189.50.10.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
189.50.103.241	attackspambots	Port probing on unauthorized port 445	2020-08-18 03:59:18
189.50.105.128	attack	23/tcp [2020-06-30]1pkt	2020-07-01 18:49:19
189.50.102.176	attack	SMB Server BruteForce Attack	2020-06-26 19:03:05
189.50.104.98	attackspam	May 8 22:56:46 scw-6657dc sshd[4251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.104.98 May 8 22:56:46 scw-6657dc sshd[4251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.104.98 May 8 22:56:48 scw-6657dc sshd[4251]: Failed password for invalid user i2b2metadata from 189.50.104.98 port 9224 ssh2 ...	2020-05-09 07:49:26
189.50.104.98	attackspam	port scan and connect, tcp 22 (ssh)	2020-04-16 14:10:29
189.50.105.218	attackbotsspam	UTC: 2019-11-26 port: 23/tcp	2019-11-28 04:56:49
189.50.104.98	attack	From: Ciaxa Bank Received: from mail2.lpnet.com.br ([189.1.144.235]) by ns3041838.ip-188-165-236.eu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.90_1) (envelope-from ) id 1iNCqf-0002yj-Jc for admon@alsurmedia.com; Wed, 23 Oct 2019 11:22:34 +0200 Received: (qmail 29223 invoked by uid 89); 23 Oct 2019 09:20:04 -0000 Received: by simscan 1.4.0 ppid: 28997, pid: 29161, t: 0.5353s scanners: attach: 1.4.0 clamav: 0.99.2/m:57/d:22959 Received: from unknown (HELO svlnxwm130.lencoispaulista.sp.gov.br) (prefeitura@lencoispaulista.sp.gov.br@189.50.104.98) by 0 with ESMTPA; 23 O	2019-10-23 22:45:34
189.50.105.104	attackbotsspam	Honeypot attack, port: 23, PTR: 189-50-105-104-wlan.lpnet.com.br.	2019-09-05 14:45:07
189.50.105.214	attackspambots	Aug 19 18:44:15 eddieflores sshd\[833\]: Invalid user demo from 189.50.105.214 Aug 19 18:44:15 eddieflores sshd\[833\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189-50-105-214-wlan.lpnet.com.br Aug 19 18:44:17 eddieflores sshd\[833\]: Failed password for invalid user demo from 189.50.105.214 port 60732 ssh2 Aug 19 18:49:25 eddieflores sshd\[1242\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189-50-105-214-wlan.lpnet.com.br user=root Aug 19 18:49:28 eddieflores sshd\[1242\]: Failed password for root from 189.50.105.214 port 51306 ssh2	2019-08-20 21:26:25
189.50.105.104	attack	Apr 16 05:31:42 ubuntu sshd[5814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.105.104 Apr 16 05:31:44 ubuntu sshd[5814]: Failed password for invalid user tuxedo from 189.50.105.104 port 53965 ssh2 Apr 16 05:34:39 ubuntu sshd[5868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.105.104 Apr 16 05:34:41 ubuntu sshd[5868]: Failed password for invalid user odoo from 189.50.105.104 port 38788 ssh2	2019-08-01 08:40:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.50.10.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19710
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;189.50.10.55.			IN	A

