196.189.57.242

Basic Info

City: unknown

Region: unknown

Country: Ethiopia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
196.189.57.244	attackbots	Unauthorized connection attempt from IP address 196.189.57.244 on Port 445(SMB)	2020-07-29 07:51:21
196.189.57.244	attackbotsspam	Unauthorized connection attempt detected from IP address 196.189.57.244 to port 445	2020-07-22 19:12:31
196.189.57.240	attackbots	Unauthorized connection attempt from IP address 196.189.57.240 on Port 445(SMB)	2020-04-03 22:06:44
196.189.57.244	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-19 05:00:31
196.189.57.241	attackbotsspam	Unauthorized connection attempt detected from IP address 196.189.57.241 to port 445	2019-12-24 03:48:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.189.57.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16528
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;196.189.57.242.			IN	A

;; AUTHORITY SECTION:
.			204	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 22:37:39 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 242.57.189.196.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.57.189.196.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.207.244.222	attackspam	5431/tcp [2019-09-23]1pkt	2019-09-24 06:36:20
222.186.180.6	attackbots	Sep 24 00:22:36 MK-Soft-VM5 sshd[17271]: Failed password for root from 222.186.180.6 port 14882 ssh2 Sep 24 00:22:41 MK-Soft-VM5 sshd[17271]: Failed password for root from 222.186.180.6 port 14882 ssh2 ...	2019-09-24 06:24:36
58.57.4.238	attack	Sep 24 00:59:49 elektron postfix/smtpd\[27098\]: warning: unknown\[58.57.4.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 24 00:59:57 elektron postfix/smtpd\[25793\]: warning: unknown\[58.57.4.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 24 01:00:10 elektron postfix/smtpd\[24883\]: warning: unknown\[58.57.4.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-09-24 06:37:20
220.142.54.238	attack	2323/tcp 2323/tcp [2019-09-21/23]2pkt	2019-09-24 06:18:37
197.46.183.184	attackspam	Unauthorised access (Sep 24) SRC=197.46.183.184 LEN=40 TTL=53 ID=38737 TCP DPT=23 WINDOW=7408 SYN	2019-09-24 06:25:29
45.82.153.35	attack	09/24/2019-00:18:36.377860 45.82.153.35 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 42	2019-09-24 06:49:08
195.154.48.30	attack	\[2019-09-23 18:26:26\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '195.154.48.30:64101' - Wrong password \[2019-09-23 18:26:26\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T18:26:26.333-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7fcd8c12cad8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.48.30/64101",Challenge="1b4fecc0",ReceivedChallenge="1b4fecc0",ReceivedHash="ac856a78d83d2c1dc6f85e1831272fcc" \[2019-09-23 18:30:28\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '195.154.48.30:51608' - Wrong password \[2019-09-23 18:30:28\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T18:30:28.388-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="69",SessionID="0x7fcd8c193c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.48.30	2019-09-24 06:33:33
70.71.148.228	attack	Sep 24 01:25:16 www2 sshd\[43648\]: Invalid user Password from 70.71.148.228Sep 24 01:25:18 www2 sshd\[43648\]: Failed password for invalid user Password from 70.71.148.228 port 33592 ssh2Sep 24 01:29:09 www2 sshd\[43902\]: Invalid user 1234567 from 70.71.148.228 ...	2019-09-24 06:42:05
198.108.67.83	attack	firewall-block, port(s): 7090/tcp	2019-09-24 06:19:08
94.191.89.180	attack	Sep 24 00:26:16 lnxded64 sshd[4626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.89.180	2019-09-24 06:39:01
41.45.235.252	attackspam	Sep 23 23:53:38 master sshd[30953]: Failed password for invalid user admin from 41.45.235.252 port 38508 ssh2	2019-09-24 06:45:12
62.234.66.50	attack	Sep 24 00:37:49 microserver sshd[58256]: Invalid user oleta from 62.234.66.50 port 56288 Sep 24 00:37:49 microserver sshd[58256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 Sep 24 00:37:52 microserver sshd[58256]: Failed password for invalid user oleta from 62.234.66.50 port 56288 ssh2 Sep 24 00:41:22 microserver sshd[58854]: Invalid user hammer from 62.234.66.50 port 44648 Sep 24 00:41:22 microserver sshd[58854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 Sep 24 00:51:56 microserver sshd[60198]: Invalid user fan from 62.234.66.50 port 37965 Sep 24 00:51:56 microserver sshd[60198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 Sep 24 00:51:58 microserver sshd[60198]: Failed password for invalid user fan from 62.234.66.50 port 37965 ssh2 Sep 24 00:55:36 microserver sshd[60770]: Invalid user computerbranche from 62.234.66.50 port 54565 Sep 24	2019-09-24 06:39:48
198.211.107.151	attack	Sep 24 00:15:00 rpi sshd[23240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.107.151 Sep 24 00:15:01 rpi sshd[23240]: Failed password for invalid user peuser from 198.211.107.151 port 58483 ssh2	2019-09-24 06:29:07
182.50.151.9	attackspam	Login attack in my domain	2019-09-24 06:52:38
101.89.216.223	attackbotsspam	Sep 23 23:40:47 andromeda postfix/smtpd\[16408\]: warning: unknown\[101.89.216.223\]: SASL LOGIN authentication failed: authentication failure Sep 23 23:40:49 andromeda postfix/smtpd\[9776\]: warning: unknown\[101.89.216.223\]: SASL LOGIN authentication failed: authentication failure Sep 23 23:40:54 andromeda postfix/smtpd\[13270\]: warning: unknown\[101.89.216.223\]: SASL LOGIN authentication failed: authentication failure Sep 23 23:41:00 andromeda postfix/smtpd\[15227\]: warning: unknown\[101.89.216.223\]: SASL LOGIN authentication failed: authentication failure Sep 23 23:41:05 andromeda postfix/smtpd\[9832\]: warning: unknown\[101.89.216.223\]: SASL LOGIN authentication failed: authentication failure	2019-09-24 06:20:01

Recently Reported IPs

196.189.38.50	196.189.37.230	196.190.123.1	196.190.163.10
196.191.101.35	196.191.0.67	196.191.120.242	196.190.222.56
196.191.101.189	196.191.101.86	196.191.120.164	196.191.120.251
196.191.131.152	196.190.69.171	196.191.68.107	196.191.49.42
196.191.48.137	196.192.182.54	196.191.68.41	196.196.160.194