1.20.201.159 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.201.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53461
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.201.159.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 20:34:34 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 159.201.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.201.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.196.189.18	attackbots	REQUESTED PAGE: /xmlrpc.php?rsd	2019-07-08 06:37:08
109.104.173.46	attack	2019-07-07T21:12:05.188341abusebot-2.cloudsearch.cf sshd\[10389\]: Invalid user test4 from 109.104.173.46 port 34270	2019-07-08 06:28:29
209.85.217.104	attackspam	Return-Path:	2019-07-08 06:46:28
188.166.237.191	attack	Automatic report - Web App Attack	2019-07-08 06:34:25
160.153.154.8	attackspambots	xmlrpc attack	2019-07-08 06:21:44
103.216.59.75	attack	3389BruteforceIDS	2019-07-08 06:22:19
189.51.104.154	attackbots	SMTP-sasl brute force ...	2019-07-08 06:10:24
124.243.198.190	attackbots	FTP Brute-Force reported by Fail2Ban	2019-07-08 06:06:42
202.131.237.182	attack	Jul 7 21:28:34 MK-Soft-Root1 sshd\[18755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.237.182 user=root Jul 7 21:28:35 MK-Soft-Root1 sshd\[18755\]: Failed password for root from 202.131.237.182 port 58953 ssh2 Jul 7 21:28:37 MK-Soft-Root1 sshd\[18771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.131.237.182 user=root ...	2019-07-08 06:18:09
64.31.33.70	attackspambots	\[2019-07-07 17:47:43\] NOTICE\[13443\] chan_sip.c: Registration from '"40001" \' failed for '64.31.33.70:5085' - Wrong password \[2019-07-07 17:47:43\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-07T17:47:43.960-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="40001",SessionID="0x7f02f81c5a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.33.70/5085",Challenge="2f14404a",ReceivedChallenge="2f14404a",ReceivedHash="eeeeca7264ce27b55f02790a73dbd7e2" \[2019-07-07 17:47:44\] NOTICE\[13443\] chan_sip.c: Registration from '"40001" \' failed for '64.31.33.70:5085' - Wrong password \[2019-07-07 17:47:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-07T17:47:44.084-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="40001",SessionID="0x7f02f801bd88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV	2019-07-08 06:11:24
45.7.230.226	attackspam	Brute force attempt	2019-07-08 06:17:20
62.210.123.127	attackbots	62.210.123.127 - - [07/Jul/2019:15:26:07 +0200] "POST [munged]wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0.000	2019-07-08 06:11:43
207.91.147.66	attackspam	SMB Server BruteForce Attack	2019-07-08 06:40:38
185.195.25.21	attackspam	[SunJul0715:07:36.0297402019][:error][pid26533:tid47793836709632][client185.195.25.21:63515][client185.195.25.21]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"207"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"81.17.25.230"][uri"/"][unique_id"XSHumK6awY2fpRzFPpv-DQAAAMI"][SunJul0715:08:38.8021352019][:error][pid28221:tid47793947318016][client185.195.25.21:65514][client185.195.25.21]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"207"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname\	2019-07-08 06:05:57
186.84.229.167	attackspam	Brute forcing Wordpress login	2019-07-08 06:31:26

Recently Reported IPs

1.20.201.15	1.20.201.160	1.20.201.163	1.20.201.167
1.20.201.173	133.39.221.89	1.20.201.179	1.20.203.5
1.20.203.50	1.20.203.53	1.20.203.54	77.139.101.140
1.20.203.57	1.20.203.61	1.20.203.64	1.20.203.78
1.20.203.8	1.20.203.81	1.20.203.86	1.20.203.89