1.20.98.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.20.98.66	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.98.66/ TH - 1H : (18) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN23969 IP : 1.20.98.66 CIDR : 1.20.98.0/24 PREFIX COUNT : 1783 UNIQUE IP COUNT : 1183744 ATTACKS DETECTED ASN23969 : 1H - 1 3H - 2 6H - 4 12H - 4 24H - 6 DateTime : 2019-11-11 07:21:49 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-11-11 20:21:26

Type

Details

Datetime

1.20.98.66

attackbotsspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/1.20.98.66/ 
 
 TH - 1H : (18)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN23969 
 
 IP : 1.20.98.66 
 
 CIDR : 1.20.98.0/24 
 
 PREFIX COUNT : 1783 
 
 UNIQUE IP COUNT : 1183744 
 
 
 ATTACKS DETECTED ASN23969 :  
  1H - 1 
  3H - 2 
  6H - 4 
 12H - 4 
 24H - 6 
 
 DateTime : 2019-11-11 07:21:49 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-11-11 20:21:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.20.98.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46659
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.20.98.2.			IN	A

;; AUTHORITY SECTION:
.			223	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 128 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 16:40:32 CST 2022
;; MSG SIZE  rcvd: 102

Host info

Host 2.98.20.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.98.20.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
160.238.74.201	attackspambots	Unauthorized connection attempt detected from IP address 160.238.74.201 to port 1433 [J]	2020-01-25 15:14:17
106.13.7.186	attack	2020-01-25T06:29:29.637957shield sshd\[6199\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.7.186 user=root 2020-01-25T06:29:31.268452shield sshd\[6199\]: Failed password for root from 106.13.7.186 port 37418 ssh2 2020-01-25T06:32:56.860742shield sshd\[8801\]: Invalid user dev from 106.13.7.186 port 46396 2020-01-25T06:32:56.867127shield sshd\[8801\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.7.186 2020-01-25T06:32:58.913676shield sshd\[8801\]: Failed password for invalid user dev from 106.13.7.186 port 46396 ssh2	2020-01-25 15:05:50
171.220.243.179	attackspambots	Jan 25 07:17:59 lnxded64 sshd[22491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.220.243.179	2020-01-25 14:48:16
45.143.220.158	attackbots	[2020-01-25 01:42:47] NOTICE[1148][C-000023c2] chan_sip.c: Call from '' (45.143.220.158:49850) to extension '101146431313356' rejected because extension not found in context 'public'. [2020-01-25 01:42:47] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-25T01:42:47.581-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="101146431313356",SessionID="0x7fd82c144298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.158/49850",ACLName="no_extension_match" [2020-01-25 01:47:02] NOTICE[1148][C-000023c7] chan_sip.c: Call from '' (45.143.220.158:49889) to extension '0046431313356' rejected because extension not found in context 'public'. [2020-01-25 01:47:02] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-01-25T01:47:02.374-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046431313356",SessionID="0x7fd82c4a98b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/4 ...	2020-01-25 14:55:59
198.108.67.62	attackspam	Jan 25 05:54:41 debian-2gb-nbg1-2 kernel: \[2187356.634442\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.67.62 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=36 ID=61216 PROTO=TCP SPT=10975 DPT=8820 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-25 15:03:47
62.210.36.166	attackspam	xmlrpc attack	2020-01-25 15:04:17
222.186.175.150	attackspam	Jan 25 08:03:32 jane sshd[22316]: Failed password for root from 222.186.175.150 port 48636 ssh2 Jan 25 08:03:36 jane sshd[22316]: Failed password for root from 222.186.175.150 port 48636 ssh2 ...	2020-01-25 15:09:23
41.82.212.193	attack	Jan 24 20:59:56 sachi sshd\[22483\]: Invalid user qe from 41.82.212.193 Jan 24 20:59:56 sachi sshd\[22483\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.82.212.193 Jan 24 20:59:58 sachi sshd\[22483\]: Failed password for invalid user qe from 41.82.212.193 port 6682 ssh2 Jan 24 21:02:56 sachi sshd\[22705\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.82.212.193 user=root Jan 24 21:02:58 sachi sshd\[22705\]: Failed password for root from 41.82.212.193 port 6683 ssh2	2020-01-25 15:08:45
112.85.42.176	attackspam	$f2bV_matches	2020-01-25 14:42:12
120.71.145.189	attackspambots	Unauthorized connection attempt detected from IP address 120.71.145.189 to port 2220 [J]	2020-01-25 15:18:48
184.57.83.177	attackspam	Telnetd brute force attack detected by fail2ban	2020-01-25 14:47:53
200.127.21.133	attackbots	Unauthorized connection attempt detected from IP address 200.127.21.133 to port 2220 [J]	2020-01-25 15:16:18
61.19.113.110	attackspambots	1579928071 - 01/25/2020 05:54:31 Host: 61.19.113.110/61.19.113.110 Port: 445 TCP Blocked	2020-01-25 15:12:05
180.251.246.9	attack	20/1/24@23:54:54: FAIL: Alarm-Network address from=180.251.246.9 ...	2020-01-25 14:51:26
89.163.255.226	attackspam	2020-01-24 22:25:06 H=de-1.serverip.co [89.163.255.226]:44776 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4) (https://www.spamhaus.org/query/ip/89.163.255.226) 2020-01-24 22:52:39 H=de-1.serverip.co [89.163.255.226]:39148 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4) (https://www.spamhaus.org/query/ip/89.163.255.226) 2020-01-24 22:54:53 H=de-1.serverip.co [89.163.255.226]:50768 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4) (https://www.spamhaus.org/query/ip/89.163.255.226) ...	2020-01-25 14:52:55

Recently Reported IPs

103.142.57.28	103.142.5.19	103.142.67.1	103.142.68.209
103.142.68.222	103.142.68.230	103.142.68.212	103.142.68.224
103.142.68.252	1.20.98.20	103.142.68.232	103.142.68.6
103.142.68.70	103.142.68.85	103.142.68.72	103.142.69.130
103.142.69.118	103.142.69.158	1.20.98.211	103.142.69.111