1.20.100.45 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: TOT Public Company Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Dovecot Invalid User Login Attempt.	2020-08-24 13:57:00
attackspambots	Dovecot Invalid User Login Attempt.	2020-07-18 01:34:20

Comments on same subnet:

IP	Type	Details	Datetime
1.20.100.111	attackbots	Dovecot Invalid User Login Attempt.	2020-08-28 12:53:10
1.20.100.111	attackspambots	Dovecot Invalid User Login Attempt.	2020-07-24 06:06:29
1.20.100.97	attack	1.20.100.97 - - [08/Apr/2019:08:27:17 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:52.54.17) Gecko/20166441 Firefox/52.54.17"	2019-04-08 08:28:11

Type

Details

Datetime

1.20.100.111

attackbots

Dovecot Invalid User Login Attempt.

2020-08-28 12:53:10

1.20.100.111

attackspambots

Dovecot Invalid User Login Attempt.

2020-07-24 06:06:29

1.20.100.97

attack

1.20.100.97 - - [08/Apr/2019:08:27:17 +0800] "POST https://www.eznewstoday.com/wp-login.php HTTP/1.1" 200 5534 "https://www.eznewstoday.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:52.54.17) Gecko/20166441 Firefox/52.54.17"

2019-04-08 08:28:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.100.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1741
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.20.100.45.			IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071700 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 18 01:34:15 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 45.100.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 45.100.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
73.167.84.250	attack	fail2ban	2020-04-02 14:34:21
71.205.145.203	attackbots	Web Application Attack	2020-04-02 14:54:53
218.92.0.145	attack	$f2bV_matches	2020-04-02 15:04:44
80.82.65.90	attack	Apr 2 08:06:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:06:58 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:07:24 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:08:28 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.65.90, lip=185.118.198.210, session= Apr 2 08:11:00 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=,	2020-04-02 14:42:30
195.154.172.15	attackbotsspam	2× attempts to log on to WP. However, we do not use WP. Last visit 2020-04-02 00:46:32	2020-04-02 14:52:12
51.254.56.23	attackbots	Apr 2 05:57:58 host sshd[17932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip23.ip-51-254-56.eu user=root Apr 2 05:58:00 host sshd[17932]: Failed password for root from 51.254.56.23 port 50744 ssh2 ...	2020-04-02 14:56:08
116.196.104.100	attackbotsspam	Apr 2 07:57:16 vps647732 sshd[23093]: Failed password for root from 116.196.104.100 port 58428 ssh2 ...	2020-04-02 14:50:22
74.199.108.162	attack	Apr 2 08:11:55 ourumov-web sshd\[21415\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.199.108.162 user=root Apr 2 08:11:57 ourumov-web sshd\[21415\]: Failed password for root from 74.199.108.162 port 59508 ssh2 Apr 2 08:15:32 ourumov-web sshd\[21657\]: Invalid user www from 74.199.108.162 port 57938 ...	2020-04-02 14:53:46
109.167.4.67	attackspam	Unauthorised access (Apr 2) SRC=109.167.4.67 LEN=44 TTL=243 ID=42725 DF TCP DPT=8080 WINDOW=14600 SYN	2020-04-02 14:45:51
52.138.12.225	attackbots	SSH bruteforce (Triggered fail2ban)	2020-04-02 14:30:19
124.127.206.4	attackbots	Invalid user liuwanyin from 124.127.206.4 port 50833	2020-04-02 14:37:48
128.199.137.252	attackbots	Invalid user bbs from 128.199.137.252 port 33966	2020-04-02 15:03:36
74.222.8.4	attack	1585799871 - 04/02/2020 05:57:51 Host: 74.222.8.4/74.222.8.4 Port: 445 TCP Blocked	2020-04-02 15:01:48
222.186.175.216	attackspambots	2020-04-02T06:39:13.346243shield sshd\[24213\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root 2020-04-02T06:39:16.117932shield sshd\[24213\]: Failed password for root from 222.186.175.216 port 9698 ssh2 2020-04-02T06:39:19.371381shield sshd\[24213\]: Failed password for root from 222.186.175.216 port 9698 ssh2 2020-04-02T06:39:22.702829shield sshd\[24213\]: Failed password for root from 222.186.175.216 port 9698 ssh2 2020-04-02T06:39:26.438150shield sshd\[24213\]: Failed password for root from 222.186.175.216 port 9698 ssh2	2020-04-02 14:43:57
51.255.51.127	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-04-02 14:38:48

Recently Reported IPs

42.118.50.250	94.233.234.29	204.145.157.204	114.125.246.183
51.178.214.39	103.47.242.198	123.122.160.99	140.86.232.6
140.195.162.3	182.56.106.203	180.124.195.229	148.244.151.42
104.243.41.141	14.249.202.74	193.148.18.38	165.138.36.138
80.251.209.114	180.124.77.148	142.44.252.26	211.179.159.145