1.20.163.135 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.163.39	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-02 00:08:25,540 INFO [shellcode_manager] (1.20.163.39) no match, writing hexdump (07aeaa97f627c4fbef790f860568187e :2471105) - MS17010 (EternalBlue)	2019-07-02 12:39:59

Type

Details

Datetime

1.20.163.39

attack

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-02 00:08:25,540 INFO [shellcode_manager] (1.20.163.39) no match, writing hexdump (07aeaa97f627c4fbef790f860568187e :2471105) - MS17010 (EternalBlue)

2019-07-02 12:39:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.163.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.163.135.			IN	A

;; AUTHORITY SECTION:
.			482	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022401 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 11:40:26 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 135.163.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 135.163.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
83.41.251.88	attackspambots	Chat Spam	2020-02-25 11:21:02
80.144.231.184	attackspam	Feb 25 00:27:58 vps670341 sshd[969]: Invalid user charles from 80.144.231.184 port 45790	2020-02-25 11:12:03
112.196.97.85	attack	Feb 24 21:44:33 plusreed sshd[29178]: Invalid user oraprod from 112.196.97.85 ...	2020-02-25 10:51:43
222.186.175.150	attackbots	v+ssh-bruteforce	2020-02-25 11:06:02
172.245.109.234	attackspam	Feb 25 02:52:29 h2177944 kernel: \[5793340.977793\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.109.234 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=2755 PROTO=TCP SPT=45584 DPT=6666 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 25 02:52:29 h2177944 kernel: \[5793340.977807\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.109.234 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=2755 PROTO=TCP SPT=45584 DPT=6666 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 25 03:08:40 h2177944 kernel: \[5794311.356353\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.109.234 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=63329 PROTO=TCP SPT=45584 DPT=400 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 25 03:08:40 h2177944 kernel: \[5794311.356365\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.109.234 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=63329 PROTO=TCP SPT=45584 DPT=400 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 25 03:42:25 h2177944 kernel: \[5796335.680871\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=172.245.109.234 DST=85.214	2020-02-25 11:09:43
51.68.192.106	attackbotsspam	Feb 25 03:59:17 * sshd[18912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.192.106 Feb 25 03:59:19 * sshd[18912]: Failed password for invalid user speech from 51.68.192.106 port 47460 ssh2	2020-02-25 11:00:13
71.6.232.4	attackspam	1582586523 - 02/25/2020 06:22:03 Host: 71.6.232.4/71.6.232.4 Port: 8080 TCP Blocked ...	2020-02-25 11:14:18
136.232.192.214	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-25 11:13:47
137.74.119.120	attack	Feb 25 03:49:24 lnxweb61 sshd[5662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.120	2020-02-25 11:18:16
68.183.147.58	attackbots	2020-02-24T23:57:18.889006shield sshd\[15543\]: Invalid user alfred from 68.183.147.58 port 45632 2020-02-24T23:57:18.893743shield sshd\[15543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.147.58 2020-02-24T23:57:20.474872shield sshd\[15543\]: Failed password for invalid user alfred from 68.183.147.58 port 45632 ssh2 2020-02-24T23:59:23.655588shield sshd\[16163\]: Invalid user ubuntu7 from 68.183.147.58 port 50348 2020-02-24T23:59:23.663871shield sshd\[16163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.147.58	2020-02-25 11:22:25
144.137.29.26	attackspam	Honeypot attack, port: 81, PTR: cpe-144-137-29-26.static.nsw.asp.telstra.net.	2020-02-25 11:01:28
111.229.194.214	attackbotsspam	2020-01-23T04:38:57.981414suse-nuc sshd[30061]: Invalid user admin from 111.229.194.214 port 47822 ...	2020-02-25 11:11:37
192.241.219.173	attack	Input Traffic from this IP, but critial abuseconfidencescore	2020-02-25 10:56:05
54.36.106.204	attack	[2020-02-24 20:33:05] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:53024' - Wrong password [2020-02-24 20:33:05] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T20:33:05.676-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="900",SessionID="0x7fd82c6cd778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/53024",Challenge="399d833e",ReceivedChallenge="399d833e",ReceivedHash="d8f9717d6d48490c0c83b2d81070682a" [2020-02-24 20:33:34] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:60086' - Wrong password [2020-02-24 20:33:34] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T20:33:34.160-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7fd82c7af4d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/6 ...	2020-02-25 10:57:08
58.152.43.8	attackspambots	2020-02-25T03:58:12.562951vps751288.ovh.net sshd\[18191\]: Invalid user visitor from 58.152.43.8 port 15042 2020-02-25T03:58:12.572020vps751288.ovh.net sshd\[18191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=n058152043008.netvigator.com 2020-02-25T03:58:14.211126vps751288.ovh.net sshd\[18191\]: Failed password for invalid user visitor from 58.152.43.8 port 15042 ssh2 2020-02-25T04:07:24.884975vps751288.ovh.net sshd\[18278\]: Invalid user air from 58.152.43.8 port 41408 2020-02-25T04:07:24.893663vps751288.ovh.net sshd\[18278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=n058152043008.netvigator.com	2020-02-25 11:11:07

Recently Reported IPs

1.20.163.161	1.20.163.166	1.20.163.12	1.20.163.169
1.20.163.140	1.20.163.170	1.20.163.142	1.20.163.17
104.157.124.28	1.20.163.15	1.20.163.173	1.20.163.205
1.20.163.198	1.20.163.215	1.20.163.227	1.20.163.242
1.20.163.222	1.20.163.26	1.20.163.30	1.20.163.224