Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
1.20.207.86 attack
hack
2021-02-14 19:26:32
1.20.207.55 attackspam
SSH bruteforce more then 50 syn to 22 port per 10 seconds.
2020-05-12 14:53:37
1.20.207.30 attack
Port scan detected on ports: 8291[TCP], 8291[TCP], 8291[TCP]
2020-04-22 23:43:01
1.20.207.94 attackspambots
Unauthorized connection attempt from IP address 1.20.207.94 on Port 445(SMB)
2020-01-03 18:41:58
1.20.207.105 attackbots
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-02 16:16:49
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.207.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52559
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.207.3.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022501 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 03:14:25 CST 2022
;; MSG SIZE  rcvd: 103
Host info
Host 3.207.20.1.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.207.20.1.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
5.196.70.107 attackspam
May  3 05:44:54 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: Invalid user cust from 5.196.70.107
May  3 05:44:54 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107
May  3 05:44:56 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: Failed password for invalid user cust from 5.196.70.107 port 55044 ssh2
May  3 05:57:26 Ubuntu-1404-trusty-64-minimal sshd\[30306\]: Invalid user test1 from 5.196.70.107
May  3 05:57:26 Ubuntu-1404-trusty-64-minimal sshd\[30306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107
2020-05-03 12:03:18
43.255.71.195 attackspambots
SSH Invalid Login
2020-05-03 08:27:51
112.85.42.189 attack
May  3 05:49:12 PorscheCustomer sshd[26737]: Failed password for root from 112.85.42.189 port 12828 ssh2
May  3 05:51:19 PorscheCustomer sshd[26787]: Failed password for root from 112.85.42.189 port 18442 ssh2
...
2020-05-03 12:00:52
80.211.60.125 attackspam
May  3 05:59:21 sip sshd[89563]: Invalid user wenbo from 80.211.60.125 port 34016
May  3 05:59:22 sip sshd[89563]: Failed password for invalid user wenbo from 80.211.60.125 port 34016 ssh2
May  3 06:03:01 sip sshd[89602]: Invalid user sabnzbd from 80.211.60.125 port 45804
...
2020-05-03 12:05:31
222.186.175.150 attack
May  3 05:58:17 santamaria sshd\[8890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150  user=root
May  3 05:58:18 santamaria sshd\[8890\]: Failed password for root from 222.186.175.150 port 49616 ssh2
May  3 05:58:34 santamaria sshd\[8892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150  user=root
...
2020-05-03 12:10:15
167.71.52.241 attackbotsspam
May  2 20:44:41 vps46666688 sshd[12117]: Failed password for root from 167.71.52.241 port 38500 ssh2
...
2020-05-03 08:40:03
176.233.161.60 attack
Invalid user pi from 176.233.161.60 port 54265
2020-05-03 08:34:01
104.248.92.124 attack
May  3 05:53:26 legacy sshd[3931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124
May  3 05:53:27 legacy sshd[3931]: Failed password for invalid user navi from 104.248.92.124 port 52358 ssh2
May  3 05:57:16 legacy sshd[4103]: Failed password for root from 104.248.92.124 port 34294 ssh2
...
2020-05-03 12:11:12
212.64.3.137 attack
May  2 23:50:39 localhost sshd[77900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.3.137  user=root
May  2 23:50:41 localhost sshd[77900]: Failed password for root from 212.64.3.137 port 57204 ssh2
May  2 23:55:49 localhost sshd[78435]: Invalid user med from 212.64.3.137 port 60182
May  2 23:55:49 localhost sshd[78435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.3.137
May  2 23:55:49 localhost sshd[78435]: Invalid user med from 212.64.3.137 port 60182
May  2 23:55:51 localhost sshd[78435]: Failed password for invalid user med from 212.64.3.137 port 60182 ssh2
...
2020-05-03 08:34:21
106.13.32.165 attack
May  3 01:41:22 ns382633 sshd\[4998\]: Invalid user yc from 106.13.32.165 port 49414
May  3 01:41:22 ns382633 sshd\[4998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.32.165
May  3 01:41:24 ns382633 sshd\[4998\]: Failed password for invalid user yc from 106.13.32.165 port 49414 ssh2
May  3 01:52:13 ns382633 sshd\[6987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.32.165  user=root
May  3 01:52:15 ns382633 sshd\[6987\]: Failed password for root from 106.13.32.165 port 50088 ssh2
2020-05-03 08:39:47
47.94.155.233 attack
47.94.155.233 - - [03/May/2020:05:57:11 +0200] "GET /wp-login.php HTTP/1.1" 200 6435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.94.155.233 - - [03/May/2020:05:57:20 +0200] "POST /wp-login.php HTTP/1.1" 200 6686 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.94.155.233 - - [03/May/2020:05:57:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-05-03 12:06:39
180.76.36.158 attackbotsspam
2020-05-02T20:25:38.961836dmca.cloudsearch.cf sshd[27831]: Invalid user gb from 180.76.36.158 port 52756
2020-05-02T20:25:38.967888dmca.cloudsearch.cf sshd[27831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.36.158
2020-05-02T20:25:38.961836dmca.cloudsearch.cf sshd[27831]: Invalid user gb from 180.76.36.158 port 52756
2020-05-02T20:25:41.019840dmca.cloudsearch.cf sshd[27831]: Failed password for invalid user gb from 180.76.36.158 port 52756 ssh2
2020-05-02T20:32:40.941644dmca.cloudsearch.cf sshd[28244]: Invalid user wyq from 180.76.36.158 port 56626
2020-05-02T20:32:40.948433dmca.cloudsearch.cf sshd[28244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.36.158
2020-05-02T20:32:40.941644dmca.cloudsearch.cf sshd[28244]: Invalid user wyq from 180.76.36.158 port 56626
2020-05-02T20:32:43.266341dmca.cloudsearch.cf sshd[28244]: Failed password for invalid user wyq from 180.76.36.158 port 56626 
...
2020-05-03 08:28:23
206.189.156.198 attackbotsspam
May  3 10:57:18 webhost01 sshd[16691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.156.198
May  3 10:57:20 webhost01 sshd[16691]: Failed password for invalid user joe from 206.189.156.198 port 42800 ssh2
...
2020-05-03 12:07:29
69.163.192.216 attack
Automatic report - XMLRPC Attack
2020-05-03 12:08:20
198.98.52.100 attack
2020-05-02T19:29:18.213733sorsha.thespaminator.com sshd[13854]: Invalid user support from 198.98.52.100 port 61641
2020-05-02T19:29:19.786790sorsha.thespaminator.com sshd[13854]: Failed password for invalid user support from 198.98.52.100 port 61641 ssh2
...
2020-05-03 08:38:46

Recently Reported IPs

1.20.207.32 1.20.207.34 1.20.207.36 1.20.207.38
1.20.207.40 239.115.137.203 1.20.207.42 1.20.207.46
1.20.207.48 1.20.207.5 1.20.207.50 1.20.207.51
1.20.207.52 1.20.207.56 1.20.207.60 1.20.207.64
1.20.207.66 1.20.207.68 1.20.207.7 1.20.207.70