JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.20.186.134

1.20.186.134 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 100%: ?

100%

ISP	TOT Mobile Co LTD
Usage Type	Fixed Line ISP
ASN	AS23969
Domain Name	tot.co.th
Country	🇹🇭 Thailand
City	Bang Lamung, Chon Buri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.20.186.134

Whois 1.20.186.134

IP Abuse Reports for 1.20.186.134:

This IP address has been reported a total of 77 times from 61 distinct sources. 1.20.186.134 was first reported on July 24th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 sh97	2026-06-06 22:43:46 (2 weeks ago)	Blocked by Fail2Ban for SSH brute-force attacks.	Brute-Force SSH
Anonymous	2026-06-04 00:03:46 (2 weeks ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇫🇮 Gregor Makdac	2026-06-03 23:57:39 (2 weeks ago)	Hetzner-F2B blocked SSH BF-	Brute-Force SSH
🇺🇸 xmission.com	2026-06-03 23:33:57 (2 weeks ago)	Blocked by UFW (TCP on 2375) Source port: 44467 TTL: 49 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 44467 TTL: 49 Packet length: 44 TOS: 0x00 This report (for 1.20.186.134) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇬 WMK965	2026-06-03 23:12:30 (2 weeks ago)	1.20.186.134 - - [04/Jun/2026:07:12:29 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e ... show more 1.20.186.134 - - [04/Jun/2026:07:12:29 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 154 "-" "-" "-" 1.20.186.134 - - [04/Jun/2026:07:12:29 +0800] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 154 "-" "-" "-" 1.20.186.134 - - [04/Jun/2026:07:12:29 +0800] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 444 0 "-" "libredtail-http" "-" show less	Port Scan Web App Attack
Anonymous	2026-06-03 22:56:06 (2 weeks ago)	Unauthorized connection	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-03 22:18:41 (2 weeks ago)	Honeypot [nx-infrastructure]: Brute-force attack detected on 23/TELNET • Credential used: admin:admi ... show more Honeypot [nx-infrastructure]: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of login attempts: 1 Reported by: Justin F. show less	Hacking
🇺🇸 RAP	2026-06-03 20:42:52 (2 weeks ago)	2026-06-03 20:42:52 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇮🇳 sh97	2026-06-03 20:00:03 (2 weeks ago)	Blocked by Fail2Ban for SSH brute-force attacks.	Brute-Force SSH
🇵🇹 rncbc	2026-06-03 19:45:15 (2 weeks ago)	[Wed Jun 03 20:45:14.171413 2026] [authz_core:error] [pid 887594:tid 887594] [client 1.20.186.134:13 ... show more [Wed Jun 03 20:45:14.171413 2026] [authz_core:error] [pid 887594:tid 887594] [client 1.20.186.134:13304] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/hello.world [Wed Jun 03 20:45:14.613736 2026] [authz_core:error] [pid 887594:tid 887594] [client 1.20.186.134:13304] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/ [Wed Jun 03 20:45:14.996164 2026] [authz_core:error] [pid 887594:tid 887594] [client 1.20.186.134:13304] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/vendor ... show less	Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 bigscoots.com	2026-06-03 19:22:40 (2 weeks ago)	(sshd) Failed SSH login from 1.20.186.134 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 1.20.186.134 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jun 3 14:21:11 14778 sshd[14372]: Invalid user admin from 1.20.186.134 port 15332 Jun 3 14:21:13 14778 sshd[14372]: Failed password for invalid user admin from 1.20.186.134 port 15332 ssh2 Jun 3 14:21:47 14778 sshd[14572]: Invalid user orangepi from 1.20.186.134 port 51604 Jun 3 14:21:48 14778 sshd[14572]: Failed password for invalid user orangepi from 1.20.186.134 port 51604 ssh2 Jun 3 14:22:24 14778 sshd[14925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.20.186.134 user=root show less	Brute-Force SSH
🇩🇪 Tamsy	2026-06-03 19:02:40 (2 weeks ago)	HTTPD - Buffer overflow attack	Web App Attack
🇨🇭 vftable	2026-06-03 18:59:23 (2 weeks ago)	2026-06-03T19:59:18.448779+01:00 naomi sshd[102217]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-06-03T19:59:18.448779+01:00 naomi sshd[102217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.20.186.134 2026-06-03T19:59:20.095924+01:00 naomi sshd[102217]: Failed password for invalid user admin from 1.20.186.134 port 20046 ssh2 2026-06-03T19:59:23.025919+01:00 naomi sshd[102217]: Connection closed by invalid user admin 1.20.186.134 port 20046 [preauth] ... show less	Brute-Force SSH
🇩🇪 Stefan Dreher	2026-06-03 18:54:56 (2 weeks ago)	1.20.186.134 - - [03/Jun/2026:20:54:52 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e ... show more 1.20.186.134 - - [03/Jun/2026:20:54:52 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 157 "-" "-" 1.20.186.134 - - [03/Jun/2026:20:54:54 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 157 "-" "-" 1.20.186.134 - - [03/Jun/2026:20:54:54 +0200] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 153 "-" "libredtail-http" 1.20.186.134 - - [03/Jun/2026:20:54:55 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" 1.20.186.134 - - [03/Jun/2026:20:54:55 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" ... show less	Hacking Brute-Force

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 181.46.57.226

🇨🇳 223.15.246.7

🇨🇦 216.26.236.84

🇰🇷 211.246.182.158

🇸🇾 188.133.2.98

🇮🇶 169.224.117.59

🇮🇶 169.224.96.66

🇫🇷 146.70.194.230

🇩🇪 91.107.130.2

🇳🇱 91.92.40.23

🇨🇦 85.217.149.64

🇳🇱 45.148.10.157

🇽🇰 45.84.119.36

🇮🇶 38.3.229.249

🇧🇪 35.195.246.162

🇪🇸 34.175.118.185

🇨🇳 220.197.14.60

🇪🇨 190.152.237.75

🇯🇵 175.41.211.175

🇳🇱 172.217.96.22