1.64.14.97 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: CSL Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.64.144.195	attack	Port probing on unauthorized port 5555	2020-03-27 01:18:03
1.64.144.195	attackspambots	Honeypot attack, port: 5555, PTR: 1-64-144-195.static.netvigator.com.	2020-03-25 01:44:26
1.64.14.7	attackbotsspam	5555/tcp 5555/tcp [2020-02-24/03-05]2pkt	2020-03-05 19:52:20
1.64.14.7	attack	Honeypot attack, port: 5555, PTR: 1-64-14-007.static.netvigator.com.	2020-02-25 09:04:59
1.64.14.9	attackbots	Honeypot attack, port: 5555, PTR: 1-64-14-009.static.netvigator.com.	2020-01-23 12:40:17

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.64.14.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19134
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.64.14.97.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025011201 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 11:17:45 CST 2025
;; MSG SIZE  rcvd: 103

Host info

97.14.64.1.in-addr.arpa domain name pointer 1-64-14-097.static.netvigator.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
97.14.64.1.in-addr.arpa	name = 1-64-14-097.static.netvigator.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
163.172.50.60	attack	Feb 16 16:47:07 pornomens sshd\[13528\]: Invalid user serverpilot from 163.172.50.60 port 44526 Feb 16 16:47:07 pornomens sshd\[13528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.50.60 Feb 16 16:47:10 pornomens sshd\[13528\]: Failed password for invalid user serverpilot from 163.172.50.60 port 44526 ssh2 ...	2020-02-17 02:07:18
178.134.188.178	attack	Feb 16 14:46:39 nextcloud sshd\[13174\]: Invalid user tech from 178.134.188.178 Feb 16 14:46:48 nextcloud sshd\[13174\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.134.188.178 Feb 16 14:46:50 nextcloud sshd\[13174\]: Failed password for invalid user tech from 178.134.188.178 port 63506 ssh2	2020-02-17 02:10:46
45.184.24.5	attack	Feb 16 18:42:51 plex sshd[5199]: Invalid user yang from 45.184.24.5 port 55660	2020-02-17 02:02:13
139.162.112.248	attackbots	" "	2020-02-17 02:06:15
185.103.248.146	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 02:33:53
185.103.247.174	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 02:36:39
124.226.184.92	attackspambots	Feb 16 19:16:34 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:16:45 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:16:58 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 11 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:18:49 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:18:59 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=21 ...	2020-02-17 02:01:29
89.197.95.194	attackspam	Invalid user debian from 89.197.95.194 port 54464	2020-02-17 02:16:02
117.58.243.84	attackspambots	Feb 16 07:37:06 hpm sshd\[27875\]: Invalid user nopasswd from 117.58.243.84 Feb 16 07:37:06 hpm sshd\[27875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-84-243-58-117.alwayson.net.bd Feb 16 07:37:08 hpm sshd\[27875\]: Failed password for invalid user nopasswd from 117.58.243.84 port 54158 ssh2 Feb 16 07:41:08 hpm sshd\[28397\]: Invalid user un from 117.58.243.84 Feb 16 07:41:08 hpm sshd\[28397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-84-243-58-117.alwayson.net.bd	2020-02-17 02:20:22
185.104.245.104	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 02:12:32
139.59.89.7	attack	Feb 16 16:09:10 cp sshd[31557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.89.7	2020-02-17 02:14:23
77.138.98.41	attackspam	Lines containing failures of 77.138.98.41 /var/log/apache/pucorp.org.log.1:Feb 9 10:02:27 server01 postfix/smtpd[17180]: connect from unknown[77.138.98.41] /var/log/apache/pucorp.org.log.1:Feb x@x /var/log/apache/pucorp.org.log.1:Feb x@x /var/log/apache/pucorp.org.log.1:Feb 9 10:02:43 server01 postfix/policy-spf[17264]: : Policy action=PREPEND Received-SPF: none (helioangotti.com.br: No applicable sender policy available) receiver=x@x /var/log/apache/pucorp.org.log.1:Feb x@x /var/log/apache/pucorp.org.log.1:Feb 9 10:02:45 server01 postfix/smtpd[17180]: lost connection after DATA from unknown[77.138.98.41] /var/log/apache/pucorp.org.log.1:Feb 9 10:02:45 server01 postfix/smtpd[17180]: disconnect from unknown[77.138.98.41] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=77.138.98.41	2020-02-17 02:11:58
150.116.198.2	attackspam	Feb 16 19:26:51 debian-2gb-nbg1-2 kernel: \[4136831.176045\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=150.116.198.2 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=39735 PROTO=TCP SPT=64013 DPT=23 WINDOW=53792 RES=0x00 SYN URGP=0	2020-02-17 02:37:06
183.182.105.142	attack	1581865644 - 02/16/2020 16:07:24 Host: 183.182.105.142/183.182.105.142 Port: 445 TCP Blocked	2020-02-17 02:13:04
222.252.20.83	attackspambots	1581860778 - 02/16/2020 14:46:18 Host: 222.252.20.83/222.252.20.83 Port: 445 TCP Blocked	2020-02-17 02:38:17

Recently Reported IPs

255.74.37.66	1.85.61.78	1.94.202.158	73.244.1.41
1.101.39.238	97.223.197.78	20.57.146.99	232.88.224.183
164.192.60.78	59.36.181.36	1.91.139.76	1.92.82.5
1.123.1.3	125.55.226.235	26.205.114.44	108.221.231.242
1.92.94.87	230.24.58.179	165.71.108.2	1.161.53.33