189.50.44.75 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Total Telecom Ltda-ME

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Mar 16 18:15:37 lnxmail61 sshd[21868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.44.75	2020-03-17 02:01:17

相同子网IP讨论:

IP	类型	评论内容	时间
189.50.44.42	attack	Mar 16 22:08:35 gw1 sshd[14562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.44.42 Mar 16 22:08:37 gw1 sshd[14562]: Failed password for invalid user wuwei from 189.50.44.42 port 48008 ssh2 ...	2020-03-17 07:33:48
189.50.44.2	attackspambots	SSH login attempts with user root at 2020-03-12.	2020-03-17 06:03:55
189.50.44.42	attack	$f2bV_matches	2020-03-16 21:39:02
189.50.44.234	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 07-10-2019 04:50:22.	2019-10-07 14:57:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.50.44.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20229
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;189.50.44.75.			IN	A

;; AUTHORITY SECTION:
.			442	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031601 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 17 02:01:09 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

75.44.50.189.in-addr.arpa domain name pointer rede44-75.total.psi.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
75.44.50.189.in-addr.arpa	name = rede44-75.total.psi.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
42.58.101.36	attackspam	2019-08-02T21:00:27.160654ts3.arvenenaske.de sshd[28695]: Invalid user admin from 42.58.101.36 port 51158 2019-08-02T21:00:27.166116ts3.arvenenaske.de sshd[28695]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.58.101.36 user=admin 2019-08-02T21:00:27.167105ts3.arvenenaske.de sshd[28695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.58.101.36 2019-08-02T21:00:27.160654ts3.arvenenaske.de sshd[28695]: Invalid user admin from 42.58.101.36 port 51158 2019-08-02T21:00:28.702876ts3.arvenenaske.de sshd[28695]: Failed password for invalid user admin from 42.58.101.36 port 51158 ssh2 2019-08-02T21:00:29.381132ts3.arvenenaske.de sshd[28695]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.58.101.36 user=admin 2019-08-02T21:00:27.166116ts3.arvenenaske.de sshd[28695]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=........ ------------------------------	2019-08-03 14:39:12
191.53.196.76	attackspambots	Aug 2 23:51:55 mailman postfix/smtpd[14502]: warning: unknown[191.53.196.76]: SASL PLAIN authentication failed: authentication failure	2019-08-03 14:15:12
2a03:b0c0:1:d0::c1b:2001	attackspam	WordPress wp-login brute force :: 2a03:b0c0:1:d0::c1b:2001 0.048 BYPASS [03/Aug/2019:14:51:25 1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-08-03 14:34:47
58.209.240.148	attack	[portscan] Port scan	2019-08-03 14:21:32
159.65.152.201	attackbotsspam	Invalid user mongodb from 159.65.152.201 port 42554	2019-08-03 14:05:19
95.216.224.183	attackspam	Wordpress XMLRPC attack	2019-08-03 14:10:30
211.233.66.61	attackspambots	Unauthorised access (Aug 3) SRC=211.233.66.61 LEN=44 TTL=235 ID=19142 TCP DPT=445 WINDOW=1024 SYN	2019-08-03 13:47:02
196.54.65.46	attackspam	A spam received from this SMTP server at 2019/06/23 (JST). The spammer used NS1.PROPORTION-ADMINISTER.NET and NS2 as the name servers for URLs, and NS1.S-P-F2.JP and NS2 as the name servers for mail addresses.	2019-08-03 13:44:48
23.99.176.168	attack	Aug 3 08:14:30 lnxded63 sshd[25760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.99.176.168	2019-08-03 14:35:41
5.62.41.134	attackbotsspam	\[2019-08-03 02:12:06\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:12332' - Wrong password \[2019-08-03 02:12:06\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-03T02:12:06.012-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="29188",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/60558",Challenge="6d27ca27",ReceivedChallenge="6d27ca27",ReceivedHash="dc5ac1545e5c8ce1a0731d1d4cd9b34b" \[2019-08-03 02:12:55\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:12337' - Wrong password \[2019-08-03 02:12:55\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-03T02:12:55.523-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="47914",SessionID="0x7ff4d05ad438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134	2019-08-03 14:32:53
210.209.119.168	attackspambots	Unauthorised access (Aug 3) SRC=210.209.119.168 LEN=40 TTL=238 ID=60251 TCP DPT=445 WINDOW=1024 SYN	2019-08-03 14:07:29
5.9.140.242	attack	20 attempts against mh-misbehave-ban on pluto.magehost.pro	2019-08-03 14:07:57
180.123.226.61	attack	$f2bV_matches	2019-08-03 14:10:54
131.221.149.52	attackspambots	Aug 3 00:52:41 web1 postfix/smtpd[10512]: warning: unknown[131.221.149.52]: SASL PLAIN authentication failed: authentication failure ...	2019-08-03 13:46:27
45.117.83.118	attackbots	Aug 3 08:54:44 srv-4 sshd\[20215\]: Invalid user toi from 45.117.83.118 Aug 3 08:54:44 srv-4 sshd\[20215\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.83.118 Aug 3 08:54:46 srv-4 sshd\[20215\]: Failed password for invalid user toi from 45.117.83.118 port 59232 ssh2 ...	2019-08-03 14:27:29

最近上报的IP列表

62.210.104.83	194.146.50.49	212.176.127.169	187.233.203.7
217.61.20.207	133.44.3.91	52.185.153.180	104.131.221.208
136.243.26.248	97.234.125.155	5.235.160.252	128.122.20.95
196.188.30.206	20.136.208.183	8.5.75.255	140.250.115.90
163.63.67.227	23.225.83.208	162.99.196.75	251.52.176.84