This IP address has been reported a total of
160
times from
144 distinct
sources.
50.6.195.242 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.
2026-10-26T23:13:58.899663+00:00 lorentz sshd-session[1321510]: Disconnected from authenticating use ...
show more2026-10-26T23:13:58.899663+00:00 lorentz sshd-session[1321510]: Disconnected from authenticating user root 50.6.195.242 port 60726 [preauth]
2026-10-26T23:22:20.465291+00:00 lorentz sshd-session[1331826]: Disconnected from authenticating user root 50.6.195.242 port 37762 [preauth]
...
show less
2026-10-27T00:33:36.250555+02:00 Server sshd-session[2793168]: Failed password for root from 50.6.19 ...
show more2026-10-27T00:33:36.250555+02:00 Server sshd-session[2793168]: Failed password for root from 50.6.195.242 port 58176 ssh2
2026-10-27T00:34:57.699492+02:00 Server sshd-session[2794302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.195.242 user=root
2026-10-27T00:34:59.490614+02:00 Server sshd-session[2794302]: Failed password for root from 50.6.195.242 port 45786 ssh2
2026-10-27T00:36:24.617896+02:00 Server sshd-session[2795502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.195.242 user=root
2026-10-27T00:36:27.142674+02:00 Server sshd-session[2795502]: Failed password for root from 50.6.195.242 port 60024 ssh2
...
show less
Oct 26 22:23:52 shu sshd[20574]: Failed password for root from 50.6.195.242 port 58368 ssh2
Oct 26 2 ...
show moreOct 26 22:23:52 shu sshd[20574]: Failed password for root from 50.6.195.242 port 58368 ssh2
Oct 26 22:31:50 shu sshd[27856]: Failed password for root from 50.6.195.242 port 39946 ssh2
...
show less
Oct 26 22:15:40 hermes sshd[1767937]: Failed password for root from 50.6.195.242 port 48980 ssh2
Oct ...
show moreOct 26 22:15:40 hermes sshd[1767937]: Failed password for root from 50.6.195.242 port 48980 ssh2
Oct 26 22:17:07 hermes sshd[1770539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.195.242 user=root
Oct 26 22:17:10 hermes sshd[1770539]: Failed password for root from 50.6.195.242 port 40312 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-26T22:36:20.914330 mail2.akcurate.de sshd-session[87847]: Disconnected from authenticating u ...
show more2026-10-26T22:36:20.914330 mail2.akcurate.de sshd-session[87847]: Disconnected from authenticating user root 50.6.195.242 port 60638 [preauth]
2026-10-26T22:41:04.067780 mail2.akcurate.de sshd-session[87875]: Disconnected from authenticating user root 50.6.195.242 port 43850 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Oct 26 22:18:46 fi7 sshd[1891196]: Failed password for root from 50.6.195.242 port 60914 ssh2
Oct 26 ...
show moreOct 26 22:18:46 fi7 sshd[1891196]: Failed password for root from 50.6.195.242 port 60914 ssh2
Oct 26 22:20:12 fi7 sshd[1891220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.195.242 user=root
Oct 26 22:20:14 fi7 sshd[1891220]: Failed password for root from 50.6.195.242 port 45526 ssh2
...
show less
2026-10-26T21:53:48.687039+01:00 server sshd-session[13677]: Disconnected from authenticating user r ...
show more2026-10-26T21:53:48.687039+01:00 server sshd-session[13677]: Disconnected from authenticating user root 50.6.195.242 port 53260 [preauth]
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
Brute-Force
SSH
Showing 1 to
15
of 160 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