1.20.248.201 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.248.101	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-15 10:26:39
1.20.248.250	attackspambots	firewall-block, port(s): 26/tcp	2019-11-28 15:12:07
1.20.248.226	attackspam	Chat Spam	2019-09-09 11:37:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.248.201
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65269
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.248.201.			IN	A

;; AUTHORITY SECTION:
.			326	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400

;; Query time: 124 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 21:08:35 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 201.248.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 201.248.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
163.53.187.210	attackbotsspam	Unauthorized connection attempt from IP address 163.53.187.210 on Port 445(SMB)	2020-01-16 19:49:20
80.82.70.118	attackspambots	Telnet Server BruteForce Attack	2020-01-16 19:59:55
59.95.211.203	attack	Unauthorized connection attempt from IP address 59.95.211.203 on Port 445(SMB)	2020-01-16 19:48:46
81.17.81.34	attack	IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.	2020-01-16 20:09:26
179.228.74.3	attack	Jan 16 03:13:50 scivo sshd[4293]: reveeclipse mapping checking getaddrinfo for 179-228-74-3.user.vivozap.com.br [179.228.74.3] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 16 03:13:50 scivo sshd[4293]: Invalid user sou from 179.228.74.3 Jan 16 03:13:50 scivo sshd[4293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.228.74.3 Jan 16 03:13:51 scivo sshd[4293]: Failed password for invalid user sou from 179.228.74.3 port 49194 ssh2 Jan 16 03:13:51 scivo sshd[4293]: Received disconnect from 179.228.74.3: 11: Bye Bye [preauth] Jan 16 03:20:47 scivo sshd[4671]: reveeclipse mapping checking getaddrinfo for 179-228-74-3.user.vivozap.com.br [179.228.74.3] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 16 03:20:47 scivo sshd[4671]: Invalid user jehu from 179.228.74.3 Jan 16 03:20:47 scivo sshd[4671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.228.74.3 Jan 16 03:20:49 scivo sshd[4671]: Failed passwo........ -------------------------------	2020-01-16 19:52:42
81.171.75.178	attackbotsspam	[2020-01-16 06:39:10] NOTICE[2175] chan_sip.c: Registration from '' failed for '81.171.75.178:60418' - Wrong password [2020-01-16 06:39:10] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-16T06:39:10.191-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6461",SessionID="0x7f5ac4c6fb48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.178/60418",Challenge="67d6566c",ReceivedChallenge="67d6566c",ReceivedHash="7d8840606f16ee5899adf5385466996b" [2020-01-16 06:39:33] NOTICE[2175] chan_sip.c: Registration from '' failed for '81.171.75.178:55283' - Wrong password [2020-01-16 06:39:33] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-16T06:39:33.091-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3885",SessionID="0x7f5ac400f638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.178 ...	2020-01-16 19:59:10
193.248.215.77	attackspambots	"Unrouteable address"	2020-01-16 20:01:24
118.97.98.205	attack	Unauthorized connection attempt from IP address 118.97.98.205 on Port 445(SMB)	2020-01-16 19:51:49
184.168.193.98	attack	Automatic report - XMLRPC Attack	2020-01-16 19:48:21
42.51.221.99	attackbots	IP: 42.51.221.99 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 16% Found in DNSBL('s) ASN Details AS56005 Zhengzhou Fastidc Technology Co. Ltd. China (CN) CIDR 42.51.0.0/16 Log Date: 16/01/2020 10:26:38 AM UTC	2020-01-16 20:05:50
167.172.158.200	attackbots	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-01-16 19:44:20
125.160.60.167	attack	Unauthorized connection attempt from IP address 125.160.60.167 on Port 445(SMB)	2020-01-16 19:47:32
200.122.224.200	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2020-01-16 19:53:45
172.77.65.103	attackspam	Unauthorized connection attempt detected from IP address 172.77.65.103 to port 9000 [J]	2020-01-16 20:08:54
1.10.145.219	attackbots	Unauthorized connection attempt from IP address 1.10.145.219 on Port 445(SMB)	2020-01-16 19:36:30

Recently Reported IPs

1.20.248.198	1.20.248.206	1.20.248.208	1.20.248.210
1.20.248.217	1.20.248.221	1.20.248.238	1.20.248.246
1.20.248.25	1.20.248.28	1.20.248.36	1.20.248.38
1.20.248.40	1.20.248.45	1.20.248.49	1.20.248.5
1.20.248.52	1.20.248.56	1.20.248.61	1.20.248.67