1.20.140.2 - IPInfo

Basic Info

City: Bangkok

Region: Bangkok

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.140.195	attackspambots	[WedOct0921:41:19.4279182019][:error][pid1997:tid139811901921024][client1.20.140.195:7005][client1.20.140.195]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"mgevents.ch"][uri"/wp-content/plugins/easyrotator-for-wordpress/c.php"][unique_id"XZ433jkoBW7GHRmK7itZ8AAAAAc"][WedOct0921:41:22.9081962019][:error][pid16943:tid139811891431168][client1.20.140.195:7013][client1.20.140.195]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomico	2019-10-10 07:27:04

Type

Details

Datetime

1.20.140.195

attackspambots

[WedOct0921:41:19.4279182019][:error][pid1997:tid139811901921024][client1.20.140.195:7005][client1.20.140.195]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"mgevents.ch"][uri"/wp-content/plugins/easyrotator-for-wordpress/c.php"][unique_id"XZ433jkoBW7GHRmK7itZ8AAAAAc"][WedOct0921:41:22.9081962019][:error][pid16943:tid139811891431168][client1.20.140.195:7013][client1.20.140.195]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomico

2019-10-10 07:27:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.140.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.140.2.			IN	A

;; AUTHORITY SECTION:
.			273	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 09:30:28 CST 2022
;; MSG SIZE  rcvd: 103

Host info

Host 2.140.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.140.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.241.237.28	attackbots	" "	2020-08-05 04:26:30
195.54.160.183	attackspam	Too many connections or unauthorized access detected from Yankee banned ip	2020-08-05 04:23:38
5.63.13.53	attack	REQUESTED PAGE: /website/wp-includes/wlwmanifest.xml	2020-08-05 04:34:54
151.252.105.132	attackspam	Aug 4 22:14:09 piServer sshd[24833]: Failed password for root from 151.252.105.132 port 33306 ssh2 Aug 4 22:18:12 piServer sshd[25259]: Failed password for root from 151.252.105.132 port 45994 ssh2 ...	2020-08-05 04:33:21
222.186.30.57	attack	Aug 4 20:19:02 rush sshd[14853]: Failed password for root from 222.186.30.57 port 63777 ssh2 Aug 4 20:19:11 rush sshd[14855]: Failed password for root from 222.186.30.57 port 36585 ssh2 ...	2020-08-05 04:20:16
110.8.67.146	attackspam	Automatic report BANNED IP	2020-08-05 04:31:12
184.154.74.70	attack	08/04/2020-13:58:27.993077 184.154.74.70 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-08-05 04:42:40
103.23.100.87	attack	Aug 4 22:06:53 [host] sshd[29372]: pam_unix(sshd: Aug 4 22:06:56 [host] sshd[29372]: Failed passwor Aug 4 22:09:58 [host] sshd[29718]: pam_unix(sshd:	2020-08-05 04:27:01
118.25.124.182	attack	invalid user liub from 118.25.124.182 port 59262 ssh2	2020-08-05 04:24:05
183.88.243.95	attackspambots	Aug 4 11:58:30 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 11 secs): user=, method=PLAIN, rip=183.88.243.95, lip=185.198.26.142, TLS, session= ...	2020-08-05 04:40:36
223.95.186.74	attackspam	2020-08-04T19:53:33.619840centos sshd[7563]: Failed password for root from 223.95.186.74 port 59658 ssh2 2020-08-04T19:58:20.950338centos sshd[7852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.95.186.74 user=root 2020-08-04T19:58:22.926508centos sshd[7852]: Failed password for root from 223.95.186.74 port 59217 ssh2 ...	2020-08-05 04:46:10
89.248.168.220	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 84 - port: 4445 proto: tcp cat: Misc Attackbytes: 60	2020-08-05 04:42:10
88.134.145.62	attackbots	ssh brute force	2020-08-05 04:47:15
46.229.168.140	attackspam	SQL Injection	2020-08-05 04:11:24
83.97.20.35	attack	Aug 4 22:08:10 debian-2gb-nbg1-2 kernel: \[18830154.303228\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=83.97.20.35 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54321 PROTO=TCP SPT=51899 DPT=11211 WINDOW=65535 RES=0x00 SYN URGP=0	2020-08-05 04:14:21

Recently Reported IPs

1.20.140.194	1.20.140.214	1.20.140.225	1.20.140.226
1.20.140.230	1.20.140.246	1.20.140.252	1.20.140.32
1.20.140.34	1.20.140.36	247.53.218.131	1.20.140.58
1.20.140.64	1.20.140.79	1.20.140.89	1.20.141.10
1.20.141.101	1.20.142.243	1.20.142.244	1.20.142.248