149.50.97.196 - IPInfo

Basic Info

City: Warsaw

Region: Mazowieckie

Country: Poland

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       149.50.0.0 - 149.50.255.255
CIDR:           149.50.0.0/16
NetName:        COGENT-149-50-16
NetHandle:      NET-149-50-0-0-1
Parent:         NET149 (NET-149-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Cogent Communications, LLC (COGC)
RegDate:        1992-01-28
Updated:        2025-09-23
Ref:            https://rdap.arin.net/registry/ip/149.50.0.0



OrgName:        Cogent Communications, LLC
OrgId:          COGC
Address:        2450 N Street NW
City:           Washington
StateProv:      DC
PostalCode:     20037
Country:        US
RegDate:        2000-05-30
Updated:        2025-09-23
Comment:        Geofeed https://geofeed.cogentco.com/geofeed.csv
Ref:            https://rdap.arin.net/registry/entity/COGC

ReferralServer:  rwhois://rwhois.cogentco.com:4321

OrgAbuseHandle: COGEN-ARIN
OrgAbuseName:   Cogent Abuse
OrgAbusePhone:  +1-877-875-4311 
OrgAbuseEmail:  abuse@cogentco.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/COGEN-ARIN

OrgTechHandle: IPALL-ARIN
OrgTechName:   IP Allocation
OrgTechPhone:  +1-877-875-4311 
OrgTechEmail:  ipalloc@cogentco.com
OrgTechRef:    https://rdap.arin.net/registry/entity/IPALL-ARIN

OrgNOCHandle: ZC108-ARIN
OrgNOCName:   Cogent Communications
OrgNOCPhone:  +1-877-875-4311 
OrgNOCEmail:  noc@cogentco.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/ZC108-ARIN

# end


# start

NetRange:       149.50.96.0 - 149.50.127.255
CIDR:           149.50.96.0/19
NetName:        MEVERYWHERE-CGNT-NET-1
NetHandle:      NET-149-50-96-0-1
Parent:         COGENT-149-50-16 (NET-149-50-0-0-1)
NetType:        Reallocated
OriginAS:       
Organization:   MEVSPACE (MSZO)
RegDate:        2023-06-28
Updated:        2023-06-28
Ref:            https://rdap.arin.net/registry/ip/149.50.96.0


OrgName:        MEVSPACE
OrgId:          MSZO
Address:        ul.Augustyna Locciego 33
City:           Warsaw
StateProv:      
PostalCode:     02-928
Country:        PL
RegDate:        2023-06-20
Updated:        2023-06-28
Ref:            https://rdap.arin.net/registry/entity/MSZO


OrgAbuseHandle: ABUSE8767-ARIN
OrgAbuseName:   Abuse-mevspace
OrgAbusePhone:  +48 22 100 41 44 
OrgAbuseEmail:  abuse@mevspace.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/ABUSE8767-ARIN

OrgTechHandle: OLEJN3-ARIN
OrgTechName:   Olejnik, Sebastian 
OrgTechPhone:  +48 22 100 41 44 
OrgTechEmail:  sebastian.olejnik@mevspace.com
OrgTechRef:    https://rdap.arin.net/registry/entity/OLEJN3-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#



Found a referral to rwhois.cogentco.com:4321.

%rwhois V-1.5:0010b0:00 rwhois.cogentco.com (CGNT rwhoisd 1.2.1)
network:ID:NET4-9532600013
network:Network-Name:NET4-9532600013
network:IP-Network:149.50.96.0/19
network:Org-Name:Meverywhere sp.zo.o.
network:Street-Address:AL JEROZOLIMSKIE 65/79
network:City:WARSAW
network:Country:PL
network:Postal-Code:00-697
network:Tech-Contact:ZC108-ARIN
network:Updated:2024-05-13 18:30:01
%ok

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.50.97.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62629
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.50.97.196.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025092401 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 25 01:02:40 CST 2025
;; MSG SIZE  rcvd: 106

