114.102.1.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
114.102.183.219	attack	114.102.183.219 - - \[12/Apr/2020:05:58:30 +0200\] "GET http://api.gxout.com/proxy/check.aspx HTTP/1.1" 400 666 "http://api.gxout.com/proxy/check.aspx" "Mozilla/4.0 $compatible\; MSIE 6.0\; Windows NT 5.1$" ...	2020-04-12 12:15:46
114.102.10.133	attackspam	Unauthorized connection attempt detected from IP address 114.102.10.133 to port 6656 [T]	2020-01-29 19:28:44
114.102.11.107	attackspam	Unauthorized connection attempt detected from IP address 114.102.11.107 to port 6656 [T]	2020-01-28 08:20:41
114.102.13.238	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.102.13.238/ CN - 1H : (293) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 114.102.13.238 CIDR : 114.96.0.0/13 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 45 3H - 90 6H - 90 12H - 93 24H - 93 DateTime : 2019-10-27 04:49:00 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-27 17:32:28
114.102.140.79	attack	Seq 2995002506	2019-10-22 04:38:25
114.102.136.171	attackbotsspam	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 03:57:49
114.102.138.158	attackbots	"Account brute force using dictionary attack against Exchange Online"	2019-08-06 03:57:16
114.102.138.203	attackspam	Brute Force attack against O365 mail account	2019-06-22 03:40:41
114.102.137.169	attackspam	Brute Force attack against O365 mail account	2019-06-22 03:25:27
114.102.138.15	attackspam	Brute Force attack against O365 mail account	2019-06-22 03:25:03
114.102.139.129	attackbots	Brute Force attack against O365 mail account	2019-06-22 03:24:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.102.1.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44540
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.102.1.64.			IN	A

