1.20.207.239 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.207.86	attack	hack	2021-02-14 19:26:32
1.20.207.55	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-12 14:53:37
1.20.207.30	attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]	2020-04-22 23:43:01
1.20.207.94	attackspambots	Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)	2020-01-03 18:41:58
1.20.207.105	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-02 16:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.239.			IN	A

;; AUTHORITY SECTION:
.			395	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 22:13:26 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 239.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.207.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.122.97.242	attackbotsspam	Sep 12 18:41:59 mail.srvfarm.net postfix/smtps/smtpd[549459]: warning: unknown[138.122.97.242]: SASL PLAIN authentication failed: Sep 12 18:42:00 mail.srvfarm.net postfix/smtps/smtpd[549459]: lost connection after AUTH from unknown[138.122.97.242] Sep 12 18:45:27 mail.srvfarm.net postfix/smtpd[552118]: warning: unknown[138.122.97.242]: SASL PLAIN authentication failed: Sep 12 18:45:28 mail.srvfarm.net postfix/smtpd[552118]: lost connection after AUTH from unknown[138.122.97.242] Sep 12 18:48:07 mail.srvfarm.net postfix/smtps/smtpd[551663]: warning: unknown[138.122.97.242]: SASL PLAIN authentication failed:	2020-09-14 01:28:29
191.53.238.69	attack	(smtpauth) Failed SMTP AUTH login from 191.53.238.69 (BR/Brazil/191-53-238-69.ptu-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-13 20:03:07 plain authenticator failed for ([191.53.238.69]) [191.53.238.69]: 535 Incorrect authentication data (set_id=m.erfanian)	2020-09-14 01:34:19
45.176.214.63	attackbots	Sep 13 03:32:21 mail.srvfarm.net postfix/smtpd[891609]: warning: unknown[45.176.214.63]: SASL PLAIN authentication failed: Sep 13 03:32:22 mail.srvfarm.net postfix/smtpd[891609]: lost connection after AUTH from unknown[45.176.214.63] Sep 13 03:40:44 mail.srvfarm.net postfix/smtpd[891607]: warning: unknown[45.176.214.63]: SASL PLAIN authentication failed: Sep 13 03:40:45 mail.srvfarm.net postfix/smtpd[891607]: lost connection after AUTH from unknown[45.176.214.63] Sep 13 03:41:56 mail.srvfarm.net postfix/smtpd[891609]: warning: unknown[45.176.214.63]: SASL PLAIN authentication failed:	2020-09-14 01:31:36
141.98.9.167	attackbotsspam	IP attempted unauthorised action	2020-09-14 01:39:51
122.116.7.34	attackspambots	2020-09-12T19:39:40.167880hostname sshd[22604]: Failed password for root from 122.116.7.34 port 58572 ssh2 ...	2020-09-14 02:02:37
177.85.21.63	attack	Attempted Brute Force (dovecot)	2020-09-14 01:38:31
14.165.90.124	attackspambots	Port probing on unauthorized port 139	2020-09-14 01:59:31
52.186.165.217	attackbots	Sep 13 10:38:43 XXXXXX sshd[33939]: Invalid user postgres from 52.186.165.217 port 36121	2020-09-14 01:49:13
117.6.95.52	attack	Invalid user ms from 117.6.95.52 port 56974	2020-09-14 01:53:31
