194.50.154.87 - IPInfo

Basic Info

City: Tokyo

Region: Tokyo

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '194.50.154.0 - 194.50.154.255'

% Abuse contact for '194.50.154.0 - 194.50.154.255' is 'abuse@xtom.co.jp'

inetnum:        194.50.154.0 - 194.50.154.255
netname:        JP-XTOM-20211223
country:        JP
org:            ORG-XJCL1-RIPE
admin-c:        XJN1-RIPE
tech-c:         XJN1-RIPE
status:         ALLOCATED PA
mnt-by:         xtom
mnt-by:         RIPE-NCC-HM-MNT
created:        2023-12-28T10:44:20Z
last-modified:  2024-01-10T12:21:20Z
source:         RIPE

organisation:   ORG-XJCL1-RIPE
org-name:       xTom Japan Corporation
country:        JP
reg-nr:         4013301051632
org-type:       LIR
address:        Sumitomo Fudosan Hibiya Building 1F
                2-8-6 Nishi-Shinbashi
address:        105-0003
address:        Minato City, Tokyo
address:        JAPAN
phone:          +81362067194
admin-c:        XJN1-RIPE
tech-c:         XJN1-RIPE
abuse-c:        XJN1-RIPE
mnt-ref:        xtom
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         xtom
created:        2023-12-07T14:30:52Z
last-modified:  2026-05-13T07:09:34Z
source:         RIPE # Filtered

role:           xTom Japan NOC
address:        Sumitomo Fudosan Hibiya Building 1F
address:        2-8-6 Nishi-Shinbashi
address:        105-0003
address:        Minato City, Tokyo
address:        JAPAN
phone:          +81362067194
nic-hdl:        XJN1-RIPE
abuse-mailbox:  abuse@xtom.co.jp
mnt-by:         xtom
created:        2024-01-10T12:19:29Z
last-modified:  2025-03-31T15:06:22Z
source:         RIPE # Filtered

% Information related to '194.50.154.0/24AS3258'

route:          194.50.154.0/24
origin:         AS3258
mnt-by:         xtom
created:        2023-09-26T11:21:51Z
last-modified:  2024-01-03T11:09:37Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.122.1 (ABERDEEN)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.50.154.87
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12844
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;194.50.154.87.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026062600 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 26 16:30:20 CST 2026
;; MSG SIZE  rcvd: 106

Host info

Host 87.154.50.194.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 87.154.50.194.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.69.198.250	attack	118.69.198.250 - - \[31/Aug/2020:11:46:29 +0800\] "GET /wordpress/wp-admin/ HTTP/2.0" 404 36454 "http://blog.hamibook.com.tw/" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/78.0.3904.97 Safari/537.36"	2020-08-31 20:11:54
117.6.215.134	attackspambots	Unauthorized connection attempt from IP address 117.6.215.134 on Port 445(SMB)	2020-08-31 20:19:49
118.70.175.61	attack	Telnet Honeypot -> Telnet Bruteforce / Login	2020-08-31 20:47:50
117.3.136.162	attackspam	1598846459 - 08/31/2020 06:00:59 Host: 117.3.136.162/117.3.136.162 Port: 445 TCP Blocked	2020-08-31 20:21:42
122.51.67.249	attack	Aug 31 13:46:41 localhost sshd[1134217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.67.249 user=root Aug 31 13:46:43 localhost sshd[1134217]: Failed password for root from 122.51.67.249 port 47752 ssh2 ...	2020-08-31 20:02:23
149.56.15.98	attackspambots	Aug 31 12:34:01 game-panel sshd[25983]: Failed password for root from 149.56.15.98 port 51368 ssh2 Aug 31 12:37:06 game-panel sshd[26166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.15.98 Aug 31 12:37:08 game-panel sshd[26166]: Failed password for invalid user admin from 149.56.15.98 port 50042 ssh2	2020-08-31 20:53:26
188.166.6.130	attackspam	Aug 31 02:38:05 web1 sshd\[13581\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.6.130 user=root Aug 31 02:38:07 web1 sshd\[13581\]: Failed password for root from 188.166.6.130 port 48854 ssh2 Aug 31 02:41:42 web1 sshd\[13907\]: Invalid user cxr from 188.166.6.130 Aug 31 02:41:42 web1 sshd\[13907\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.6.130 Aug 31 02:41:44 web1 sshd\[13907\]: Failed password for invalid user cxr from 188.166.6.130 port 55120 ssh2	2020-08-31 20:45:47
195.84.49.20	attackspam	Invalid user carol from 195.84.49.20 port 55758	2020-08-31 20:05:07
125.21.227.181	attackbots	2020-08-31T11:25:19.898465vps773228.ovh.net sshd[28775]: Invalid user test from 125.21.227.181 port 40866 2020-08-31T11:25:22.006237vps773228.ovh.net sshd[28775]: Failed password for invalid user test from 125.21.227.181 port 40866 ssh2 2020-08-31T11:31:16.745942vps773228.ovh.net sshd[28801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.21.227.181 user=root 2020-08-31T11:31:18.846692vps773228.ovh.net sshd[28801]: Failed password for root from 125.21.227.181 port 46656 ssh2 2020-08-31T11:36:41.580644vps773228.ovh.net sshd[28823]: Invalid user backup from 125.21.227.181 port 52470 ...	2020-08-31 20:13:11
158.181.206.237	attackspam	Attempted connection to port 445.	2020-08-31 20:33:27
202.102.144.114	attack	srvr2: (mod_security) mod_security (id:920350) triggered by 202.102.144.114 (CN/-/ppp51.dyptt.sd.cn): 1 in the last 600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/31 14:37:17 [error] 315421#0: 329363 [client 202.102.144.114] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "159887743722.658890"] [ref "o0,12v21,12"], client: 202.102.144.114, [redacted] request: "GET / HTTP/1.1" [redacted]	2020-08-31 20:46:41
5.62.20.47	attackbots	Sunday, August 30, 2020 11:43 PM Received from: 5.62.20.47 From: Ramon Omar Muslim email spam solicitation form spam bot	2020-08-31 20:13:29
14.178.37.138	attackbotsspam	Attempted connection to port 445.	2020-08-31 20:36:33
165.232.32.196	attack	[Mon Aug 31 14:37:12.253538 2020] [core:info] [pid 14469] [client 165.232.32.196:58922] AH00128: File does not exist: /var/www/na/system_api.php ...	2020-08-31 20:53:04
129.204.63.100	attackbotsspam	Invalid user gmodserver from 129.204.63.100 port 50444	2020-08-31 20:20:16

Recently Reported IPs

98.98.92.208	139.135.45.87	119.125.101.44	129.226.83.92
103.100.6.135	120.232.251.21	121.134.176.112	36.137.149.166
123.129.114.187	184.32.43.184	34.96.52.74	34.34.253.64
107.172.163.112	2606:4700:10::6816:4070	2606:4700:10::6814:5525	2606:4700:10::6814:5929
2606:4700:10::6816:1090	120.196.255.61	221.239.90.68	2606:4700:10::6814:4753