1.20.207.117 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.207.86	attack	hack	2021-02-14 19:26:32
1.20.207.55	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-12 14:53:37
1.20.207.30	attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]	2020-04-22 23:43:01
1.20.207.94	attackspambots	Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)	2020-01-03 18:41:58
1.20.207.105	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-02 16:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.117.			IN	A

;; AUTHORITY SECTION:
.			102	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 191 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 20:38:19 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 117.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 117.207.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.78.7.107	attackspambots	ft-1848-basketball.de 220.78.7.107 [02/Jun/2020:14:03:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" ft-1848-basketball.de 220.78.7.107 [02/Jun/2020:14:03:19 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-03 01:15:39
84.107.215.228	attackbotsspam	port scan and connect, tcp 443 (https)	2020-06-03 01:18:07
54.39.156.177	attackbotsspam	prod6 ...	2020-06-03 00:56:50
203.86.239.251	attackbotsspam	Jun 2 14:56:14 cdc sshd[22356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.86.239.251 user=root Jun 2 14:56:17 cdc sshd[22356]: Failed password for invalid user root from 203.86.239.251 port 36082 ssh2	2020-06-03 00:50:56
175.139.1.34	attackbots	Jun 2 18:22:15 vpn01 sshd[8473]: Failed password for root from 175.139.1.34 port 53148 ssh2 ...	2020-06-03 00:54:27
159.100.24.6	attackbots	2020-06-02 06:50:33.068067-0500 localhost smtpd[76437]: NOQUEUE: reject: RCPT from unknown[159.100.24.6]: 450 4.7.25 Client host rejected: cannot find your hostname, [159.100.24.6]; from= to= proto=ESMTP helo=<009bdd7d.hgaksj.xyz>	2020-06-03 01:26:15
222.186.175.212	attack	2020-06-02T13:02:34.665479xentho-1 sshd[1024786]: Failed password for root from 222.186.175.212 port 9784 ssh2 2020-06-02T13:02:28.096304xentho-1 sshd[1024786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root 2020-06-02T13:02:30.343644xentho-1 sshd[1024786]: Failed password for root from 222.186.175.212 port 9784 ssh2 2020-06-02T13:02:34.665479xentho-1 sshd[1024786]: Failed password for root from 222.186.175.212 port 9784 ssh2 2020-06-02T13:02:39.399785xentho-1 sshd[1024786]: Failed password for root from 222.186.175.212 port 9784 ssh2 2020-06-02T13:02:28.096304xentho-1 sshd[1024786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root 2020-06-02T13:02:30.343644xentho-1 sshd[1024786]: Failed password for root from 222.186.175.212 port 9784 ssh2 2020-06-02T13:02:34.665479xentho-1 sshd[1024786]: Failed password for root from 222.186.175.212 port 9784 ssh2 2020 ...	2020-06-03 01:12:01
103.213.131.108	attack	ft-1848-basketball.de 103.213.131.108 [02/Jun/2020:14:03:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" ft-1848-basketball.de 103.213.131.108 [02/Jun/2020:14:03:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-03 01:04:12
177.32.251.150	attackbotsspam	Jun 2 10:56:48 mail sshd\[36297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.32.251.150 user=root ...	2020-06-03 00:57:14
211.159.157.242	attackspambots	Jun 2 15:58:57 ns3033917 sshd[20843]: Failed password for root from 211.159.157.242 port 59524 ssh2 Jun 2 16:01:40 ns3033917 sshd[20881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.157.242 user=root Jun 2 16:01:41 ns3033917 sshd[20881]: Failed password for root from 211.159.157.242 port 56878 ssh2 ...	2020-06-03 00:54:57
49.88.112.55	attack	Jun 2 18:57:37 vps sshd[792150]: Failed password for root from 49.88.112.55 port 64625 ssh2 Jun 2 18:57:40 vps sshd[792150]: Failed password for root from 49.88.112.55 port 64625 ssh2 Jun 2 18:57:43 vps sshd[792150]: Failed password for root from 49.88.112.55 port 64625 ssh2 Jun 2 18:57:46 vps sshd[792150]: Failed password for root from 49.88.112.55 port 64625 ssh2 Jun 2 18:57:49 vps sshd[792150]: Failed password for root from 49.88.112.55 port 64625 ssh2 ...	2020-06-03 01:11:30
54.38.190.48	attackbots	Jun 2 12:13:30 web8 sshd\[25852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 user=root Jun 2 12:13:32 web8 sshd\[25852\]: Failed password for root from 54.38.190.48 port 55578 ssh2 Jun 2 12:17:06 web8 sshd\[27648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 user=root Jun 2 12:17:08 web8 sshd\[27648\]: Failed password for root from 54.38.190.48 port 59672 ssh2 Jun 2 12:20:40 web8 sshd\[29319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.190.48 user=root	2020-06-03 01:28:24
115.84.99.94	attackspambots	(imapd) Failed IMAP login from 115.84.99.94 (LA/Laos/-): 1 in the last 3600 secs	2020-06-03 01:31:05
41.93.32.89	attackspambots	SSH invalid-user multiple login try	2020-06-03 01:10:36
175.24.132.222	attack	Jun 2 14:03:15 mellenthin sshd[20937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.132.222 user=root Jun 2 14:03:17 mellenthin sshd[20937]: Failed password for invalid user root from 175.24.132.222 port 55180 ssh2	2020-06-03 01:19:27

Recently Reported IPs

1.20.207.114	1.20.207.118	1.20.207.120	1.20.207.123
1.20.207.124	1.20.207.126	1.20.207.127	1.20.207.129
1.20.207.130	1.20.207.132	1.20.207.136	58.154.206.206
1.20.207.139	1.20.207.14	1.20.207.140	1.20.207.145
128.109.166.64	1.20.207.146	1.20.207.151	1.20.207.152