JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

50.6.204.52

Recent Activity

Abuse Confidence Score

100% Critical

143 reports

124 reporters · latest 4 hours ago

ISP: Newfold Digital, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS31898
Hostname(s): mkq.ppm.mybluehost.me
Domain Name: enduranceinternational.com
Country: 🇺🇸 United States of America
City: Ashburn, Virginia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

143 from 124 distinct reporters

First reported

October 25th 2026

Most recent report

4 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 35 🇺🇸 United States of America 34 🇫🇷 France 13

Most common categories Brute-Force 131 SSH 130 Port Scan 5 Web App Attack 3 IoT Targeted 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 George0phile	2026-10-29 00:02:08 (4 hours ago)	SSH brute force on port 22 -- 7 attempts, 1 successful. Credentials: root:%TGB^YHN7ujm, 345gs5662d34:1qazxsw2@. Active: 2026-10-26T08:59 to 2026-10-26T09:05. Post-login: /bin/sh -e /usr/lib/update-notifier/update-motd-reboot-requi; /bin/sh /etc/updat ... show more SSH brute force on port 22 -- 7 attempts, 1 successful. Credentials: root:%TGB^YHN7ujm, 345gs5662d34:1qazxsw2@. Active: 2026-10-26T08:59 to 2026-10-26T09:05. Post-login: /bin/sh -e /usr/lib/update-notifier/update-motd-reboot-requi; /bin/sh /etc/update-motd.d/98-reboot-required; /bin/sh /usr/lib/update-notifier/update-motd-fsck-at-reboot. Malware: miner (critical); botnet (high); trojan (high). Source: AS31898 Oracle Corporation (Ashburn, US). Data from SSH honeypot — not a production system. show less	Brute-Force SSH IoT Targeted
🇪🇸 librebit	2026-10-28 08:33:11 (20 hours ago)	SSH brute force attack	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-10-26 23:35:00 (2 days ago)	Last 24 hours Brute Force Attacks	Brute-Force
🇺🇸 troublesome	2026-10-26 18:17:20 (2 days ago)	lily	Brute-Force SSH
🇩🇪 DEV-DNS	2026-10-26 18:15:44 (2 days ago)	50.6.204.52 (US/United States/Virginia/Ashburn/50-6-204-52.unifiedlayer.com/[redacted]	Brute-Force
Anonymous	2026-10-26 18:14:23 (2 days ago)	sshd	Brute-Force SSH
Anonymous	2026-10-26 18:05:42 (2 days ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇩🇪 FunyMails	2026-10-26 17:55:47 (2 days ago)	2026-10-26T17:52:24.466621+00:00 localhost sshd[263384]: Disconnected from authenticating user root 50.6.204.52 port 35464 [preauth] 2026-10-26T17:55:45.054385+00:00 localhost sshd[263398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 2026-10-26T17:52:24.466621+00:00 localhost sshd[263384]: Disconnected from authenticating user root 50.6.204.52 port 35464 [preauth] 2026-10-26T17:55:45.054385+00:00 localhost sshd[263398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.204.52 user=root 2026-10-26T17:55:47.113684+00:00 localhost sshd[263398]: Failed password for root from 50.6.204.52 port 47888 ssh2 ... show less	Brute-Force
🇮🇳 sh97	2026-10-26 17:25:47 (2 days ago)	IN01-DRDP-HYD: Blocked by Fail2Ban for SSH Brute Force from 50.6.204.52 at 2026-10-26 17:25:47 UTC	Brute-Force SSH
Anonymous	2026-10-26 17:22:02 (2 days ago)	Oct 26 18:20:36 fi7 sshd[1888219]: Failed password for root from 50.6.204.52 port 48454 ssh2 Oct 26 18:22:00 fi7 sshd[1888233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.204.52 user=root Oct 26 18:2 ... show more Oct 26 18:20:36 fi7 sshd[1888219]: Failed password for root from 50.6.204.52 port 48454 ssh2 Oct 26 18:22:00 fi7 sshd[1888233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.204.52 user=root Oct 26 18:22:02 fi7 sshd[1888233]: Failed password for root from 50.6.204.52 port 37162 ssh2 ... show less	Brute-Force SSH
🇦🇺 GE	2026-10-26 17:04:50 (2 days ago)	2026-10-27T04:03:20.245906+11:00 www.geddy.au sshd-session[1609713]: Failed password for root from 50.6.204.52 port 45228 ssh2 2026-10-27T04:04:47.307438+11:00 www.geddy.au sshd-session[1609726]: pam_unix(sshd:auth): authentication failure; logname= ... show more 2026-10-27T04:03:20.245906+11:00 www.geddy.au sshd-session[1609713]: Failed password for root from 50.6.204.52 port 45228 ssh2 2026-10-27T04:04:47.307438+11:00 www.geddy.au sshd-session[1609726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.6.204.52 user=root 2026-10-27T04:04:49.500115+11:00 www.geddy.au sshd-session[1609726]: Failed password for root from 50.6.204.52 port 49878 ssh2 ... show less	SSH
🇩🇪 fleckenbase	2026-10-26 17:03:29 (2 days ago)	2026-10-26T17:56:41.942829+01:00 v30393 sshd[1352623]: Disconnected from authenticating user root 50.6.204.52 port 46596 [preauth] 2026-10-26T18:03:31.821155+01:00 v30393 sshd[1353909]: Disconnected from authenticating user root 50.6.204.52 port 4461 ... show more 2026-10-26T17:56:41.942829+01:00 v30393 sshd[1352623]: Disconnected from authenticating user root 50.6.204.52 port 46596 [preauth] 2026-10-26T18:03:31.821155+01:00 v30393 sshd[1353909]: Disconnected from authenticating user root 50.6.204.52 port 44610 [preauth] ... show less	Brute-Force SSH
🇺🇸 johuang92	2026-10-26 16:56:56 (2 days ago)	Cowrie SSH honeypot: session 4894731b8835 \| 1 login attempt(s) \| 2 command(s): cd ~; chattr -ia .ssh; lockr -ia .ssh; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8N ... show more Cowrie SSH honeypot: session 4894731b8835 \| 1 login attempt(s) \| 2 command(s): cd ~; chattr -ia .ssh; lockr -ia .ssh; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~ \| 1 file transfer(s) \| classified as: brute_force, malware_deployment, persistence show less	Brute-Force SSH IoT Targeted
🇦🇺 dyln	2026-10-26 16:51:42 (2 days ago)	Dyls honeypot brute-force: SSH (5 total hits)	Brute-Force SSH
🇧🇷 radardatelecom	2026-10-26 16:51:03 (2 days ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.1.136.171

🇺🇸 162.240.154.26

🇺🇸 161.104.228.63

🇨🇳 49.72.212.22

🇺🇸 199.165.159.165

🇩🇪 172.121.255.192

🇮🇷 93.118.170.197

🇳🇱 89.255.58.44

🇵🇭 49.149.198.35

🇳🇱 45.148.10.151

🇸🇬 23.171.216.121

🇬🇧 5.102.169.102

🇨🇳 1.58.117.221

🇧🇷 189.113.8.254

🇪🇨 186.68.83.104

🇩🇪 167.94.146.59

🇬🇧 165.154.174.206

🇯🇵 132.145.112.250

🇨🇳 121.40.217.100

🇨🇳 111.22.163.209