50.18.244.114 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.18.244.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29506
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;50.18.244.114.			IN	A

;; AUTHORITY SECTION:
.			254	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022600 1800 900 604800 86400

;; Query time: 47 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 18:21:42 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

114.244.18.50.in-addr.arpa domain name pointer ec2-50-18-244-114.us-west-1.compute.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
114.244.18.50.in-addr.arpa	name = ec2-50-18-244-114.us-west-1.compute.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
222.186.30.187	attack	Mar 18 15:50:32 firewall sshd[7738]: Failed password for root from 222.186.30.187 port 63863 ssh2 Mar 18 15:50:35 firewall sshd[7738]: Failed password for root from 222.186.30.187 port 63863 ssh2 Mar 18 15:50:37 firewall sshd[7738]: Failed password for root from 222.186.30.187 port 63863 ssh2 ...	2020-03-19 02:55:02
190.208.32.110	attack	Mar 18 17:59:56 xeon sshd[57878]: Failed password for invalid user chris from 190.208.32.110 port 51922 ssh2	2020-03-19 02:47:57
141.8.142.180	attack	[Thu Mar 19 01:09:39.567987 2020] [:error] [pid 21327:tid 139998034278144] [client 141.8.142.180:58741] [client 141.8.142.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XnJj46fks8iqMveAsGOWFwAAAAI"] ...	2020-03-19 03:06:41
142.4.7.212	attackbotsspam	142.4.7.212 - - [18/Mar/2020:17:15:53 +0000] "POST /wp-login.php HTTP/1.1" 200 6627 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.7.212 - - [18/Mar/2020:17:15:55 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-03-19 03:00:12
106.13.173.38	attack	Mar 16 04:49:13 finn sshd[15312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.173.38 user=r.r Mar 16 04:49:15 finn sshd[15312]: Failed password for r.r from 106.13.173.38 port 49348 ssh2 Mar 16 04:49:15 finn sshd[15312]: Received disconnect from 106.13.173.38 port 49348:11: Bye Bye [preauth] Mar 16 04:49:15 finn sshd[15312]: Disconnected from 106.13.173.38 port 49348 [preauth] Mar 16 04:54:22 finn sshd[16496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.173.38 user=r.r Mar 16 04:54:24 finn sshd[16496]: Failed password for r.r from 106.13.173.38 port 49592 ssh2 Mar 16 04:54:25 finn sshd[16496]: Received disconnect from 106.13.173.38 port 49592:11: Bye Bye [preauth] Mar 16 04:54:25 finn sshd[16496]: Disconnected from 106.13.173.38 port 49592 [preauth] Mar 16 04:56:43 finn sshd[17535]: Invalid user Michelle from 106.13.173.38 port 33660 Mar 16 04:56:43 finn sshd[17535]: ........ -------------------------------	2020-03-19 03:02:43
106.58.169.162	attackspambots	[ssh] SSH attack	2020-03-19 02:52:50
77.75.37.51	attack	Mar 17 21:55:44 archiv sshd[18836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server-77.75.37.51.radore.net.tr user=r.r Mar 17 21:55:46 archiv sshd[18836]: Failed password for r.r from 77.75.37.51 port 42283 ssh2 Mar 17 21:55:46 archiv sshd[18836]: Received disconnect from 77.75.37.51 port 42283:11: Bye Bye [preauth] Mar 17 21:55:46 archiv sshd[18836]: Disconnected from 77.75.37.51 port 42283 [preauth] Mar 17 22:10:23 archiv sshd[19177]: Invalid user takaki from 77.75.37.51 port 53790 Mar 17 22:10:23 archiv sshd[19177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=server-77.75.37.51.radore.net.tr Mar 17 22:10:26 archiv sshd[19177]: Failed password for invalid user takaki from 77.75.37.51 port 53790 ssh2 Mar 17 22:10:26 archiv sshd[19177]: Received disconnect from 77.75.37.51 port 53790:11: Bye Bye [preauth] Mar 17 22:10:26 archiv sshd[19177]: Disconnected from 77.75.37.51 port 5379........ -------------------------------	2020-03-19 03:06:21
218.21.217.122	attack	firewall-block, port(s): 1433/tcp	2020-03-19 02:46:28
113.203.60.57	attack	1584536878 - 03/18/2020 14:07:58 Host: 113.203.60.57/113.203.60.57 Port: 445 TCP Blocked	2020-03-19 02:49:56
183.77.139.175	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 18-03-2020 17:00:39.	2020-03-19 02:59:55
152.136.37.135	attack	2020-03-18T13:59:11.679220vps751288.ovh.net sshd\[14458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.37.135 user=root 2020-03-18T13:59:12.991737vps751288.ovh.net sshd\[14458\]: Failed password for root from 152.136.37.135 port 41574 ssh2 2020-03-18T14:07:35.824593vps751288.ovh.net sshd\[14494\]: Invalid user status from 152.136.37.135 port 47064 2020-03-18T14:07:35.831846vps751288.ovh.net sshd\[14494\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.37.135 2020-03-18T14:07:38.002250vps751288.ovh.net sshd\[14494\]: Failed password for invalid user status from 152.136.37.135 port 47064 ssh2	2020-03-19 03:12:09
45.133.99.2	attack	2020-03-18 19:45:02 dovecot_login authenticator failed for $\[45.133.99.2\]$ \[45.133.99.2\]: 535 Incorrect authentication data $set_id=info@orogest.it$ 2020-03-18 19:45:09 dovecot_login authenticator failed for $\[45.133.99.2\]$ \[45.133.99.2\]: 535 Incorrect authentication data 2020-03-18 19:45:18 dovecot_login authenticator failed for $\[45.133.99.2\]$ \[45.133.99.2\]: 535 Incorrect authentication data 2020-03-18 19:45:23 dovecot_login authenticator failed for $\[45.133.99.2\]$ \[45.133.99.2\]: 535 Incorrect authentication data 2020-03-18 19:45:36 dovecot_login authenticator failed for $\[45.133.99.2\]$ \[45.133.99.2\]: 535 Incorrect authentication data	2020-03-19 02:51:57
222.186.173.215	attackbots	SSH_scan	2020-03-19 03:07:42
170.130.174.56	attackspambots	2020-03-18 08:59:23 H=(0285e22c.memoryshack.best) [170.130.174.56]:42697 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-03-18 08:59:23 H=(0283395a.memoryshack.best) [170.130.174.56]:41169 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-03-18 08:59:23 H=(0297e54d.memoryshack.best) [170.130.174.56]:41473 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2020-03-19 02:47:17
49.247.198.117	attackbots	Invalid user ishihara from 49.247.198.117 port 59112	2020-03-19 03:13:18

最近上报的IP列表

245.68.145.194	176.109.85.15	17.28.30.61	248.253.3.213
94.90.247.172	80.194.181.132	5.36.115.66	210.108.231.138
243.238.157.174	164.2.103.160	47.226.209.88	196.231.50.138
172.6.136.105	40.72.146.137	197.12.59.49	195.246.235.62
109.102.99.51	5.184.14.197	185.136.87.162	52.155.107.129