1.20.101.254 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.101.221	attack	DATE:2020-03-29 05:55:44, IP:1.20.101.221, PORT:5900 VNC brute force auth on honeypot server (epe-honey1-hq)	2020-03-29 12:19:40
1.20.101.194	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-03-12 23:16:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.101.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.101.254.			IN	A

;; AUTHORITY SECTION:
.			286	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 19:42:14 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 254.101.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 254.101.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.50.110.19	attackspambots	2020-08-13T10:38:59.582262ks3355764 sshd[27959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.110.19 user=root 2020-08-13T10:39:01.487819ks3355764 sshd[27959]: Failed password for root from 117.50.110.19 port 41754 ssh2 ...	2020-08-13 18:32:30
180.244.122.143	attackspam	1597290488 - 08/13/2020 05:48:08 Host: 180.244.122.143/180.244.122.143 Port: 445 TCP Blocked	2020-08-13 18:44:25
89.248.174.166	attackspambots	89.248.174.166 - - \[13/Aug/2020:06:04:11 +0200\] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 zgrab/0.x" ...	2020-08-13 18:34:37
51.38.50.99	attackspambots	Aug 13 11:52:12 vpn01 sshd[23130]: Failed password for root from 51.38.50.99 port 40600 ssh2 ...	2020-08-13 18:38:29
118.24.119.49	attack	Aug 13 05:53:47 ns382633 sshd\[26199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.119.49 user=root Aug 13 05:53:48 ns382633 sshd\[26199\]: Failed password for root from 118.24.119.49 port 57924 ssh2 Aug 13 05:59:59 ns382633 sshd\[27228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.119.49 user=root Aug 13 06:00:01 ns382633 sshd\[27228\]: Failed password for root from 118.24.119.49 port 33266 ssh2 Aug 13 06:03:18 ns382633 sshd\[28045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.119.49 user=root	2020-08-13 18:51:19
14.98.213.14	attack	Aug 13 06:30:39 scw-tender-jepsen sshd[2458]: Failed password for root from 14.98.213.14 port 34886 ssh2	2020-08-13 18:33:44
45.136.7.165	attackbotsspam	2020-08-12 22:44:03.313664-0500 localhost smtpd[19658]: NOQUEUE: reject: RCPT from unknown[45.136.7.165]: 554 5.7.1 Service unavailable; Client host [45.136.7.165] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-08-13 18:24:29
161.117.14.183	attackbotsspam	Wordpress attack	2020-08-13 18:53:35
182.61.18.154	attack	Aug 13 05:44:12 vpn01 sshd[16639]: Failed password for root from 182.61.18.154 port 59246 ssh2 ...	2020-08-13 18:25:33
212.47.229.4	attack	Aug 13 10:45:44 roki sshd[26631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.229.4 user=root Aug 13 10:45:46 roki sshd[26631]: Failed password for root from 212.47.229.4 port 57442 ssh2 Aug 13 10:45:48 roki sshd[26631]: Failed password for root from 212.47.229.4 port 57442 ssh2 Aug 13 10:45:50 roki sshd[26631]: Failed password for root from 212.47.229.4 port 57442 ssh2 Aug 13 10:45:51 roki sshd[26631]: Failed password for root from 212.47.229.4 port 57442 ssh2 ...	2020-08-13 18:33:17
2.61.187.69	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-13 18:35:19
106.52.197.21	attackspam	Aug 13 12:22:00 abendstille sshd\[12257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.197.21 user=root Aug 13 12:22:02 abendstille sshd\[12257\]: Failed password for root from 106.52.197.21 port 40272 ssh2 Aug 13 12:24:58 abendstille sshd\[15246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.197.21 user=root Aug 13 12:25:00 abendstille sshd\[15246\]: Failed password for root from 106.52.197.21 port 43380 ssh2 Aug 13 12:28:01 abendstille sshd\[18109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.197.21 user=root ...	2020-08-13 18:42:08
31.146.179.190	attackspambots	20/8/13@02:22:49: FAIL: Alarm-Network address from=31.146.179.190 20/8/13@02:22:49: FAIL: Alarm-Network address from=31.146.179.190 ...	2020-08-13 18:51:52
149.202.55.18	attackbotsspam	Aug 13 11:18:44 rocket sshd[8347]: Failed password for root from 149.202.55.18 port 46058 ssh2 Aug 13 11:22:43 rocket sshd[8925]: Failed password for root from 149.202.55.18 port 58592 ssh2 ...	2020-08-13 18:30:52
103.126.244.26	attack	(eximsyntax) Exim syntax errors from 103.126.244.26 (NP/Nepal/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-13 08:18:26 SMTP call from [103.126.244.26] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?")	2020-08-13 18:31:57

Recently Reported IPs

1.20.101.253	1.20.101.37	1.20.101.39	1.20.101.4
1.20.101.42	59.171.42.231	1.20.101.44	1.20.101.46
1.20.101.48	1.20.101.53	1.20.101.56	1.20.101.6
1.20.101.61	1.20.101.62	1.20.101.64	1.20.101.69
1.20.101.70	1.20.101.72	1.20.101.76	1.20.101.78