IP address

Search at other sites:
.024194.50.16.36
Shodan(more info)
Passive DNS
Tags:
IP blacklists
UCEPROTECT L1
194.50.16.36 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-08-31 23:45:00.522000
Was present on blacklist at: 2026-08-25 07:45, 2026-08-25 15:45, 2026-08-25 23:45, 2026-08-26 07:45, 2026-08-26 15:45, 2026-08-26 23:45, 2026-08-27 07:45, 2026-08-27 15:45, 2026-08-27 23:45, 2026-08-28 07:45, 2026-08-28 15:45, 2026-08-28 23:45, 2026-08-29 07:45, 2026-08-29 15:45, 2026-08-29 23:45, 2026-08-30 07:45, 2026-08-30 23:45, 2026-08-31 07:45, 2026-08-31 15:45, 2026-08-31 23:45
Echelon SSH connection attempt
194.50.16.36 is listed on the Echelon SSH connection attempt blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SSH connection attempt detected on port 22 or 2222
Type of feed: primary (feed detail page)

Last checked at: 2026-08-31 09:35:00.564000
Was present on blacklist at: 2026-08-25 09:35, 2026-08-26 09:35, 2026-08-27 09:35, 2026-08-28 09:35, 2026-08-29 09:35, 2026-08-30 09:35, 2026-08-31 09:35

Threat categories

TLRoleCategoryDetails
25 src login protocol: telnet
Warden events (36)
2026-08-27
ReconScanning (node.9c1411): 10
2026-08-24
ReconScanning (node.4dc198): 23
ReconScanning (node.368407): 3
DShield reports (IP summary, reports)
2026-08-24
Number of reports: 216
Distinct targets: 125
2026-08-25
Number of reports: 216
Distinct targets: 125
OTX pulses
[6a98197c398224f619815cb6] 2026-09-02 12:41:32.357000 | Telnet honeypot logs for 2026-09-02
Author name:jnazario
Pulse modified:2026-09-02 12:41:32.357000
Indicator created:2026-09-02 12:41:33
Indicator role:None
Indicator title:
Indicator expiration:2026-10-02 12:00:00
[6a96c589f563265505c6a656] 2026-09-01 12:31:05.707000 | Telnet honeypot logs for 2026-09-01
Author name:jnazario
Pulse modified:2026-09-01 12:31:05.707000
Indicator created:2026-09-01 12:31:06
Indicator role:None
Indicator title:
Indicator expiration:2026-10-01 12:00:00
[6a95722731f630a2304d46dd] 2026-08-31 12:23:03.825000 | Telnet honeypot logs for 2026-08-31
Author name:jnazario
Pulse modified:2026-08-31 12:23:03.825000
Indicator created:2026-08-31 12:23:04
Indicator role:None
Indicator title:
Indicator expiration:2026-09-30 12:00:00
[6a9ab7d774a3486619e70f2e] 2026-09-04 12:21:43.650000 | Telnet honeypot logs for 2026-09-04
Author name:jnazario
Pulse modified:2026-09-04 12:21:43.650000
Indicator created:2026-09-04 12:21:45
Indicator role:None
Indicator title:
Indicator expiration:2026-10-04 12:00:00
[6a996861bec294c2a5ca7ade] 2026-09-03 12:30:25.839000 | Telnet honeypot logs for 2026-09-03
Author name:jnazario
Pulse modified:2026-09-03 12:30:25.839000
Indicator created:2026-09-03 12:30:26
Indicator role:None
Indicator title:
Indicator expiration:2026-10-03 12:00:00
[6aa1514dae5b1c542b4826dc] 2026-09-09 12:30:05.268000 | Telnet honeypot logs for 2026-09-09
Author name:jnazario
Pulse modified:2026-09-09 12:30:05.268000
Indicator created:2026-09-09 12:30:06
Indicator role:None
Indicator title:
Indicator expiration:2026-10-09 12:00:00
Origin AS
AS49870 - AS49870-BV
BGP Prefix
194.50.16.0/24
geo
Netherlands, Amsterdam
🕑 Europe/Amsterdam
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
194.50.16.0 - 194.50.19.255
last_activity
2026-09-15 05:42:45.255000
last_warden_event
2026-08-27 14:10:29
rep
0.023662800257697736
reserved_range
0
Shodan's InternetDB
Open ports: 22, 111
Tags: –
CPEs: cpe:/a:openbsd:openssh:7.4
ts_added
2026-08-24 21:18:27.877000
ts_last_update
2026-09-19 21:18:30.324000

Warden event timeline

DShield event timeline

Presence on blacklists

OTX pulses