JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 1.20.254.32

1.20.254.32 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 40%: ?

40%

ISP	TOT Mobile Co LTD
Usage Type	Fixed Line ISP
ASN	AS23969
Domain Name	tot.co.th
Country	🇹🇭 Thailand
City	Khon Kaen, Khon Kaen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 1.20.254.32

Whois 1.20.254.32

IP Abuse Reports for 1.20.254.32:

This IP address has been reported a total of 24 times from 11 distinct sources. 1.20.254.32 was first reported on April 7th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Silly Development	2026-09-21 15:17:50 (1 day ago)	Malicious activity detected from 23969 TOT Public Company Limited towards host sillydev.co.uk (GET H ... show more Malicious activity detected from 23969 TOT Public Company Limited towards host sillydev.co.uk (GET HTTP/2) @ 2026-09-21T15:17:50Z (15 occurrences) show less	DDoS Attack Exploited Host
🇩🇪 xavier-momain.eu	2026-09-20 22:09:55 (2 days ago)	CrowdSec ban — scenario: ssh:bruteforce \| report #2	Brute-Force SSH
🇩🇪 edgeshield	2026-09-17 09:19:08 (6 days ago)	Automated web request flooding / DDoS (EdgeShield WAF).	DDoS Attack
🇹🇷 neron	2026-09-16 20:14:33 (6 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 mnogoweb	2026-09-16 05:27:29 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-15 22:55:44 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 23:11:03 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 23:23:31 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 23:25:39 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 23:27:26 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 mnogoweb	2026-09-16 01:45:58 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-15 18:51:06 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 18:55:33 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 19:07:04 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 19:30:54 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-15 19:45:56 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇩🇪 xavier-momain.eu	2026-09-14 15:37:07 (1 week ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇧🇷 dominioz	2026-09-12 18:56:56 (1 week ago)	1.20.254.32 [1F58] 15:56:43 Authentication [IMAP] - Result=0, [email protected] ... show more 1.20.254.32 [1F58] 15:56:43 Authentication [IMAP] - Result=0, [email protected], Method=2 1.20.254.32 [1F58] 15:56:47 Authentication [IMAP] - Result=0, [email protected], Method=0 1.20.254.32 [1F58] 15:56:51 Authentication [IMAP] - Result=0, [email protected], Method=0 ... show less	Brute-Force
🇺🇸 mnogoweb	2026-09-11 03:02:25 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-10 20:31:59 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 20:42:30 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 20:47:10 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 20:52:44 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 21:02:06 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 mnogoweb	2026-09-11 02:04:59 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-10 19:31:07 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 19:38:59 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 19:41:16 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 19:49:44 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 20:04:57 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 mnogoweb	2026-09-11 00:15:49 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-10 18:06:25 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 18:08:37 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 18:09:08 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 18:09:41 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 18:15:49 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇺🇸 mnogoweb	2026-09-10 23:49:58 (1 week ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-10 17:23:35 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 17:38:20 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 17:47:54 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 17:49:10 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-10 17:49:56 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan
🇮🇹 VHosting	2026-09-10 17:35:03 (1 week ago)	Detected mail brute force attack from different servers	Brute-Force
🇹🇷 neron	2026-09-10 00:55:32 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 mnogoweb	2026-09-08 09:01:06 (2 weeks ago)	(smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: ... show more (smtpauth) Failed SMTP AUTH login from 1.20.254.32 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-08 02:08:00 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-08 02:36:50 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-08 02:40:39 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-08 02:45:18 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) 2026-09-08 03:01:06 login authenticator failed for (1.20.254.32) [1.20.254.32]: 535 Incorrect authentication data ([email protected]) show less	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.64

🇩🇪 194.187.176.238

🇸🇬 165.232.173.246

🇲🇾 113.23.225.9

🇨🇳 219.140.109.106

🇪🇹 196.189.124.218

🇱🇧 194.246.91.27

🇵🇱 176.53.159.198

🇺🇸 165.232.151.215

🇩🇪 165.232.120.149

🇩🇪 165.232.112.191

🇬🇧 165.232.109.174

🇺🇸 165.227.59.3

🇺🇸 165.227.49.151

🇺🇸 158.94.211.63

🇫🇷 156.67.28.38

🇫🇷 91.196.152.19

🇰🇷 61.76.221.51

🇺🇸 195.184.76.197

🇨🇦 165.227.46.8