;; AUTHORITY SECTION:
.			187	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:32:50 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 55.10.50.189.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.10.50.189.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.24.38.12	attackspambots	Nov 12 08:34:05 * sshd[3102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 Nov 12 08:34:07 * sshd[3102]: Failed password for invalid user girbal from 118.24.38.12 port 47643 ssh2	2019-11-12 16:16:02
190.58.51.44	attackbotsspam	Automatic report - Port Scan Attack	2019-11-12 16:41:22
122.51.158.77	attackspam	Nov 12 07:59:05 minden010 sshd[12640]: Failed password for r.r from 122.51.158.77 port 55324 ssh2 Nov 12 07:59:08 minden010 sshd[12640]: Failed password for r.r from 122.51.158.77 port 55324 ssh2 Nov 12 07:59:20 minden010 sshd[12715]: Failed password for r.r from 122.51.158.77 port 57445 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=122.51.158.77	2019-11-12 16:25:15
77.40.40.140	attackbotsspam	Nov 12 06:25:04 mailserver postfix/smtpd[93212]: warning: unknown[77.40.40.140]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 12 06:25:04 mailserver postfix/smtpd[93212]: disconnect from unknown[77.40.40.140] Nov 12 09:28:37 mailserver postfix/smtps/smtpd[94749]: warning: hostname 140.40.pppoe.mari-el.ru does not resolve to address 77.40.40.140: hostname nor servname provided, or not known Nov 12 09:28:37 mailserver postfix/smtps/smtpd[94749]: connect from unknown[77.40.40.140] Nov 12 09:28:38 mailserver dovecot: auth-worker(94689): sql([hidden],77.40.40.140): unknown user Nov 12 09:28:40 mailserver postfix/smtps/smtpd[94749]: warning: unknown[77.40.40.140]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 12 09:28:40 mailserver postfix/smtps/smtpd[94749]: disconnect from unknown[77.40.40.140] Nov 12 09:28:42 mailserver postfix/smtpd[94706]: warning: hostname 140.40.pppoe.mari-el.ru does not resolve to address 77.40.40.140: hostname nor servname provided, or not known Nov 12 09:28:42 mailserver postfi	2019-11-12 16:31:09
35.188.242.129	attackbotsspam	Nov 12 08:34:18 nextcloud sshd\[15488\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.188.242.129 user=root Nov 12 08:34:20 nextcloud sshd\[15488\]: Failed password for root from 35.188.242.129 port 53174 ssh2 Nov 12 08:40:14 nextcloud sshd\[24547\]: Invalid user sutphen from 35.188.242.129 ...	2019-11-12 16:37:18
177.75.151.105	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/177.75.151.105/ BR - 1H : (174) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN28146 IP : 177.75.151.105 CIDR : 177.75.151.0/24 PREFIX COUNT : 73 UNIQUE IP COUNT : 21504 ATTACKS DETECTED ASN28146 : 1H - 2 3H - 2 6H - 2 12H - 2 24H - 2 DateTime : 2019-11-12 07:30:22 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-12 16:22:06
87.154.251.205	attackspam	Nov 12 09:05:17 mail postfix/smtpd[9634]: warning: p579AFBCD.dip0.t-ipconnect.de[87.154.251.205]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 12 09:07:27 mail postfix/smtpd[9253]: warning: p579AFBCD.dip0.t-ipconnect.de[87.154.251.205]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 12 09:11:00 mail postfix/smtpd[11413]: warning: p579AFBCD.dip0.t-ipconnect.de[87.154.251.205]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-12 16:16:43
54.36.182.244	attack	Nov 12 04:36:02 firewall sshd[29172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.182.244 user=root Nov 12 04:36:04 firewall sshd[29172]: Failed password for root from 54.36.182.244 port 54026 ssh2 Nov 12 04:39:34 firewall sshd[29245]: Invalid user henkeman from 54.36.182.244 ...	2019-11-12 16:32:30
222.186.180.41	attack	Nov 11 02:40:03 microserver sshd[6554]: Failed none for root from 222.186.180.41 port 28072 ssh2 Nov 11 02:40:03 microserver sshd[6554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Nov 11 02:40:05 microserver sshd[6554]: Failed password for root from 222.186.180.41 port 28072 ssh2 Nov 11 02:40:08 microserver sshd[6554]: Failed password for root from 222.186.180.41 port 28072 ssh2 Nov 11 02:40:11 microserver sshd[6554]: Failed password for root from 222.186.180.41 port 28072 ssh2 Nov 11 13:27:56 microserver sshd[31053]: Failed none for root from 222.186.180.41 port 20200 ssh2 Nov 11 13:27:56 microserver sshd[31053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41 user=root Nov 11 13:27:58 microserver sshd[31053]: Failed password for root from 222.186.180.41 port 20200 ssh2 Nov 11 13:28:01 microserver sshd[31053]: Failed password for root from 222.186.180.41 port 20200 ssh2 Nov 11 13:28:	2019-11-12 16:18:42
138.68.165.102	attackbotsspam	Repeated brute force against a port	2019-11-12 16:24:30
54.39.105.98	attackspam	CyberHackers.eu > SSH Bruteforce attempt!	2019-11-12 16:32:03
51.77.212.124	attackbotsspam	$f2bV_matches	2019-11-12 16:10:31
154.221.19.81	attack	2019-11-12T09:38:43.516495scmdmz1 sshd\[24152\]: Invalid user ayesha from 154.221.19.81 port 49084 2019-11-12T09:38:43.519194scmdmz1 sshd\[24152\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.221.19.81 2019-11-12T09:38:45.380596scmdmz1 sshd\[24152\]: Failed password for invalid user ayesha from 154.221.19.81 port 49084 ssh2 ...	2019-11-12 16:40:37
117.207.242.99	attackbots	Unauthorised access (Nov 12) SRC=117.207.242.99 LEN=52 PREC=0x20 TTL=112 ID=12483 DF TCP DPT=445 WINDOW=8192 SYN	2019-11-12 16:38:03
132.232.79.207	attackspam	Nov 12 09:11:26 vps647732 sshd[13476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.79.207 Nov 12 09:11:28 vps647732 sshd[13476]: Failed password for invalid user test from 132.232.79.207 port 43820 ssh2 ...	2019-11-12 16:24:55

Recently Reported IPs

189.50.42.34	182.235.29.119	143.55.93.9	213.172.89.227
89.115.180.182	139.59.127.178	200.46.30.210	101.249.60.198
213.164.250.223	170.205.155.175	103.95.0.15	51.81.245.120
103.75.197.131	182.119.252.88	210.209.244.59	114.227.182.58
114.253.249.45	46.107.107.234	62.193.68.71	192.241.207.32