94.50.16.157 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OJSC Rostelecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2019-01-19 12:37:48 H=\(\[94.50.16.157\]\) \[94.50.16.157\]:28884 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-19 12:38:04 H=\(\[94.50.16.157\]\) \[94.50.16.157\]:28997 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-01-19 12:38:18 H=\(\[94.50.16.157\]\) \[94.50.16.157\]:29098 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2019-10-24 20:56:54

Type

Details

Datetime

attack

2019-01-19 12:37:48 H=\(\[94.50.16.157\]\) \[94.50.16.157\]:28884 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-01-19 12:38:04 H=\(\[94.50.16.157\]\) \[94.50.16.157\]:28997 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-01-19 12:38:18 H=\(\[94.50.16.157\]\) \[94.50.16.157\]:29098 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2019-10-24 20:56:54

Comments on same subnet:

IP	Type	Details	Datetime
94.50.163.5	attackspam	Invalid user dandan from 94.50.163.5 port 40834	2020-08-17 00:40:20
94.50.163.5	attackbotsspam	ssh brute force	2020-07-20 15:40:50
94.50.163.5	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-07-18 17:24:03
94.50.163.5	attack	SSH Brute-Force reported by Fail2Ban	2020-07-14 16:20:22
94.50.162.66	attack	$f2bV_matches	2020-07-03 20:15:02
94.50.162.191	attackspambots	RU_MFIST-MNT_<177>1592206445 [1:2403488:57977] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 95 [Classification: Misc Attack] [Priority: 2]: {TCP} 94.50.162.191:50071	2020-06-15 17:55:14
94.50.161.1	attack	Unauthorized connection attempt from IP address 94.50.161.1 on Port 445(SMB)	2020-05-20 19:09:02
94.50.161.3	attack	Unauthorized connection attempt from IP address 94.50.161.3 on Port 445(SMB)	2020-03-23 00:12:49
94.50.162.136	attack	Mar 11 18:20:15 mout sshd[25483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.50.162.136 user=root Mar 11 18:20:17 mout sshd[25483]: Failed password for root from 94.50.162.136 port 38835 ssh2	2020-03-12 03:01:11
94.50.162.191	attackbotsspam	Icarus honeypot on github	2020-02-29 03:00:10
94.50.162.191	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-18 06:30:42
94.50.161.1	attack	Unauthorized connection attempt from IP address 94.50.161.1 on Port 445(SMB)	2019-12-16 16:59:15
94.50.161.3	attack	Unauthorized connection attempt from IP address 94.50.161.3 on Port 445(SMB)	2019-11-24 07:09:30
94.50.161.24	attack	SSH Brute Force, server-1 sshd[30265]: Failed password for root from 94.50.161.24 port 53936 ssh2	2019-09-27 02:30:10
94.50.161.24	attackbots	Sep 22 02:52:06 h2177944 sshd\[24295\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.50.161.24 Sep 22 02:52:09 h2177944 sshd\[24295\]: Failed password for invalid user oracle from 94.50.161.24 port 54876 ssh2 Sep 22 03:53:08 h2177944 sshd\[26759\]: Invalid user ubnt from 94.50.161.24 port 48026 Sep 22 03:53:08 h2177944 sshd\[26759\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.50.161.24 ...	2019-09-22 09:55:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.50.16.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48898
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.50.16.157.			IN	A

