50.2.214.51 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): ServerHub

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	2020-08-01 07:14:42.815999-0500 localhost smtpd[52274]: NOQUEUE: reject: RCPT from unknown[50.2.214.51]: 554 5.7.1 Service unavailable; Client host [50.2.214.51] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL491105; from=<16856-112-505852-4424-rls=customvisuals.com@mail.enlargement.buzz> to= proto=ESMTP helo=	2020-08-02 01:51:41

类型

评论内容

时间

attackbotsspam

2020-08-01 07:14:42.815999-0500  localhost smtpd[52274]: NOQUEUE: reject: RCPT from unknown[50.2.214.51]: 554 5.7.1 Service unavailable; Client host [50.2.214.51] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL491105; from=<16856-112-505852-4424-rls=customvisuals.com@mail.enlargement.buzz> to= proto=ESMTP helo=

2020-08-02 01:51:41

相同子网IP讨论:

IP	类型	评论内容	时间
50.2.214.58	attackbots	2020-07-29 07:35:15.759315-0500 localhost smtpd[34816]: NOQUEUE: reject: RCPT from unknown[50.2.214.58]: 554 5.7.1 Service unavailable; Client host [50.2.214.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL491105; from=<16708-958-238987-4384-rls=customvisuals.com@mail.clarisilpro.buzz> to= proto=ESMTP helo=	2020-07-29 21:35:07
50.2.214.59	attackbots	Email rejected due to spam filtering	2020-07-26 06:44:22
50.2.214.50	attackspambots	Jul 16 07:15:01 Host-KLAX-C amavis[10515]: (10515-01) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [50.2.214.50] [50.2.214.50] <16043-336-6639-4201-bob=vestibtech.com@mail.resurgee.buzz> -> , Queue-ID: 9C9151BD52B, Message-ID: <0ism1ubxt4303kpq-7ug74xl36e1t8ztx-150-19ef@resurgee.buzz>, mail_id: 7NdZdYptoLMG, Hits: 10.223, size: 11500, 4729 ms Jul 20 06:26:26 Host-KLAX-C amavis[9592]: (09592-15) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [50.2.214.50] [50.2.214.50] <16246-93-3593-4257-b.henderson=vestibtech.com@mail.diabetesfreedmm.co> -> , Queue-ID: B43B11BD2A9, Message-ID: , mail_id: 5xxrHmLWjogE, Hits: 17.499, size: 10203, 3624 ms ...	2020-07-21 03:27:23

类型

评论内容

时间

50.2.214.58

attackbots

2020-07-29 07:35:15.759315-0500  localhost smtpd[34816]: NOQUEUE: reject: RCPT from unknown[50.2.214.58]: 554 5.7.1 Service unavailable; Client host [50.2.214.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL491105; from=<16708-958-238987-4384-rls=customvisuals.com@mail.clarisilpro.buzz> to= proto=ESMTP helo=

2020-07-29 21:35:07

50.2.214.59

attackbots

Email rejected due to spam filtering

2020-07-26 06:44:22

50.2.214.50

attackspambots

Jul 16 07:15:01 Host-KLAX-C amavis[10515]: (10515-01) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [50.2.214.50] [50.2.214.50] <16043-336-6639-4201-bob=vestibtech.com@mail.resurgee.buzz> -> , Queue-ID: 9C9151BD52B, Message-ID: <0ism1ubxt4303kpq-7ug74xl36e1t8ztx-150-19ef@resurgee.buzz>, mail_id: 7NdZdYptoLMG, Hits: 10.223, size: 11500, 4729 ms
Jul 20 06:26:26 Host-KLAX-C amavis[9592]: (09592-15) Blocked SPAM {RejectedInternal}, AM.PDP-SOCK LOCAL [50.2.214.50] [50.2.214.50] <16246-93-3593-4257-b.henderson=vestibtech.com@mail.diabetesfreedmm.co> -> , Queue-ID: B43B11BD2A9, Message-ID: , mail_id: 5xxrHmLWjogE, Hits: 17.499, size: 10203, 3624 ms
...

