20.50.2.27 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
20.50.20.31	attack	Unauthorized connection attempt detected from IP address 20.50.20.31 to port 1433	2020-07-21 14:14:25
20.50.20.31	attack	sshd: Failed password for .... from 20.50.20.31 port 40073 ssh2	2020-07-18 18:22:19
20.50.20.52	attackbots	invalid user	2020-07-18 16:55:11
20.50.20.99	attack	Invalid user admin from 20.50.20.99 port 17278	2020-07-18 07:04:58
20.50.20.31	attack	Jul 16 15:33:55 mout sshd[16566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.20.31 user=root Jul 16 15:33:57 mout sshd[16566]: Failed password for root from 20.50.20.31 port 48031 ssh2	2020-07-16 22:27:19
20.50.20.52	attackspam	2020-07-16 05:00:54.001567-0500 localhost sshd[73289]: Failed password for root from 20.50.20.52 port 14669 ssh2	2020-07-16 18:08:35
20.50.20.99	attackspam	2020-07-16 01:52:09.390813-0500 localhost sshd[60092]: Failed password for root from 20.50.20.99 port 38183 ssh2	2020-07-16 17:00:16
20.50.20.31	attack	Jul 15 21:08:27 fhem-rasp sshd[16144]: Invalid user ec2-user from 20.50.20.31 port 62743 ...	2020-07-16 03:13:37
20.50.20.52	attackspam	Jul 15 21:04:15 vm1 sshd[13430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.20.52 Jul 15 21:04:17 vm1 sshd[13430]: Failed password for invalid user ec2-user from 20.50.20.52 port 54777 ssh2 ...	2020-07-16 03:11:27
20.50.20.99	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-07-16 03:09:41
20.50.20.31	attackspambots	Jul 14 22:26:08 logopedia-1vcpu-1gb-nyc1-01 sshd[86127]: Invalid user admin from 20.50.20.31 port 1466 ...	2020-07-15 10:31:12
20.50.20.31	attack	"Unauthorized connection attempt on SSHD detected"	2020-07-15 04:12:20
20.50.20.52	attack	Jul 13 18:15:26 XXX sshd[937]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[940]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[935]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[936]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[939]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[941]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[938]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[937]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[936]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[935]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[940]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[939]: Received di........ -------------------------------	2020-07-15 03:32:55
20.50.20.52	attackbots	Jul 14 19:28:20 nextcloud sshd\[5152\]: Invalid user administrator from 20.50.20.52 Jul 14 19:28:20 nextcloud sshd\[5152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.20.52 Jul 14 19:28:21 nextcloud sshd\[5152\]: Failed password for invalid user administrator from 20.50.20.52 port 21890 ssh2	2020-07-15 01:53:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.50.2.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5589
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;20.50.2.27.			IN	A

;; AUTHORITY SECTION:
.			105	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 23:22:12 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 27.2.50.20.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 27.2.50.20.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.120.172.196	attackbots	20/9/22@15:04:24: FAIL: Alarm-Network address from=77.120.172.196 ...	2020-09-23 16:59:41
178.218.152.16	attackspambots	(sshd) Failed SSH login from 178.218.152.16 (SE/Sweden/c178-218-152-16.bredband.comhem.se): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 00:13:58 rainbow sshd[287978]: Invalid user admin from 178.218.152.16 port 43238 Sep 23 00:13:58 rainbow sshd[287978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.218.152.16 Sep 23 00:13:58 rainbow sshd[287986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.218.152.16 user=root Sep 23 00:14:00 rainbow sshd[287978]: Failed password for invalid user admin from 178.218.152.16 port 43238 ssh2 Sep 23 00:14:00 rainbow sshd[287986]: Failed password for root from 178.218.152.16 port 43308 ssh2	2020-09-23 17:12:17
112.170.196.160	attackbots	Auto Detect Rule! proto TCP (SYN), 112.170.196.160:55191->gjan.info:1433, len 40	2020-09-23 17:05:08
185.33.34.39	attackspambots	Blocked by Sophos UTM Network Protection . / / proto=17 . srcport=61410 . dstport=55948 . (3059)	2020-09-23 17:13:18
115.55.180.250	attackspam	DATE:2020-09-22 19:01:53, IP:115.55.180.250, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-09-23 17:33:53
67.230.191.105	attackbots	sshd: Failed password for .... from 67.230.191.105 port 43924 ssh2 (5 attempts)	2020-09-23 17:39:45
184.179.216.145	attackspambots	(imapd) Failed IMAP login from 184.179.216.145 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 23 10:25:54 ir1 dovecot[1917636]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=184.179.216.145, lip=5.63.12.44, TLS, session=	2020-09-23 17:33:07
190.24.58.54	attack	Listed on zen-spamhaus also barracudaCentral and abuseat.org / proto=6 . srcport=10348 . dstport=2323 . (3057)	2020-09-23 17:40:50
185.191.171.24	attackspambots	log:/meteo/sultanpur_IN	2020-09-23 17:26:05
120.71.146.217	attackspambots	SSH Bruteforce attack	2020-09-23 17:08:45
36.24.148.243	attack	Sep 23 07:29:57 sshgateway sshd\[14241\]: Invalid user es from 36.24.148.243 Sep 23 07:29:57 sshgateway sshd\[14241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.24.148.243 Sep 23 07:29:59 sshgateway sshd\[14241\]: Failed password for invalid user es from 36.24.148.243 port 43642 ssh2	2020-09-23 17:42:41
5.188.84.115	attack	0,28-01/02 [bc01/m13] PostRequest-Spammer scoring: essen	2020-09-23 17:31:17
222.186.173.154	attackspambots	Sep 23 11:06:30 mail sshd[4884]: Failed password for root from 222.186.173.154 port 4008 ssh2	2020-09-23 17:07:07
128.14.227.177	attackspambots	Sep 22 22:28:38 r.ca sshd[17135]: Failed password for root from 128.14.227.177 port 59286 ssh2	2020-09-23 17:33:38
5.182.211.56	attack	(sshd) Failed SSH login from 5.182.211.56 (NL/Netherlands/North Holland/Amsterdam (Westpoort)/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 04:03:25 atlas sshd[29336]: Invalid user marco from 5.182.211.56 port 35460 Sep 23 04:03:26 atlas sshd[29336]: Failed password for invalid user marco from 5.182.211.56 port 35460 ssh2 Sep 23 04:12:18 atlas sshd[31603]: Invalid user git from 5.182.211.56 port 34262 Sep 23 04:12:20 atlas sshd[31603]: Failed password for invalid user git from 5.182.211.56 port 34262 ssh2 Sep 23 04:17:42 atlas sshd[349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.182.211.56 user=root	2020-09-23 17:21:16

Recently Reported IPs

20.50.2.51	20.50.2.35	20.50.2.36	20.50.2.29
20.50.2.26	20.50.2.52	20.50.2.32	20.50.2.6
204.205.132.175	20.50.2.60	20.50.2.40	20.50.2.74
20.50.2.65	20.50.21.45	20.50.249.170	20.50.251.36
20.50.2.75	20.50.232.183	20.50.25.26	20.50.2.72