103.16.145.135	attackbotsspam	Sep 13 11:09:18 mail.srvfarm.net postfix/smtpd[1063719]: warning: unknown[103.16.145.135]: SASL PLAIN authentication failed: Sep 13 11:09:18 mail.srvfarm.net postfix/smtpd[1063719]: lost connection after AUTH from unknown[103.16.145.135] Sep 13 11:10:20 mail.srvfarm.net postfix/smtpd[1049515]: warning: unknown[103.16.145.135]: SASL PLAIN authentication failed: Sep 13 11:10:20 mail.srvfarm.net postfix/smtpd[1049515]: lost connection after AUTH from unknown[103.16.145.135] Sep 13 11:15:19 mail.srvfarm.net postfix/smtps/smtpd[1051852]: warning: unknown[103.16.145.135]: SASL PLAIN authentication failed:	2020-09-14 01:42:46
188.92.213.115	attackbots	Sep 13 09:29:03 mail.srvfarm.net postfix/smtps/smtpd[1007950]: warning: unknown[188.92.213.115]: SASL PLAIN authentication failed: Sep 13 09:29:03 mail.srvfarm.net postfix/smtps/smtpd[1007950]: lost connection after AUTH from unknown[188.92.213.115] Sep 13 09:31:18 mail.srvfarm.net postfix/smtps/smtpd[1023469]: warning: unknown[188.92.213.115]: SASL PLAIN authentication failed: Sep 13 09:31:18 mail.srvfarm.net postfix/smtps/smtpd[1023469]: lost connection after AUTH from unknown[188.92.213.115] Sep 13 09:38:29 mail.srvfarm.net postfix/smtpd[1022145]: warning: unknown[188.92.213.115]: SASL PLAIN authentication failed:	2020-09-14 01:27:38
189.126.173.34	attackspam	Sep 13 15:39:13 mail.srvfarm.net postfix/smtps/smtpd[1168878]: warning: unknown[189.126.173.34]: SASL PLAIN authentication failed: Sep 13 15:39:13 mail.srvfarm.net postfix/smtps/smtpd[1168878]: lost connection after AUTH from unknown[189.126.173.34] Sep 13 15:39:34 mail.srvfarm.net postfix/smtps/smtpd[1168062]: warning: unknown[189.126.173.34]: SASL PLAIN authentication failed: Sep 13 15:39:34 mail.srvfarm.net postfix/smtps/smtpd[1168062]: lost connection after AUTH from unknown[189.126.173.34] Sep 13 15:42:07 mail.srvfarm.net postfix/smtps/smtpd[1169531]: warning: unknown[189.126.173.34]: SASL PLAIN authentication failed:	2020-09-14 01:35:18
103.75.197.21	attackbotsspam	Brute force attempt	2020-09-14 01:42:22
181.52.249.177	attackspambots	Sep 13 19:33:00 host1 sshd[278867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.52.249.177 user=root Sep 13 19:33:02 host1 sshd[278867]: Failed password for root from 181.52.249.177 port 38818 ssh2 Sep 13 19:35:30 host1 sshd[278992]: Invalid user cpanelphppgadmin from 181.52.249.177 port 56004 Sep 13 19:35:30 host1 sshd[278992]: Invalid user cpanelphppgadmin from 181.52.249.177 port 56004 ...	2020-09-14 01:54:38
103.1.12.68	attackbotsspam	Sep 13 18:46:42 mail.srvfarm.net postfix/smtpd[1233117]: NOQUEUE: reject: RCPT from unknown[103.1.12.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 13 18:51:09 mail.srvfarm.net postfix/smtpd[1233117]: NOQUEUE: reject: RCPT from unknown[103.1.12.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 13 18:51:09 mail.srvfarm.net postfix/smtpd[1234121]: NOQUEUE: reject: RCPT from unknown[103.1.12.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 13 18:51:16 mail.srvfarm.net postfix/smtpd[1232282]: NOQUEUE: reject: RCPT from unknown[103.1.12.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= p	2020-09-14 01:43:17

Recently Reported IPs

1.20.207.241	1.20.207.224	1.20.207.232	1.20.207.240
101.51.171.122	101.51.171.124	1.228.180.211	1.244.110.150
1.34.134.99	1.34.127.246	1.34.132.59	1.235.60.144
1.243.64.63	1.222.87.11	1.217.216.45	1.34.127.163
1.34.127.23	1.31.128.249	101.51.171.135	1.34.144.51