1.20.207.253 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.207.86	attack	hack	2021-02-14 19:26:32
1.20.207.55	attackspam	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-05-12 14:53:37
1.20.207.30	attack	Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]	2020-04-22 23:43:01
1.20.207.94	attackspambots	Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)	2020-01-03 18:41:58
1.20.207.105	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-02 16:16:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13748
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.253.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400

;; Query time: 451 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 19:27:20 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 253.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 253.207.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
109.236.49.55	attack	Aug 26 16:31:46 elektron postfix/smtpd\[29332\]: NOQUEUE: reject: RCPT from unknown\[109.236.49.55\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[109.236.49.55\]\; from=\ to=\ proto=ESMTP helo=\ Aug 26 16:35:13 elektron postfix/smtpd\[29332\]: NOQUEUE: reject: RCPT from unknown\[109.236.49.55\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[109.236.49.55\]\; from=\ to=\ proto=ESMTP helo=\ Aug 26 17:00:02 elektron postfix/smtpd\[4124\]: NOQUEUE: reject: RCPT from unknown\[109.236.49.55\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[109.236.49.55\]\; from=\ to=\ proto=ESMTP helo=\	2019-08-27 06:26:08
37.76.133.155	attackspambots	SSHD brute force attack detected by fail2ban	2019-08-27 06:28:54
62.210.37.82	attackbotsspam	$f2bV_matches	2019-08-27 06:35:34
182.254.225.230	attackbots	Aug 26 23:31:49 microserver sshd[34326]: Invalid user puneet from 182.254.225.230 port 46138 Aug 26 23:31:49 microserver sshd[34326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.225.230 Aug 26 23:31:51 microserver sshd[34326]: Failed password for invalid user puneet from 182.254.225.230 port 46138 ssh2 Aug 26 23:37:38 microserver sshd[34982]: Invalid user antonio from 182.254.225.230 port 35522 Aug 26 23:37:38 microserver sshd[34982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.225.230 Aug 26 23:48:58 microserver sshd[36322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.225.230 user=root Aug 26 23:49:00 microserver sshd[36322]: Failed password for root from 182.254.225.230 port 42488 ssh2 Aug 26 23:54:40 microserver sshd[37031]: Invalid user customer from 182.254.225.230 port 60092 Aug 26 23:54:40 microserver sshd[37031]: pam_unix(sshd:auth): authenticatio	2019-08-27 06:23:20
177.21.97.229	attack	Splunk® : port scan detected: Aug 26 09:29:59 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=177.21.97.229 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=50127 DF PROTO=TCP SPT=4198 DPT=8080 WINDOW=14600 RES=0x00 SYN URGP=0	2019-08-27 06:03:30
91.92.109.43	attackspam	Aug 27 00:09:26 MK-Soft-Root1 sshd\[21869\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.92.109.43 user=sshd Aug 27 00:09:28 MK-Soft-Root1 sshd\[21869\]: Failed password for sshd from 91.92.109.43 port 45868 ssh2 Aug 27 00:09:29 MK-Soft-Root1 sshd\[21869\]: Failed password for sshd from 91.92.109.43 port 45868 ssh2 ...	2019-08-27 06:10:33
213.225.214.202	attack	Aug 26 15:29:41 lnxded64 sshd[25202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.214.202 Aug 26 15:29:41 lnxded64 sshd[25202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.225.214.202	2019-08-27 06:30:32
59.148.2.18	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-08-27 06:05:35
139.99.37.147	attackspambots	$f2bV_matches	2019-08-27 05:56:40
185.176.27.18	attack	08/26/2019-17:45:26.060034 185.176.27.18 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-08-27 06:16:17
186.206.134.122	attackspam	Aug 26 19:04:06 XXX sshd[50388]: Invalid user strenesse from 186.206.134.122 port 46782	2019-08-27 05:54:38
5.135.181.11	attackspambots	2019-08-26T20:53:18.426741stark.klein-stark.info sshd\[29964\]: Invalid user samba from 5.135.181.11 port 42976 2019-08-26T20:53:18.433477stark.klein-stark.info sshd\[29964\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3010967.ip-5-135-181.eu 2019-08-26T20:53:20.529435stark.klein-stark.info sshd\[29964\]: Failed password for invalid user samba from 5.135.181.11 port 42976 ssh2 ...	2019-08-27 06:29:18
128.199.203.236	attackspambots	Automatic report	2019-08-27 06:09:06
189.39.242.129	attackbots	1566826211 - 08/26/2019 20:30:11 Host: 189.39.242.129.mar.com.br/189.39.242.129 Port: 23 TCP Blocked ...	2019-08-27 06:07:12
89.25.80.202	attackspambots	firewall-block, port(s): 445/tcp	2019-08-27 06:27:06

Recently Reported IPs

150.8.169.226	82.74.31.89	241.77.107.215	33.221.158.231
214.244.184.66	4.15.240.54	224.199.10.132	246.131.121.4
169.204.66.95	85.32.71.173	230.250.17.24	22.74.111.34
54.160.32.56	180.1.159.165	185.237.128.55	123.109.31.150
76.228.253.38	134.250.153.46	220.125.62.151	212.185.83.59