1.20.207.134 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.207.86	attack	hack	2021-02-14 19:26:32
1.20.207.55	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-12 14:53:37
1.20.207.30	attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]	2020-04-22 23:43:01
1.20.207.94	attackspambots	Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)	2020-01-03 18:41:58
1.20.207.105	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-02 16:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.134.			IN	A

;; AUTHORITY SECTION:
.			454	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061500 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 15 14:34:01 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 134.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.207.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.242.245.32	attack	Mar 31 08:50:19 gw1 sshd[5154]: Failed password for root from 114.242.245.32 port 24480 ssh2 ...	2020-03-31 13:31:13
114.143.153.138	attackbots	Hit on CMS login honeypot	2020-03-31 13:33:19
106.13.227.104	attack	2020-03-29 12:25:36 server sshd[7925]: Failed password for invalid user kuw from 106.13.227.104 port 41458 ssh2	2020-03-31 13:09:59
106.54.66.122	attack	ssh brute force	2020-03-31 13:26:23
82.186.120.234	attackspam	20/3/30@23:54:33: FAIL: Alarm-Telnet address from=82.186.120.234 ...	2020-03-31 13:06:59
146.88.240.4	attackbotsspam	1585630478 - 03/31/2020 06:54:38 Host: 146.88.240.4/146.88.240.4 Port: 161 UDP Blocked ...	2020-03-31 13:04:49
134.73.51.12	attackspam	Mar 31 05:27:16 mail.srvfarm.net postfix/smtpd[361760]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 31 05:28:14 mail.srvfarm.net postfix/smtpd[381494]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 31 05:33:04 mail.srvfarm.net postfix/smtpd[377289]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 31 05:33:18 mail.srvfarm.net postfix/smtpd[365658]: NOQUEUE: reject: RCPT from unknown[134.73.51.12]: 450 4.1.8	2020-03-31 13:36:25
190.64.137.171	attack	2020-03-27 10:06:00 server sshd[8406]: Failed password for invalid user dxi from 190.64.137.171 port 48310 ssh2	2020-03-31 13:14:12
178.142.123.100	attackbots	Mar 31 05:54:22 v22019038103785759 sshd\[21140\]: Invalid user pi from 178.142.123.100 port 56300 Mar 31 05:54:22 v22019038103785759 sshd\[21140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.142.123.100 Mar 31 05:54:22 v22019038103785759 sshd\[21142\]: Invalid user pi from 178.142.123.100 port 56316 Mar 31 05:54:22 v22019038103785759 sshd\[21142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.142.123.100 Mar 31 05:54:24 v22019038103785759 sshd\[21140\]: Failed password for invalid user pi from 178.142.123.100 port 56300 ssh2 ...	2020-03-31 13:22:57
15.164.7.242	attackspambots	Mar 30 19:05:05 hpm sshd\[8741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-15-164-7-242.ap-northeast-2.compute.amazonaws.com user=root Mar 30 19:05:06 hpm sshd\[8741\]: Failed password for root from 15.164.7.242 port 38544 ssh2 Mar 30 19:09:27 hpm sshd\[9036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-15-164-7-242.ap-northeast-2.compute.amazonaws.com user=root Mar 30 19:09:29 hpm sshd\[9036\]: Failed password for root from 15.164.7.242 port 51766 ssh2 Mar 30 19:13:45 hpm sshd\[9314\]: Invalid user ai from 15.164.7.242	2020-03-31 13:25:52
121.227.110.212	attackbotsspam	Unauthorized connection attempt detected from IP address 121.227.110.212 to port 1433	2020-03-31 13:28:24
62.4.14.123	attackbotsspam	62.4.14.123 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 10, 71	2020-03-31 13:01:44
106.75.244.62	attack	Mar 31 09:59:13 gw1 sshd[7596]: Failed password for root from 106.75.244.62 port 44548 ssh2 ...	2020-03-31 13:20:32
148.70.124.59	attack	Mar 31 07:07:48 localhost sshd\[26913\]: Invalid user iy from 148.70.124.59 Mar 31 07:07:48 localhost sshd\[26913\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.124.59 Mar 31 07:07:49 localhost sshd\[26913\]: Failed password for invalid user iy from 148.70.124.59 port 49960 ssh2 Mar 31 07:12:04 localhost sshd\[27200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.124.59 user=root Mar 31 07:12:07 localhost sshd\[27200\]: Failed password for root from 148.70.124.59 port 38626 ssh2 ...	2020-03-31 13:16:57
14.29.249.248	attackspam	Mar 31 04:27:12 ws26vmsma01 sshd[205610]: Failed password for root from 14.29.249.248 port 43683 ssh2 ...	2020-03-31 13:08:25

Recently Reported IPs

2.39.104.250	2.39.121.129	5.78.255.87	201.162.241.74
5.83.90.81	5.82.200.235	5.83.94.48	156.232.6.68
5.83.93.179	5.88.27.54	5.88.94.127	5.95.41.20
5.95.63.7	161.35.127.144	5.100.165.75	5.100.165.218
5.101.211.19	5.101.213.200	5.95.118.231	5.100.80.36