20.50.2.47 - IPInfo

Basic Info

City: Amsterdam

Region: North Holland

Country: Netherlands

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
20.50.20.31	attack	Unauthorized connection attempt detected from IP address 20.50.20.31 to port 1433	2020-07-21 14:14:25
20.50.20.31	attack	sshd: Failed password for .... from 20.50.20.31 port 40073 ssh2	2020-07-18 18:22:19
20.50.20.52	attackbots	invalid user	2020-07-18 16:55:11
20.50.20.99	attack	Invalid user admin from 20.50.20.99 port 17278	2020-07-18 07:04:58
20.50.20.31	attack	Jul 16 15:33:55 mout sshd[16566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.20.31 user=root Jul 16 15:33:57 mout sshd[16566]: Failed password for root from 20.50.20.31 port 48031 ssh2	2020-07-16 22:27:19
20.50.20.52	attackspam	2020-07-16 05:00:54.001567-0500 localhost sshd[73289]: Failed password for root from 20.50.20.52 port 14669 ssh2	2020-07-16 18:08:35
20.50.20.99	attackspam	2020-07-16 01:52:09.390813-0500 localhost sshd[60092]: Failed password for root from 20.50.20.99 port 38183 ssh2	2020-07-16 17:00:16
20.50.20.31	attack	Jul 15 21:08:27 fhem-rasp sshd[16144]: Invalid user ec2-user from 20.50.20.31 port 62743 ...	2020-07-16 03:13:37
20.50.20.52	attackspam	Jul 15 21:04:15 vm1 sshd[13430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.20.52 Jul 15 21:04:17 vm1 sshd[13430]: Failed password for invalid user ec2-user from 20.50.20.52 port 54777 ssh2 ...	2020-07-16 03:11:27
20.50.20.99	attackspam	"Unauthorized connection attempt on SSHD detected"	2020-07-16 03:09:41
20.50.20.31	attackspambots	Jul 14 22:26:08 logopedia-1vcpu-1gb-nyc1-01 sshd[86127]: Invalid user admin from 20.50.20.31 port 1466 ...	2020-07-15 10:31:12
20.50.20.31	attack	"Unauthorized connection attempt on SSHD detected"	2020-07-15 04:12:20
20.50.20.52	attack	Jul 13 18:15:26 XXX sshd[937]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[940]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[935]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[936]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[939]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[941]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[938]: Invalid user testuser from 20.50.20.52 Jul 13 18:15:26 XXX sshd[937]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[936]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[935]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[940]: Received disconnect from 20.50.20.52: 11: Client disconnecting normally [preauth] Jul 13 18:15:26 XXX sshd[939]: Received di........ -------------------------------	2020-07-15 03:32:55
20.50.20.52	attackbots	Jul 14 19:28:20 nextcloud sshd\[5152\]: Invalid user administrator from 20.50.20.52 Jul 14 19:28:20 nextcloud sshd\[5152\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.50.20.52 Jul 14 19:28:21 nextcloud sshd\[5152\]: Failed password for invalid user administrator from 20.50.20.52 port 21890 ssh2	2020-07-15 01:53:38

Whois info:

Dig info:

b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 20.50.2.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35313
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;20.50.2.47.			IN	A

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Jun 26 18:12:32 CST 2021
;; MSG SIZE  rcvd: 39

'