;; AUTHORITY SECTION:
.			166	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022052401 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 25 05:18:38 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 64.1.102.114.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.1.102.114.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.172.139.70	attackspambots	Mar 31 14:28:51 kmh-wmh-001-nbg01 sshd[19074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.139.70 user=r.r Mar 31 14:28:53 kmh-wmh-001-nbg01 sshd[19074]: Failed password for r.r from 167.172.139.70 port 49514 ssh2 Mar 31 14:28:54 kmh-wmh-001-nbg01 sshd[19074]: Received disconnect from 167.172.139.70 port 49514:11: Bye Bye [preauth] Mar 31 14:28:54 kmh-wmh-001-nbg01 sshd[19074]: Disconnected from 167.172.139.70 port 49514 [preauth] Mar 31 14:41:02 kmh-wmh-001-nbg01 sshd[20467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.139.70 user=r.r Mar 31 14:41:04 kmh-wmh-001-nbg01 sshd[20467]: Failed password for r.r from 167.172.139.70 port 46256 ssh2 Mar 31 14:41:04 kmh-wmh-001-nbg01 sshd[20467]: Received disconnect from 167.172.139.70 port 46256:11: Bye Bye [preauth] Mar 31 14:41:04 kmh-wmh-001-nbg01 sshd[20467]: Disconnected from 167.172.139.70 port 46256 [preauth] Mar 31 1........ -------------------------------	2020-04-01 04:51:19
167.71.222.137	attackspam	[MK-Root1] Blocked by UFW	2020-04-01 04:36:47
50.53.179.3	attackbotsspam	SSH Login Bruteforce	2020-04-01 04:28:46
13.95.136.125	attackbots	Brute forcing RDP port 3389	2020-04-01 04:44:11
119.186.36.52	attackspam	Attempting Web app access using PHP	2020-04-01 04:19:09
5.39.88.60	attackbots	20 attempts against mh-ssh on cloud	2020-04-01 04:22:21
122.51.83.175	attack	5x Failed Password	2020-04-01 04:50:01
165.227.113.2	attackspambots	Mar 31 18:43:50 localhost sshd\[6556\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 user=root Mar 31 18:43:52 localhost sshd\[6556\]: Failed password for root from 165.227.113.2 port 41002 ssh2 Mar 31 18:47:45 localhost sshd\[6807\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 user=root Mar 31 18:47:48 localhost sshd\[6807\]: Failed password for root from 165.227.113.2 port 53638 ssh2 Mar 31 18:51:37 localhost sshd\[7092\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.113.2 user=root ...	2020-04-01 04:29:24
27.62.123.37	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-04-01 04:27:09
157.230.230.152	attackspam	$f2bV_matches	2020-04-01 04:42:36
167.71.9.180	attackspam	Mar 31 13:13:24 web8 sshd\[3738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.9.180 user=root Mar 31 13:13:25 web8 sshd\[3738\]: Failed password for root from 167.71.9.180 port 42782 ssh2 Mar 31 13:16:39 web8 sshd\[5345\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.9.180 user=root Mar 31 13:16:41 web8 sshd\[5345\]: Failed password for root from 167.71.9.180 port 47494 ssh2 Mar 31 13:20:10 web8 sshd\[7184\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.9.180 user=root	2020-04-01 04:51:34
89.16.103.241	attackbots	Mar 31 14:21:59 mail.srvfarm.net postfix/smtpd[598933]: NOQUEUE: reject: RCPT from unknown[89.16.103.241]: 554 5.7.1 Service unavailable; Client host [89.16.103.241] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?89.16.103.241; from= to= proto=ESMTP helo= Mar 31 14:21:59 mail.srvfarm.net postfix/smtpd[598933]: NOQUEUE: reject: RCPT from unknown[89.16.103.241]: 554 5.7.1 Service unavailable; Client host [89.16.103.241] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?89.16.103.241; from= to= proto=ESMTP helo= Mar 31 14:22:00 mail.srvfarm.net postfix/smtpd[598933]: NOQUEUE: reject: RCPT from unknown[89.16.103.241]: 554 5.7.1 Service unavailable; Client host [89.16.103.241] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?89.16.103.241; from= to= proto	2020-04-01 04:18:00
118.24.13.248	attackbots	2020-03-31T22:12:43.919931vps751288.ovh.net sshd\[2795\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.13.248 user=root 2020-03-31T22:12:45.357729vps751288.ovh.net sshd\[2795\]: Failed password for root from 118.24.13.248 port 38642 ssh2 2020-03-31T22:15:37.310370vps751288.ovh.net sshd\[2809\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.13.248 user=root 2020-03-31T22:15:39.300149vps751288.ovh.net sshd\[2809\]: Failed password for root from 118.24.13.248 port 45744 ssh2 2020-03-31T22:18:40.007350vps751288.ovh.net sshd\[2823\]: Invalid user sd from 118.24.13.248 port 52866	2020-04-01 04:45:29
86.127.213.242	attackspam	Automatic report - Port Scan Attack	2020-04-01 04:29:41
49.235.108.92	attack	(sshd) Failed SSH login from 49.235.108.92 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 31 20:47:55 srv sshd[25573]: Invalid user cf from 49.235.108.92 port 46356 Mar 31 20:47:57 srv sshd[25573]: Failed password for invalid user cf from 49.235.108.92 port 46356 ssh2 Mar 31 21:04:16 srv sshd[26152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.108.92 user=root Mar 31 21:04:18 srv sshd[26152]: Failed password for root from 49.235.108.92 port 48810 ssh2 Mar 31 21:10:05 srv sshd[26403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.108.92 user=root	2020-04-01 04:40:19

Recently Reported IPs

54.176.241.138	114.102.1.87	190.132.110.169	114.102.1.93
114.102.127.188	114.102.2.10	114.102.2.138	114.102.2.168
114.102.2.200	114.102.2.52	251.233.69.54	114.102.2.57
114.102.2.90	114.102.3.122	114.102.3.131	114.102.3.14
114.102.3.142	114.102.3.155	114.102.3.199	114.102.3.225