attempts (e.g. SSH brute-force or port scanning). Logged by iptables and correlated with TARPIT and PSAD on a hardened Linux server. Offense verified through pattern detection and repeated abuse behavior. show less	SSH
rtbh.com.tr	2025-05-21 20:08:17 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-20 20:08:16 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
LRob.fr	2025-05-20 02:00:01 (1 month ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
trivox.sh	2025-05-20 01:47:04 (1 month ago)	May 20 01:32:51 honey3 sshd[158219]: Disconnected from invalid user testuser 117.50.198.67 port 3532 ... show moreMay 20 01:32:51 honey3 sshd[158219]: Disconnected from invalid user testuser 117.50.198.67 port 35320 [preauth] May 20 01:41:39 honey3 sshd[158957]: Connection closed by 117.50.198.67 port 55082 [preauth] May 20 01:47:01 honey3 sshd[159381]: Invalid user test1 from 117.50.198.67 port 34348 May 20 01:47:01 honey3 sshd[159381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.198.67 May 20 01:47:04 honey3 sshd[159381]: Failed password for invalid user test1 from 117.50.198.67 port 34348 ssh2 ... show less	Brute-Force SSH
filip2cz	2025-05-20 01:41:09 (1 month ago)	May 20 03:31:37 system-status sshd[1121108]: pam_unix(sshd:auth): authentication failure; logname= u ... show moreMay 20 03:31:37 system-status sshd[1121108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.198.67 May 20 03:31:39 system-status sshd[1121108]: Failed password for invalid user testuser from 117.50.198.67 port 48064 ssh2 May 20 03:41:08 system-status sshd[1132261]: Invalid user zhangyx from 117.50.198.67 port 35778 ... show less	Brute-Force SSH
ScanThe.Net	2025-05-20 01:24:26 (1 month ago)	ID: 2233746781 | PORT: 9906 | https://117-50-198-67.scanthe.net	Port Scan
Study Bitcoin 🤗	2025-05-20 01:08:18 (1 month ago)	Port probe to tcp/22 (ssh) [srv128]	Port Scan Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