Host info

Host 47.2.50.20.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 47.2.50.20.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.38.144.146	attack	2019-11-11T19:38:02.147018mail01 postfix/smtpd[14553]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T19:38:04.148665mail01 postfix/smtpd[15517]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-11-11T19:38:13.451274mail01 postfix/smtpd[14553]: warning: unknown[46.38.144.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-11-12 02:41:24
200.61.163.27	attack	2019-11-11T17:17:56.966622shield sshd\[29694\]: Invalid user plp from 200.61.163.27 port 36326 2019-11-11T17:17:56.971845shield sshd\[29694\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.61.163.27 2019-11-11T17:17:59.050600shield sshd\[29694\]: Failed password for invalid user plp from 200.61.163.27 port 36326 ssh2 2019-11-11T17:18:00.359245shield sshd\[29696\]: Invalid user plp from 200.61.163.27 port 37488 2019-11-11T17:18:00.364727shield sshd\[29696\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.61.163.27	2019-11-12 03:07:29
106.54.197.233	attackbotsspam	Lines containing failures of 106.54.197.233 Nov 11 18:58:59 shared03 sshd[28224]: Invalid user hadoop from 106.54.197.233 port 57444 Nov 11 18:58:59 shared03 sshd[28224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.197.233 Nov 11 18:59:02 shared03 sshd[28224]: Failed password for invalid user hadoop from 106.54.197.233 port 57444 ssh2 Nov 11 18:59:02 shared03 sshd[28224]: Received disconnect from 106.54.197.233 port 57444:11: Normal Shutdown, Thank you for playing [preauth] Nov 11 18:59:02 shared03 sshd[28224]: Disconnected from invalid user hadoop 106.54.197.233 port 57444 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.54.197.233	2019-11-12 02:50:40
212.96.34.2	attackspambots	2019-11-11T18:30:57.668032abusebot-2.cloudsearch.cf sshd\[23646\]: Invalid user admin from 212.96.34.2 port 45738	2019-11-12 02:31:26
78.120.13.174	attack	Fail2Ban Ban Triggered	2019-11-12 02:49:49
116.196.82.63	attack	Invalid user test from 116.196.82.63 port 54936	2019-11-12 02:40:51
59.10.5.156	attack	Nov 11 19:33:45 vps666546 sshd\[30687\]: Invalid user spark from 59.10.5.156 port 54296 Nov 11 19:33:45 vps666546 sshd\[30687\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156 Nov 11 19:33:47 vps666546 sshd\[30687\]: Failed password for invalid user spark from 59.10.5.156 port 54296 ssh2 Nov 11 19:37:59 vps666546 sshd\[30851\]: Invalid user cg from 59.10.5.156 port 51356 Nov 11 19:37:59 vps666546 sshd\[30851\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156 ...	2019-11-12 02:48:33
206.128.156.180	attackbots	$f2bV_matches_ltvn	2019-11-12 03:08:59
185.143.223.38	attackspam	2019-11-11T19:17:00.629882+01:00 lumpi kernel: [3318598.496305] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.38 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=19700 PROTO=TCP SPT=42085 DPT=33572 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-12 02:53:26
167.71.13.11	attack	167.71.13.11 - - \[11/Nov/2019:14:40:41 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 167.71.13.11 - - \[11/Nov/2019:14:40:43 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" ...	2019-11-12 03:01:10
106.12.16.140	attackspambots	2019-11-11T19:15:16.640977 sshd[9331]: Invalid user vcsa from 106.12.16.140 port 51942 2019-11-11T19:15:16.654759 sshd[9331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.16.140 2019-11-11T19:15:16.640977 sshd[9331]: Invalid user vcsa from 106.12.16.140 port 51942 2019-11-11T19:15:18.984668 sshd[9331]: Failed password for invalid user vcsa from 106.12.16.140 port 51942 ssh2 2019-11-11T19:24:15.331524 sshd[9448]: Invalid user engine from 106.12.16.140 port 58758 ...	2019-11-12 02:49:07
103.229.125.168	attackspam	Automatic report - XMLRPC Attack	2019-11-12 02:37:16
218.92.0.133	attack	$f2bV_matches	2019-11-12 02:47:07
187.177.143.108	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-12 03:04:01
62.167.15.204	attack	Nov1115:07:49server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=62.167.15.204\,lip=81.17.25.230\,session=\Nov1115:07:49server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=62.167.15.204\,lip=81.17.25.230\,session=\Nov1115:40:41server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin2secs$:user=\\,method=PLAIN\,rip=62.167.15.204\,lip=81.17.25.230\,session=\Nov1115:40:47server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=62.167.15.204\,lip=81.17.25.230\,session=\<082pHROXns0 pw/M\>Nov1115:40:47server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=62.167.15.204\,lip=81.17.25.230\,session=\Nov1115:40:56server2dovecot:imap-login:Abortedlogin$authfailed\,1attemptsin6secs$:user=\	2019-11-12 02:46:49

Recently Reported IPs

116.108.73.189	87.128.239.254	84.116.190.134	192.130.36.14
185.254.203.83	11.90.150.75	108.61.196.101	190.17.120.242
160.92.209.181	181.164.142.12	165.22.105.101	103.239.204.218
45.201.177.187	177.101.188.218	138.97.116.186	186.212.68.15
103.147.77.1	129.226.124.91	192.46.227.226	34.214.217.236