JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.20.187.190

1.20.187.190 was found in our database!

This IP was reported 109 times. Confidence of Abuse is 11%: ?

11%

ISP	TOT Mobile Co LTD
Usage Type	Fixed Line ISP
ASN	AS23969
Domain Name	tot.co.th
Country	🇹🇭 Thailand
City	Pattaya, Chon Buri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.20.187.190

Whois 1.20.187.190

IP Abuse Reports for 1.20.187.190:

This IP address has been reported a total of 109 times from 59 distinct sources. 1.20.187.190 was first reported on October 17th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-04-15 16:23:31 (1 month ago)	Blocked by UFW (TCP on 5555) Source port: 45100 TTL: 49 Packet length: 60 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 5555) Source port: 45100 TTL: 49 Packet length: 60 TOS: 0x00 This report (for 1.20.187.190) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-04-15 10:36:02 (1 month ago)	tcp/5555 (6 or more attempts)	Port Scan
Anonymous	2026-04-15 09:33:58 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇹 Pingger Shikkoken	2025-10-10 22:27:28 (8 months ago)	2025-10-10T22:27:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2025-10-10T22:27:28+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=1.20.187.190 DST=152.53.50.28 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=29781 DF PROTO=TCP SPT=49841 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 show less	Hacking
🇹🇷 rtbh.com.tr	2025-09-25 20:09:00 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-25 10:45:33 (8 months ago)	This IP address carried out 20 port scanning attempts on 24-09-2025. For more information or to repo ... show more This IP address carried out 20 port scanning attempts on 24-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇮🇳 Parth Maniar	2025-09-25 08:23:42 (8 months ago)	This IP address carried out 4 SSH credential attack (attempts) on 24-09-2025. For more information o ... show more This IP address carried out 4 SSH credential attack (attempts) on 24-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-25 00:34:38 (8 months ago)	ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/1.20.187.190	Brute-Force
🇦🇹 urnilxfgbez	2025-09-24 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2025-09-24 20:08:59 (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 bigscoots.com	2025-09-24 16:15:32 (8 months ago)	(sshd) Failed SSH login from 1.20.187.190 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 1.20.187.190 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 24 11:15:17 13086 sshd[16897]: Did not receive identification string from 1.20.187.190 port 46480 Sep 24 11:15:19 13086 sshd[16898]: Invalid user a from 1.20.187.190 port 47396 Sep 24 11:15:21 13086 sshd[16898]: Failed password for invalid user a from 1.20.187.190 port 47396 ssh2 Sep 24 11:15:22 13086 sshd[16900]: Invalid user nil from 1.20.187.190 port 59648 Sep 24 11:15:24 13086 sshd[16902]: Invalid user admin from 1.20.187.190 port 37920 show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-24 16:08:58 (8 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇩🇪 joschuak	2025-09-24 15:45:06 (8 months ago)	SSH brute force attack detected from [1.20.187.190]	Brute-Force SSH
🇩🇪 Veslys	2025-09-24 15:40:29 (8 months ago)	Sep 24 17:39:26 Void-Creations sshd[1405052]: pam_unix(sshd:auth): authentication failure; logname= ... show more Sep 24 17:39:26 Void-Creations sshd[1405052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.20.187.190 Sep 24 17:39:27 Void-Creations sshd[1405052]: Failed password for invalid user a from 1.20.187.190 port 54916 ssh2 Sep 24 17:40:28 Void-Creations sshd[1405833]: Invalid user nil from 1.20.187.190 port 41742 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-24 15:36:36 (8 months ago)	(sshd) Failed SSH login from 1.20.187.190 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 1.20.187.190 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 24 10:36:16 15140 sshd[7498]: Did not receive identification string from 1.20.187.190 port 51338 Sep 24 10:36:18 15140 sshd[7499]: Invalid user a from 1.20.187.190 port 52292 Sep 24 10:36:20 15140 sshd[7499]: Failed password for invalid user a from 1.20.187.190 port 52292 ssh2 Sep 24 10:36:21 15140 sshd[7501]: Invalid user nil from 1.20.187.190 port 35834 Sep 24 10:36:23 15140 sshd[7503]: Invalid user admin from 1.20.187.190 port 42164 show less	Brute-Force SSH

Showing 1 to 15 of 109 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.116.59.144

🇺🇸 147.185.132.226

🇺🇸 66.132.195.28

🇺🇸 17.22.253.252

🇰🇷 211.169.212.206

🇸🇬 161.118.233.120

🇧🇷 129.121.33.174

🇮🇳 103.48.182.114

🇹🇼 35.189.175.181

🇲🇼 196.216.10.109

🇺🇸 165.154.36.71

🇭🇰 152.32.129.236

🇦🇪 132.243.121.237

🇮🇳 103.197.78.69

🇧🇬 79.124.62.230

🇨🇦 52.138.38.186

🇺🇸 47.254.94.100

🇧🇷 45.165.151.174

🇺🇸 165.227.62.247

🇺🇸 144.126.129.217