;; AUTHORITY SECTION:
.			386	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102400 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 24 20:56:49 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 157.16.50.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 157.16.50.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.67.38.194	attack	2019-09-08 23:36:35 H=(luxexcess.it) [177.67.38.194]:33709 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-08 23:36:36 H=(luxexcess.it) [177.67.38.194]:33709 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/177.67.38.194) 2019-09-08 23:36:37 H=(luxexcess.it) [177.67.38.194]:33709 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/177.67.38.194) ...	2019-09-09 16:51:27
183.129.160.229	attack	" "	2019-09-09 16:29:02
142.93.47.74	attackspam	Sep 8 20:04:16 hiderm sshd\[16375\]: Invalid user postgres from 142.93.47.74 Sep 8 20:04:16 hiderm sshd\[16375\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.74 Sep 8 20:04:19 hiderm sshd\[16375\]: Failed password for invalid user postgres from 142.93.47.74 port 40924 ssh2 Sep 8 20:11:21 hiderm sshd\[17204\]: Invalid user minecraft from 142.93.47.74 Sep 8 20:11:21 hiderm sshd\[17204\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.47.74	2019-09-09 17:04:33
51.254.37.192	attackbots	Sep 9 00:08:58 home sshd[26525]: Invalid user steam from 51.254.37.192 port 59544 Sep 9 00:08:58 home sshd[26525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 Sep 9 00:08:58 home sshd[26525]: Invalid user steam from 51.254.37.192 port 59544 Sep 9 00:09:00 home sshd[26525]: Failed password for invalid user steam from 51.254.37.192 port 59544 ssh2 Sep 9 00:23:18 home sshd[26591]: Invalid user uftp from 51.254.37.192 port 50728 Sep 9 00:23:18 home sshd[26591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 Sep 9 00:23:18 home sshd[26591]: Invalid user uftp from 51.254.37.192 port 50728 Sep 9 00:23:20 home sshd[26591]: Failed password for invalid user uftp from 51.254.37.192 port 50728 ssh2 Sep 9 00:28:39 home sshd[26630]: Invalid user demo from 51.254.37.192 port 57026 Sep 9 00:28:39 home sshd[26630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.	2019-09-09 16:26:21
54.36.150.161	attack	Automatic report - Banned IP Access	2019-09-09 16:36:43
78.187.195.16	attackspambots	Sep 9 04:36:42 system,error,critical: login failure for user admin from 78.187.195.16 via telnet Sep 9 04:36:44 system,error,critical: login failure for user admin from 78.187.195.16 via telnet Sep 9 04:36:46 system,error,critical: login failure for user root from 78.187.195.16 via telnet Sep 9 04:36:49 system,error,critical: login failure for user root from 78.187.195.16 via telnet Sep 9 04:36:51 system,error,critical: login failure for user admin from 78.187.195.16 via telnet Sep 9 04:36:52 system,error,critical: login failure for user admin from 78.187.195.16 via telnet Sep 9 04:36:56 system,error,critical: login failure for user root from 78.187.195.16 via telnet Sep 9 04:36:58 system,error,critical: login failure for user root from 78.187.195.16 via telnet Sep 9 04:36:59 system,error,critical: login failure for user admin from 78.187.195.16 via telnet Sep 9 04:37:03 system,error,critical: login failure for user guest from 78.187.195.16 via telnet	2019-09-09 16:34:35
41.196.0.189	attackbots	Sep 9 10:29:37 vps01 sshd[28534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.0.189 Sep 9 10:29:39 vps01 sshd[28534]: Failed password for invalid user ftpuser from 41.196.0.189 port 60190 ssh2	2019-09-09 16:43:20
144.217.4.14	attack	Sep 9 09:56:29 XXX sshd[39800]: Invalid user ofsaa from 144.217.4.14 port 35922	2019-09-09 16:20:33
120.220.22.5	attackspam	2019-09-09T05:23:03.224914abusebot-6.cloudsearch.cf sshd\[4057\]: Invalid user user from 120.220.22.5 port 5388	2019-09-09 16:23:17
203.232.210.195	attackspambots	Sep 9 10:52:49 vps647732 sshd[14673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.232.210.195 Sep 9 10:52:51 vps647732 sshd[14673]: Failed password for invalid user minecraft! from 203.232.210.195 port 53396 ssh2 ...	2019-09-09 16:59:18
103.137.87.86	attack	Sep 9 04:22:16 TORMINT sshd\[23416\]: Invalid user sysadmin from 103.137.87.86 Sep 9 04:22:16 TORMINT sshd\[23416\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.137.87.86 Sep 9 04:22:18 TORMINT sshd\[23416\]: Failed password for invalid user sysadmin from 103.137.87.86 port 50020 ssh2 ...	2019-09-09 16:28:36
206.189.212.81	attack	Sep 9 06:49:25 MK-Soft-VM5 sshd\[10821\]: Invalid user weblogic from 206.189.212.81 port 55358 Sep 9 06:49:25 MK-Soft-VM5 sshd\[10821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.212.81 Sep 9 06:49:27 MK-Soft-VM5 sshd\[10821\]: Failed password for invalid user weblogic from 206.189.212.81 port 55358 ssh2 ...	2019-09-09 16:29:49
42.51.156.6	attackbotsspam	Sep 9 07:37:14 hosting sshd[576]: Invalid user 1234 from 42.51.156.6 port 60784 ...	2019-09-09 16:26:50
218.92.0.191	attack	09.09.2019 05:26:54 SSH access blocked by firewall	2019-09-09 16:53:55
167.71.215.111	attackspam	Sep 9 09:41:09 server6 sshd[25279]: Failed password for invalid user tom from 167.71.215.111 port 55032 ssh2 Sep 9 09:41:09 server6 sshd[25279]: Received disconnect from 167.71.215.111: 11: Bye Bye [preauth] Sep 9 09:49:32 server6 sshd[988]: Failed password for invalid user devel from 167.71.215.111 port 56976 ssh2 Sep 9 09:49:33 server6 sshd[988]: Received disconnect from 167.71.215.111: 11: Bye Bye [preauth] Sep 9 09:55:49 server6 sshd[7371]: Failed password for invalid user sysadmin from 167.71.215.111 port 35942 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=167.71.215.111	2019-09-09 16:29:32

Recently Reported IPs

145.249.105.204	123.16.252.231	121.227.152.235	106.124.141.108
14.87.1.96	87.131.188.119	114.167.149.9	193.34.233.124
3.122.62.14	94.39.81.216	91.182.105.57	80.211.56.173
27.213.23.161	27.79.202.3	218.47.201.110	93.176.16.27
140.70.91.145	179.68.249.53	45.35.141.118	248.190.158.169