1.20.207.239 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.207.86	attack	hack	2021-02-14 19:26:32
1.20.207.55	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-12 14:53:37
1.20.207.30	attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]	2020-04-22 23:43:01
1.20.207.94	attackspambots	Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)	2020-01-03 18:41:58
1.20.207.105	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-02 16:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.239.			IN	A

;; AUTHORITY SECTION:
.			395	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 22:13:26 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 239.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.207.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.247.110.201	attackspambots	\[2019-09-29 16:22:59\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.201:52319' - Wrong password \[2019-09-29 16:22:59\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-29T16:22:59.460-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="400002",SessionID="0x7f1e1c3f8aa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.201/52319",Challenge="4402dcd1",ReceivedChallenge="4402dcd1",ReceivedHash="b0579e7281c01880bed0f7aa782af170" \[2019-09-29 16:23:37\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.201:59492' - Wrong password \[2019-09-29 16:23:37\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-29T16:23:37.843-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="400004",SessionID="0x7f1e1c3f8aa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.201	2019-09-30 04:42:45
218.246.5.118	attackbotsspam	2019-09-29T17:21:45.668569abusebot-8.cloudsearch.cf sshd\[24027\]: Invalid user ftpt3st from 218.246.5.118 port 33392	2019-09-30 04:20:38
104.244.79.222	attackbots	Sep 23 03:42:22 * sshd[3150]: Failed password for invalid user ubuntu from 104.244.79.222 port 55200 ssh2 Sep 23 03:42:27 * sshd[3150]: Failed password for invalid user ubuntu from 104.244.79.222 port 55200 ssh2 Sep 23 03:42:29 * sshd[3150]: Failed password for invalid user ubuntu from 104.244.79.222 port 55200 ssh2 Sep 23 03:42:32 * sshd[3150]: Failed password for invalid user ubuntu from 104.244.79.222 port 55200 ssh2 Sep 23 03:42:34 * sshd[3150]: Failed password for invalid user ubuntu from 104.244.79.222 port 55200 ssh2 Sep 23 03:42:37 * sshd[3150]: Failed password for invalid user ubuntu from 104.244.79.222 port 55200 ssh2 Sep 25 13:57:59 * sshd[19517]: Failed password for invalid user acoustica from 104.244.79.222 port 36246 ssh2 Sep 25 13:58:02 * sshd[19517]: Failed password for invalid user acoustica from 104.244.79.222 port 36246 ssh2 Sep 25 13:58:05 * sshd[19517]: Failed password for invalid user acoustica from 104.244.79.222 port 36246 ssh2 Sep 25 13:58:08 * sshd[19517]: Failed	2019-09-30 04:26:11
49.206.68.97	attackbotsspam	Unauthorized connection attempt from IP address 49.206.68.97 on Port 445(SMB)	2019-09-30 04:34:41
197.234.51.218	attackspambots	Probing for vulnerable services	2019-09-30 04:23:46
186.93.95.83	attack	Unauthorized connection attempt from IP address 186.93.95.83 on Port 445(SMB)	2019-09-30 04:09:25
92.119.160.6	attackspam	09/29/2019-15:40:47.554202 92.119.160.6 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-09-30 04:22:54
45.195.31.158	attack	445/tcp 445/tcp [2019-09-16/29]2pkt	2019-09-30 04:08:50
123.206.88.24	attack	$f2bV_matches	2019-09-30 04:38:51
61.78.131.13	attackspam	23/tcp [2019-09-29]1pkt	2019-09-30 04:32:04
41.39.169.96	attackspam	445/tcp [2019-09-29]1pkt	2019-09-30 04:18:54
180.245.92.24	attackbotsspam	2019-09-29T16:17:40.2187671495-001 sshd\[42668\]: Invalid user SYSTEM from 180.245.92.24 port 30627 2019-09-29T16:17:40.2221371495-001 sshd\[42668\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.245.92.24 2019-09-29T16:17:42.1681011495-001 sshd\[42668\]: Failed password for invalid user SYSTEM from 180.245.92.24 port 30627 ssh2 2019-09-29T16:21:51.7451711495-001 sshd\[42978\]: Invalid user yan from 180.245.92.24 port 10622 2019-09-29T16:21:51.7522311495-001 sshd\[42978\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.245.92.24 2019-09-29T16:21:53.8223301495-001 sshd\[42978\]: Failed password for invalid user yan from 180.245.92.24 port 10622 ssh2 ...	2019-09-30 04:40:22
167.249.93.8	attack	Unauthorized connection attempt from IP address 167.249.93.8 on Port 445(SMB)	2019-09-30 04:17:59
92.118.37.74	attackbotsspam	Sep 29 21:56:22 mc1 kernel: \[1073410.435924\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=35257 PROTO=TCP SPT=46525 DPT=20178 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 21:57:06 mc1 kernel: \[1073453.699091\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=61770 PROTO=TCP SPT=46525 DPT=28747 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 22:03:10 mc1 kernel: \[1073817.659052\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=36638 PROTO=TCP SPT=46525 DPT=16433 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-09-30 04:14:25
177.19.244.130	attackspam	3389BruteforceFW22	2019-09-30 04:32:26

Recently Reported IPs

1.20.207.241	1.20.207.224	1.20.207.232	1.20.207.240
101.51.171.122	101.51.171.124	1.228.180.211	1.244.110.150
1.34.134.99	1.34.127.246	1.34.132.59	1.235.60.144
1.243.64.63	1.222.87.11	1.217.216.45	1.34.127.163
1.34.127.23	1.31.128.249	101.51.171.135	1.34.144.51