Host info

Host 196.97.50.149.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 196.97.50.149.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.77.118.100	attackbots	Brute forcing email accounts	2020-07-21 08:15:34
31.186.49.210	attack	Jul 20 22:40:09 v22019038103785759 sshd\[24757\]: Invalid user ajb from 31.186.49.210 port 10148 Jul 20 22:40:09 v22019038103785759 sshd\[24757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.186.49.210 Jul 20 22:40:11 v22019038103785759 sshd\[24757\]: Failed password for invalid user ajb from 31.186.49.210 port 10148 ssh2 Jul 20 22:46:15 v22019038103785759 sshd\[24949\]: Invalid user file from 31.186.49.210 port 42666 Jul 20 22:46:15 v22019038103785759 sshd\[24949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.186.49.210 ...	2020-07-21 08:02:06
211.170.25.71	attackbotsspam	Jul 21 00:30:30 home sshd[20968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.170.25.71 Jul 21 00:30:31 home sshd[20968]: Failed password for invalid user sklep from 211.170.25.71 port 49742 ssh2 Jul 21 00:35:37 home sshd[21448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.170.25.71 ...	2020-07-21 08:21:26
182.76.31.227	attack	Port probing on unauthorized port 445	2020-07-21 07:55:30
45.141.156.25	attackbots	Jul 20 23:00:25 vps339862 sshd\[12670\]: User root from 45.141.156.25 not allowed because not listed in AllowUsers Jul 20 23:00:29 vps339862 sshd\[12672\]: User root from 45.141.156.25 not allowed because not listed in AllowUsers Jul 20 23:01:02 vps339862 sshd\[12690\]: User ftpuser from 45.141.156.25 not allowed because not listed in AllowUsers Jul 20 23:01:19 vps339862 sshd\[12696\]: User root from 45.141.156.25 not allowed because not listed in AllowUsers ...	2020-07-21 08:27:36
1.165.170.9	attackbotsspam	[portscan] Port scan	2020-07-21 08:04:19
69.51.16.248	attackbotsspam	Jul 20 22:30:48 ns382633 sshd\[26794\]: Invalid user elasticsearch from 69.51.16.248 port 45142 Jul 20 22:30:48 ns382633 sshd\[26794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248 Jul 20 22:30:50 ns382633 sshd\[26794\]: Failed password for invalid user elasticsearch from 69.51.16.248 port 45142 ssh2 Jul 20 22:41:31 ns382633 sshd\[28705\]: Invalid user sunjing from 69.51.16.248 port 57092 Jul 20 22:41:31 ns382633 sshd\[28705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248	2020-07-21 07:50:55
95.131.169.238	attackspam	Jul 21 00:19:38 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=95.131.169.238, lip=10.64.89.208, session=\ Jul 21 00:26:25 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 179 secs\): user=\, method=PLAIN, rip=95.131.169.238, lip=10.64.89.208, session=\ Jul 21 00:34:36 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=95.131.169.238, lip=10.64.89.208, session=\ Jul 21 00:41:26 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=95.131.169.238, lip=10.64.89.208, session=\ Jul 21 00:56:26 WHD8 dovecot: pop3-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): us ...	2020-07-21 07:57:09
218.92.0.251	attackbots	Jul 21 02:08:36 server sshd[34255]: Failed none for root from 218.92.0.251 port 8985 ssh2 Jul 21 02:08:38 server sshd[34255]: Failed password for root from 218.92.0.251 port 8985 ssh2 Jul 21 02:08:42 server sshd[34255]: Failed password for root from 218.92.0.251 port 8985 ssh2	2020-07-21 08:09:27
131.108.190.20	attack	131.108.190.20 - - \[20/Jul/2020:13:40:50 -0700\] "POST /index.php/admin/ HTTP/1.1" 404 20411131.108.190.20 - - \[20/Jul/2020:13:40:51 -0700\] "POST /index.php/admin HTTP/1.1" 404 20407131.108.190.20 - - \[20/Jul/2020:13:40:51 -0700\] "POST /index.php/admin/index/ HTTP/1.1" 404 20435 ...	2020-07-21 08:22:27
62.112.11.81	attack	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-07-20T20:13:11Z and 2020-07-20T20:41:16Z	2020-07-21 08:06:17
81.4.109.159	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2020-07-21 08:12:25
82.196.15.195	attackbots	Jul 20 22:32:18 vmd36147 sshd[28130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.15.195 Jul 20 22:32:20 vmd36147 sshd[28130]: Failed password for invalid user administrador from 82.196.15.195 port 55946 ssh2 Jul 20 22:41:20 vmd36147 sshd[17158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.15.195 ...	2020-07-21 07:58:22
84.33.119.102	attackbotsspam	Jul 21 01:38:20 sip sshd[1023233]: Invalid user richard from 84.33.119.102 port 33192 Jul 21 01:38:22 sip sshd[1023233]: Failed password for invalid user richard from 84.33.119.102 port 33192 ssh2 Jul 21 01:42:08 sip sshd[1023258]: Invalid user www from 84.33.119.102 port 48128 ...	2020-07-21 07:53:19
68.183.131.247	attack	Invalid user rrrr from 68.183.131.247 port 59658	2020-07-21 08:19:29

Recently Reported IPs

114.244.210.5	188.43.224.94	188.43.224.230	188.43.224.110
142.91.104.26	162.254.4.104	162.141.45.252	34.13.167.125
223.109.207.98	8.210.161.193	102.212.40.123	106.14.169.168
113.95.144.72	106.6.52.7	35.88.130.56	165.154.226.252
165.154.194.235	52.53.233.14	27.150.250.23	77.83.240.111