194.135.55.50 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OJS Moscow City Telephone Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 194.135.55.50 on Port 445(SMB)	2020-07-01 12:24:30
attackspam	20/1/31@15:50:29: FAIL: Alarm-Network address from=194.135.55.50 ...	2020-02-01 05:10:04
attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-17 02:56:18,797 INFO [shellcode_manager] (194.135.55.50) no match, writing hexdump (1b1d04f2d7169675868ca71cb9f0f4d5 :2169426) - MS17010 (EternalBlue)	2019-07-18 14:07:51

Type

Details

Datetime

attack

Unauthorized connection attempt from IP address 194.135.55.50 on Port 445(SMB)

2020-07-01 12:24:30

attackspam

20/1/31@15:50:29: FAIL: Alarm-Network address from=194.135.55.50
...

2020-02-01 05:10:04

attack

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-17 02:56:18,797 INFO [shellcode_manager] (194.135.55.50) no match, writing hexdump (1b1d04f2d7169675868ca71cb9f0f4d5 :2169426) - MS17010 (EternalBlue)

2019-07-18 14:07:51

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.135.55.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60528
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;194.135.55.50.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071800 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 14:07:43 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 50.55.135.194.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 50.55.135.194.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
176.31.170.245	attack	no	2020-05-07 07:14:17
113.141.70.204	attack	[2020-05-06 18:39:19] NOTICE[1157] chan_sip.c: Registration from '"567" ' failed for '113.141.70.204:5141' - Wrong password [2020-05-06 18:39:19] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-06T18:39:19.598-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="567",SessionID="0x7f5f10197838",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.141.70.204/5141",Challenge="307ea7a0",ReceivedChallenge="307ea7a0",ReceivedHash="5d5866a09ca70c60b775e4179e61b980" [2020-05-06 18:39:19] NOTICE[1157] chan_sip.c: Registration from '"567" ' failed for '113.141.70.204:5141' - Wrong password [2020-05-06 18:39:19] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-06T18:39:19.923-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="567",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/113.1 ...	2020-05-07 07:01:20
222.186.175.151	attackspam	2020-05-06T18:27:08.882446xentho-1 sshd[158710]: Failed password for root from 222.186.175.151 port 52576 ssh2 2020-05-06T18:27:02.378631xentho-1 sshd[158710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root 2020-05-06T18:27:04.258466xentho-1 sshd[158710]: Failed password for root from 222.186.175.151 port 52576 ssh2 2020-05-06T18:27:08.882446xentho-1 sshd[158710]: Failed password for root from 222.186.175.151 port 52576 ssh2 2020-05-06T18:27:12.987614xentho-1 sshd[158710]: Failed password for root from 222.186.175.151 port 52576 ssh2 2020-05-06T18:27:02.378631xentho-1 sshd[158710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root 2020-05-06T18:27:04.258466xentho-1 sshd[158710]: Failed password for root from 222.186.175.151 port 52576 ssh2 2020-05-06T18:27:08.882446xentho-1 sshd[158710]: Failed password for root from 222.186.175.151 port 52576 ssh2 2020-0 ...	2020-05-07 06:47:35
194.61.27.249	attackspambots	Multiport scan : 33 ports scanned 2211 3031 3439 4440 5051 5252 5454 5544 5550 5656 6050 6550 6655 6666 6677 7050 7071 7550 7676 7777 7979 8050 8081 8484 8550 8585 8787 8880 8933 9050 9550 10010 33000	2020-05-07 06:39:20
60.205.200.235	attackspambots	[MK-Root1] Blocked by UFW	2020-05-07 06:39:55
87.251.74.30	attack	May 7 00:51:00 vps639187 sshd\[8134\]: Invalid user user from 87.251.74.30 port 6518 May 7 00:51:02 vps639187 sshd\[8134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.30 May 7 00:51:02 vps639187 sshd\[8135\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.30 user=root ...	2020-05-07 07:07:06
60.160.225.39	attackspambots	2020-05-06T21:39:09.010537upcloud.m0sh1x2.com sshd[10303]: Invalid user tobin from 60.160.225.39 port 61920	2020-05-07 06:40:58
202.43.146.107	attackbots	$f2bV_matches	2020-05-07 07:16:19
103.145.13.24	attack	Automatic report - Banned IP Access	2020-05-07 06:55:23
185.143.74.49	attackspambots	May 7 01:13:01 relay postfix/smtpd\[20398\]: warning: unknown\[185.143.74.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 01:13:50 relay postfix/smtpd\[27143\]: warning: unknown\[185.143.74.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 01:14:06 relay postfix/smtpd\[31778\]: warning: unknown\[185.143.74.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 01:14:56 relay postfix/smtpd\[22911\]: warning: unknown\[185.143.74.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 7 01:15:11 relay postfix/smtpd\[31778\]: warning: unknown\[185.143.74.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-05-07 07:16:49
51.91.108.98	attack	May 7 00:59:02 vpn01 sshd[6894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.108.98 May 7 00:59:03 vpn01 sshd[6894]: Failed password for invalid user user from 51.91.108.98 port 44260 ssh2 ...	2020-05-07 07:05:31
46.36.27.114	attackspambots	May 6 17:52:05 NPSTNNYC01T sshd[23163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.36.27.114 May 6 17:52:07 NPSTNNYC01T sshd[23163]: Failed password for invalid user postgres from 46.36.27.114 port 46224 ssh2 May 6 17:55:17 NPSTNNYC01T sshd[23445]: Failed password for root from 46.36.27.114 port 44023 ssh2 ...	2020-05-07 07:14:36
159.65.146.52	attack	firewall-block, port(s): 235/tcp	2020-05-07 06:49:02
179.95.138.65	attack	firewall-block, port(s): 23/tcp	2020-05-07 06:45:39
45.136.108.85	attackspam	May 7 00:10:32 sip sshd[142839]: Invalid user 0 from 45.136.108.85 port 20558 May 7 00:10:35 sip sshd[142839]: Failed password for invalid user 0 from 45.136.108.85 port 20558 ssh2 May 7 00:10:37 sip sshd[142839]: Disconnecting invalid user 0 45.136.108.85 port 20558: Change of username or service not allowed: (0,ssh-connection) -> (22,ssh-connection) [preauth] ...	2020-05-07 06:56:56

Recently Reported IPs

113.23.179.114	195.154.35.96	102.134.73.2	92.222.127.232
77.40.93.39	179.108.137.82	5.253.18.221	162.241.29.117
49.145.137.129	103.87.85.179	164.68.101.155	197.214.68.47
187.189.212.247	206.189.154.111	178.93.19.68	170.83.202.17
114.45.140.133	128.199.184.180	118.71.122.4	68.183.16.193