50.2.214.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): ServerHub

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
50.2.214.51	attackbotsspam	2020-08-01 07:14:42.815999-0500 localhost smtpd[52274]: NOQUEUE: reject: RCPT from unknown[50.2.214.51]: 554 5.7.1 Service unavailable; Client host [50.2.214.51] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL491105; from=<16856-112-505852-4424-rls=customvisuals.com@mail.enlargement.buzz> to= proto=ESMTP helo=	2020-08-02 01:51:41
50.2.214.58	attackbots	2020-07-29 07:35:15.759315-0500 localhost smtpd[34816]: NOQUEUE: reject: RCPT from unknown[50.2.214.58]: 554 5.7.1 Service unavailable; Client host [50.2.214.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL491105; from=<16708-958-238987-4384-rls=customvisuals.com@mail.clarisilpro.buzz> to= proto=ESMTP helo=	2020-07-29 21:35:07
50.2.214.59	attackbots	Email rejected due to spam filtering	2020-07-26 06:44:22
50.2.214.50	attackspambots	Jul 16 07:15:01 Host-KLAX-C amavis[10515]: (10515-01) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [50.2.214.50] [50.2.214.50] <16043-336-6639-4201-bob=vestibtech.com@mail.resurgee.buzz> -> , Queue-ID: 9C9151BD52B, Message-ID: <0ism1ubxt4303kpq-7ug74xl36e1t8ztx-150-19ef@resurgee.buzz>, mail_id: 7NdZdYptoLMG, Hits: 10.223, size: 11500, 4729 ms Jul 20 06:26:26 Host-KLAX-C amavis[9592]: (09592-15) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [50.2.214.50] [50.2.214.50] <16246-93-3593-4257-b.henderson=vestibtech.com@mail.diabetesfreedmm.co> -> , Queue-ID: B43B11BD2A9, Message-ID: , mail_id: 5xxrHmLWjogE, Hits: 17.499, size: 10203, 3624 ms ...	2020-07-21 03:27:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.2.214.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34386
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;50.2.214.42.			IN	A

;; AUTHORITY SECTION:
.			493	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072000 1800 900 604800 86400

;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 20 22:33:37 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 42.214.2.50.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.214.2.50.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
95.177.167.189	attackbots	$f2bV_matches	2019-12-31 05:38:27
222.186.175.216	attack	Dec 30 22:45:24 v22018086721571380 sshd[30907]: Failed password for root from 222.186.175.216 port 57590 ssh2 Dec 30 22:45:28 v22018086721571380 sshd[30907]: error: maximum authentication attempts exceeded for root from 222.186.175.216 port 57590 ssh2 [preauth]	2019-12-31 05:55:24
51.37.130.84	attackbots	SSH bruteforce (Triggered fail2ban)	2019-12-31 05:34:40
94.247.16.29	attack	SPF Fail sender not permitted to send mail for @1888sunroom.com / Sent mail to target address hacked/leaked from abandonia in 2016	2019-12-31 05:42:17
106.13.72.95	attackbots	Dec 30 21:36:13 haigwepa sshd[22294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.72.95 Dec 30 21:36:15 haigwepa sshd[22294]: Failed password for invalid user sanjavier from 106.13.72.95 port 51366 ssh2 ...	2019-12-31 05:31:37
168.227.15.62	attack	proto=tcp . spt=46321 . dpt=25 . (Found on Dark List de Dec 30) (444)	2019-12-31 05:27:36
185.153.196.225	attackspambots	Dec 30 21:28:58 debian-2gb-nbg1-2 kernel: \[1390443.499031\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.153.196.225 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=42219 PROTO=TCP SPT=46319 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-31 06:00:23
182.254.154.89	attack	Dec 30 21:29:02 zeus sshd[13721]: Failed password for root from 182.254.154.89 port 56564 ssh2 Dec 30 21:32:08 zeus sshd[13783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.154.89 Dec 30 21:32:10 zeus sshd[13783]: Failed password for invalid user alans from 182.254.154.89 port 52984 ssh2 Dec 30 21:35:16 zeus sshd[13897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.154.89	2019-12-31 05:47:09
106.13.58.170	attack	Dec 30 21:13:05 nextcloud sshd\[26382\]: Invalid user wwwadmin from 106.13.58.170 Dec 30 21:13:05 nextcloud sshd\[26382\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.58.170 Dec 30 21:13:08 nextcloud sshd\[26382\]: Failed password for invalid user wwwadmin from 106.13.58.170 port 55754 ssh2 ...	2019-12-31 05:23:19
80.106.247.145	attackspambots	Automatic report - XMLRPC Attack	2019-12-31 05:42:35
103.138.41.74	attack	Dec 30 13:11:15 toyboy sshd[25766]: reveeclipse mapping checking getaddrinfo for ip-41-74.balifiber.id [103.138.41.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 30 13:11:15 toyboy sshd[25766]: Invalid user chaise from 103.138.41.74 Dec 30 13:11:15 toyboy sshd[25766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.138.41.74 Dec 30 13:11:17 toyboy sshd[25766]: Failed password for invalid user chaise from 103.138.41.74 port 33992 ssh2 Dec 30 13:11:17 toyboy sshd[25766]: Received disconnect from 103.138.41.74: 11: Bye Bye [preauth] Dec 30 17:19:34 toyboy sshd[7021]: reveeclipse mapping checking getaddrinfo for ip-41-74.balifiber.id [103.138.41.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 30 17:19:34 toyboy sshd[7021]: Invalid user banet from 103.138.41.74 Dec 30 17:19:34 toyboy sshd[7021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.138.41.74 Dec 30 17:19:35 toyboy sshd[7021]: Failed p........ -------------------------------	2019-12-31 05:54:39
62.122.201.241	attackspam	proto=tcp . spt=37973 . dpt=25 . (Found on Dark List de Dec 30) (447)	2019-12-31 05:24:09
46.197.11.13	attackbots	Dec 30 11:20:32 web1 sshd\[29049\]: Invalid user http from 46.197.11.13 Dec 30 11:20:32 web1 sshd\[29049\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.197.11.13 Dec 30 11:20:34 web1 sshd\[29049\]: Failed password for invalid user http from 46.197.11.13 port 44332 ssh2 Dec 30 11:28:39 web1 sshd\[29698\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.197.11.13 user=root Dec 30 11:28:41 web1 sshd\[29698\]: Failed password for root from 46.197.11.13 port 37540 ssh2	2019-12-31 05:40:43
137.116.229.134	attackspambots	137.116.229.134 - - \[30/Dec/2019:21:12:35 +0100\] "POST /wp-login.php HTTP/1.0" 200 7672 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 137.116.229.134 - - \[30/Dec/2019:21:12:37 +0100\] "POST /wp-login.php HTTP/1.0" 200 7502 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 137.116.229.134 - - \[30/Dec/2019:21:12:41 +0100\] "POST /wp-login.php HTTP/1.0" 200 7496 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-12-31 05:37:55
89.35.235.51	attack	Unauthorized connection attempt detected from IP address 89.35.235.51 to port 1433	2019-12-31 05:28:43

最近上报的IP列表

120.59.67.254	139.24.8.121	233.203.255.4	33.29.173.43
209.85.219.46	112.192.58.1	147.173.250.87	252.112.197.250
102.133.192.75	77.137.159.154	105.48.220.204	192.81.218.93
176.114.153.22	49.233.3.145	23.106.249.16	1.9.180.132
186.91.176.169	66.72.135.124	211.22.161.170	192.241.231.242