2020-07-21 03:27:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.2.214.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;50.2.214.51.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080101 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 02 01:51:35 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 51.214.2.50.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.214.2.50.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
126.73.98.250	attack	Invalid user pi from 126.73.98.250 port 60982	2020-04-23 07:18:16
192.141.192.26	attackspambots	Invalid user test from 192.141.192.26 port 34966	2020-04-23 07:13:05
188.166.23.215	attack	Apr 22 23:39:34 Ubuntu-1404-trusty-64-minimal sshd\[20793\]: Invalid user testftp from 188.166.23.215 Apr 22 23:39:34 Ubuntu-1404-trusty-64-minimal sshd\[20793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.23.215 Apr 22 23:39:36 Ubuntu-1404-trusty-64-minimal sshd\[20793\]: Failed password for invalid user testftp from 188.166.23.215 port 36120 ssh2 Apr 23 00:01:54 Ubuntu-1404-trusty-64-minimal sshd\[4345\]: Invalid user sftpuser from 188.166.23.215 Apr 23 00:01:54 Ubuntu-1404-trusty-64-minimal sshd\[4345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.23.215	2020-04-23 07:02:30
80.211.78.82	attackbotsspam	SSH Brute-Forcing (server1)	2020-04-23 06:57:16
203.245.29.148	attackspam	Invalid user teste from 203.245.29.148 port 36778	2020-04-23 06:46:46
45.95.168.159	attack	Apr 23 00:49:43 web01.agentur-b-2.de postfix/smtpd[444633]: lost connection after CONNECT from unknown[45.95.168.159] Apr 23 00:53:14 web01.agentur-b-2.de postfix/smtpd[444633]: warning: unknown[45.95.168.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 23 00:53:14 web01.agentur-b-2.de postfix/smtpd[444633]: lost connection after AUTH from unknown[45.95.168.159] Apr 23 00:55:53 web01.agentur-b-2.de postfix/smtpd[444633]: warning: unknown[45.95.168.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 23 00:55:53 web01.agentur-b-2.de postfix/smtpd[444633]: lost connection after AUTH from unknown[45.95.168.159]	2020-04-23 07:08:26
49.235.72.141	attackspambots	Invalid user gs from 49.235.72.141 port 51438	2020-04-23 07:11:46
45.118.151.85	attackspam	SSH Invalid Login	2020-04-23 06:46:20
187.188.83.115	attack	Apr 23 00:46:23 vps sshd[559849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-188-83-115.totalplay.net Apr 23 00:46:25 vps sshd[559849]: Failed password for invalid user admin from 187.188.83.115 port 37447 ssh2 Apr 23 00:50:36 vps sshd[581269]: Invalid user postgres from 187.188.83.115 port 44892 Apr 23 00:50:36 vps sshd[581269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-188-83-115.totalplay.net Apr 23 00:50:38 vps sshd[581269]: Failed password for invalid user postgres from 187.188.83.115 port 44892 ssh2 ...	2020-04-23 07:13:58
49.232.48.129	attackbots	run attacks on the service SSH	2020-04-23 07:19:05
41.39.155.234	attackspam	(imapd) Failed IMAP login from 41.39.155.234 (EG/Egypt/host-41.39.155.234.tedata.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 23 00:43:24 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=41.39.155.234, lip=5.63.12.44, TLS, session=	2020-04-23 07:03:13
87.251.74.18	attackspambots	Multiport scan : 27 ports scanned 2016 3000 3333 3388 3397 3398 3400 3401 3403 4002 4004 4443 5000 5002 5003 5004 5005 5900 6666 8888 9833 10001 10003 10008 33333 53390 54321	2020-04-23 07:11:22
185.216.140.252	attack	firewall-block, port(s): 1482/tcp, 1486/tcp	2020-04-23 06:48:03
159.65.152.201	attack	2020-04-22T17:57:48.2955831495-001 sshd[64448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.201 2020-04-22T17:57:48.2925661495-001 sshd[64448]: Invalid user jk from 159.65.152.201 port 39894 2020-04-22T17:57:50.6992591495-001 sshd[64448]: Failed password for invalid user jk from 159.65.152.201 port 39894 ssh2 2020-04-22T18:00:42.4517501495-001 sshd[64600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.201 user=root 2020-04-22T18:00:44.4084171495-001 sshd[64600]: Failed password for root from 159.65.152.201 port 57674 ssh2 2020-04-22T18:03:28.9108731495-001 sshd[64863]: Invalid user admin from 159.65.152.201 port 47234 ...	2020-04-23 06:50:39
117.28.254.143	attackbotsspam	Unauthorized IMAP connection attempt	2020-04-23 07:18:35

最近上报的IP列表

3.29.3.62	115.197.51.220	78.19.176.164	141.5.95.19
140.255.146.188	246.127.137.214	93.189.207.225	122.173.218.130
104.144.207.168	45.65.199.102	211.26.181.78	103.242.200.22
17.240.202.6	58.186.88.187	5.206.227.136	3.250.25.245
36.220.233.156	14.182.69.75	221.136.183.1	179.183.37.189