112.64.97.55 - IPInfo

Basic Info

City: Shanghai

Region: Shanghai

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.64.97.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28309
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.64.97.55.			IN	A

;; AUTHORITY SECTION:
.			145	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023030201 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 03 08:50:23 CST 2023
;; MSG SIZE  rcvd: 105

Host info

Host 55.97.64.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.97.64.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.203.201.224	attackspambots	Unauthorized connection attempt detected from IP address 159.203.201.224 to port 7474	2019-12-31 17:51:57
110.17.3.13	attackspambots	Scanning	2019-12-31 18:20:44
222.186.175.140	attackbotsspam	Dec 31 10:46:23 amit sshd\[22061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Dec 31 10:46:26 amit sshd\[22061\]: Failed password for root from 222.186.175.140 port 53768 ssh2 Dec 31 10:46:43 amit sshd\[27838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root ...	2019-12-31 17:50:19
112.85.42.232	attackspambots	--- report --- Dec 31 06:39:46 -0300 sshd: Connection from 112.85.42.232 port 62107	2019-12-31 17:47:04
103.243.164.254	attackbots	Dec 31 07:24:08 srv206 sshd[25126]: Invalid user bagyo from 103.243.164.254 Dec 31 07:24:08 srv206 sshd[25126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.243.164.254 Dec 31 07:24:08 srv206 sshd[25126]: Invalid user bagyo from 103.243.164.254 Dec 31 07:24:11 srv206 sshd[25126]: Failed password for invalid user bagyo from 103.243.164.254 port 37842 ssh2 ...	2019-12-31 18:24:58
139.219.0.20	attackbots	Dec 31 00:35:12 server sshd\[13736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 user=root Dec 31 00:35:14 server sshd\[13736\]: Failed password for root from 139.219.0.20 port 38874 ssh2 Dec 31 11:19:24 server sshd\[3351\]: Invalid user smmsp from 139.219.0.20 Dec 31 11:19:25 server sshd\[3351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Dec 31 11:19:26 server sshd\[3351\]: Failed password for invalid user smmsp from 139.219.0.20 port 34424 ssh2 ...	2019-12-31 18:14:43
113.172.144.95	attack	SMTP-SASL bruteforce attempt	2019-12-31 17:59:29
195.246.46.251	attack	19/12/31@01:24:51: FAIL: Alarm-Network address from=195.246.46.251 19/12/31@01:24:52: FAIL: Alarm-Network address from=195.246.46.251 ...	2019-12-31 17:48:11
112.85.42.180	attackspambots	Dec 31 09:56:31 124388 sshd[5436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Dec 31 09:56:33 124388 sshd[5436]: Failed password for root from 112.85.42.180 port 12742 ssh2 Dec 31 09:56:47 124388 sshd[5436]: error: maximum authentication attempts exceeded for root from 112.85.42.180 port 12742 ssh2 [preauth] Dec 31 09:56:51 124388 sshd[5439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Dec 31 09:56:54 124388 sshd[5439]: Failed password for root from 112.85.42.180 port 34371 ssh2	2019-12-31 18:17:22
197.48.238.11	attack	"SMTP brute force auth login attempt."	2019-12-31 17:58:49
77.231.148.41	attack	/var/log/messages:Dec 30 10:53:19 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1577703199.107:102584): pid=13913 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=13914 suid=74 rport=38366 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=77.231.148.41 terminal=? res=success' /var/log/messages:Dec 30 10:53:19 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1577703199.110:102585): pid=13913 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=13914 suid=74 rport=38366 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=77.231.148.41 terminal=? res=success' /var/log/messages:Dec 30 10:53:19 sanyalnet-cloud-vps fail2ban.filter[1551]: WARNING Determi........ -------------------------------	2019-12-31 18:00:38
62.210.28.57	attackbots	\[2019-12-31 05:02:35\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T05:02:35.482-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01234011972592277524",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.28.57/57191",ACLName="no_extension_match" \[2019-12-31 05:06:51\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T05:06:51.428-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="012345011972592277524",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.28.57/61463",ACLName="no_extension_match" \[2019-12-31 05:12:33\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T05:12:33.005-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0123456011972592277524",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.28.57/53587",	2019-12-31 18:26:17
45.146.201.155	attackbots	Lines containing failures of 45.146.201.155 Dec 31 07:04:20 shared04 postfix/smtpd[21131]: connect from unfasten.jovenesarrechas.com[45.146.201.155] Dec 31 07:04:20 shared04 policyd-spf[27440]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=45.146.201.155; helo=unfasten.skwed.com; envelope-from=x@x Dec x@x Dec 31 07:04:20 shared04 postfix/smtpd[21131]: disconnect from unfasten.jovenesarrechas.com[45.146.201.155] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 31 07:05:41 shared04 postfix/smtpd[21130]: connect from unfasten.jovenesarrechas.com[45.146.201.155] Dec 31 07:05:41 shared04 policyd-spf[27907]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=45.146.201.155; helo=unfasten.skwed.com; envelope-from=x@x Dec x@x Dec 31 07:05:41 shared04 postfix/smtpd[21130]: disconnect from unfasten.jovenesarrechas.com[45.146.201.155] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Dec 31 07:05:42 shared04 post........ ------------------------------	2019-12-31 18:05:50
69.94.136.182	attackspambots	Dec 31 07:09:46 exim[12768]: [1\53] 1imAiu-0003Jw-EK H=pump.kwyali.com (pump.baarro.com) [69.94.136.182] F= rejected after DATA: This message scored 102.3 spam points.	2019-12-31 18:02:53
106.54.253.110	attackspam	Dec 31 08:33:13 mail1 sshd[8612]: Invalid user siedentop from 106.54.253.110 port 56642 Dec 31 08:33:13 mail1 sshd[8612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.253.110 Dec 31 08:33:15 mail1 sshd[8612]: Failed password for invalid user siedentop from 106.54.253.110 port 56642 ssh2 Dec 31 08:33:15 mail1 sshd[8612]: Received disconnect from 106.54.253.110 port 56642:11: Bye Bye [preauth] Dec 31 08:33:15 mail1 sshd[8612]: Disconnected from 106.54.253.110 port 56642 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.54.253.110	2019-12-31 18:11:11

Recently Reported IPs

107.72.18.199	232.26.38.37	169.239.20.154	186.12.24.50
218.248.190.53	95.191.192.191	198.137.157.160	41.89.163.64
185.79.54.149	59.163.97.47	32.151.121.14	206.97.202.15
10.28.31.122	19.125.41.81	46.150.123.166	125.161.144.248
24.88.233.173	121.121.105.63	114.199.198.174	72.239.183.248