197.242.1.116 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Gabon

Internet Service Provider: IPI9 Home Users on Wimax Network

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt from IP address 197.242.1.116 on Port 445(SMB)	2020-06-03 03:06:31

Comments on same subnet:

IP	Type	Details	Datetime
197.242.145.186	spam	This address sent an email requesting my company to buy IT equipment with a stolen credit card	2020-12-05 08:16:27
197.242.124.229	attackspam	Unauthorized connection attempt from IP address 197.242.124.229 on Port 445(SMB)	2020-09-21 23:37:34
197.242.124.229	attackbotsspam	Unauthorized connection attempt from IP address 197.242.124.229 on Port 445(SMB)	2020-09-21 15:20:23
197.242.124.229	attack	Unauthorized connection attempt from IP address 197.242.124.229 on Port 445(SMB)	2020-09-21 07:15:10
197.242.144.61	attackspambots	SQL Injection in QueryString parameter: dokument1111111111111' UNION SELECT CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45),CHAR(45,120,54,45,81,45),CHAR(45,120,55,45,81,45),CHAR(45,120,56,45,81,45),CHAR(45,120,57,45,81,45),CHAR(45,120,49,48,45,81,45)--	2020-09-13 02:55:42
197.242.144.61	attackbots	SQL Injection in QueryString parameter: dokument1111111111111' UNION SELECT CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45),CHAR(45,120,54,45,81,45),CHAR(45,120,55,45,81,45),CHAR(45,120,56,45,81,45),CHAR(45,120,57,45,81,45),CHAR(45,120,49,48,45,81,45)--	2020-09-12 18:58:46
197.242.100.156	attack	Sep 3 18:48:30 mellenthin postfix/smtpd[20953]: NOQUEUE: reject: RCPT from unknown[197.242.100.156]: 554 5.7.1 Service unavailable; Client host [197.242.100.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.242.100.156 / https://www.spamhaus.org/sbl/query/SBL174938; from= to= proto=ESMTP helo=<[197.242.100.156]>	2020-09-04 22:56:12
197.242.100.156	attack	Sep 3 18:48:30 mellenthin postfix/smtpd[20953]: NOQUEUE: reject: RCPT from unknown[197.242.100.156]: 554 5.7.1 Service unavailable; Client host [197.242.100.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.242.100.156 / https://www.spamhaus.org/sbl/query/SBL174938; from= to= proto=ESMTP helo=<[197.242.100.156]>	2020-09-04 14:28:11
197.242.100.156	attack	Sep 3 18:48:30 mellenthin postfix/smtpd[20953]: NOQUEUE: reject: RCPT from unknown[197.242.100.156]: 554 5.7.1 Service unavailable; Client host [197.242.100.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.242.100.156 / https://www.spamhaus.org/sbl/query/SBL174938; from= to= proto=ESMTP helo=<[197.242.100.156]>	2020-09-04 06:54:06
197.242.184.29	attackspam	Unauthorized connection attempt detected from IP address 197.242.184.29 to port 334 [T]	2020-08-16 20:17:18
197.242.102.141	attackbots	1596888676 - 08/08/2020 14:11:16 Host: 197.242.102.141/197.242.102.141 Port: 445 TCP Blocked	2020-08-09 02:16:05
197.242.152.135	attackbotsspam	Jul 22 10:51:52 Host-KEWR-E postfix/smtpd[29782]: NOQUEUE: reject: RCPT from spe6.ucebox.co.za[197.242.152.135]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= ...	2020-07-23 00:03:24
197.242.147.68	attackbotsspam	Jul 12 02:38:18 web1 sshd[30248]: Invalid user xzt from 197.242.147.68 port 56110 Jul 12 02:38:18 web1 sshd[30248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.242.147.68 Jul 12 02:38:18 web1 sshd[30248]: Invalid user xzt from 197.242.147.68 port 56110 Jul 12 02:38:20 web1 sshd[30248]: Failed password for invalid user xzt from 197.242.147.68 port 56110 ssh2 Jul 12 02:41:12 web1 sshd[31082]: Invalid user dieter from 197.242.147.68 port 54242 Jul 12 02:41:12 web1 sshd[31082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.242.147.68 Jul 12 02:41:12 web1 sshd[31082]: Invalid user dieter from 197.242.147.68 port 54242 Jul 12 02:41:15 web1 sshd[31082]: Failed password for invalid user dieter from 197.242.147.68 port 54242 ssh2 Jul 12 02:42:04 web1 sshd[31297]: Invalid user leejw from 197.242.147.68 port 34084 ...	2020-07-12 01:01:52
197.242.147.68	attackbots	Jun 30 23:37:03 master sshd[3626]: Failed password for invalid user mysql from 197.242.147.68 port 40384 ssh2	2020-07-02 04:13:34
197.242.158.143	attackbotsspam	Repeated RDP login failures. Last user: Camila	2020-04-02 12:45:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.242.1.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8303
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;197.242.1.116.			IN	A

;; AUTHORITY SECTION:
.			457	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060201 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 03 03:06:28 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 116.1.242.197.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 116.1.242.197.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
88.247.94.202	attackbotsspam	Automatic report - Port Scan Attack	2020-03-19 01:56:50
186.4.153.253	attackbots	firewall-block, port(s): 1433/tcp	2020-03-19 01:29:25
182.61.10.28	attackspambots	$f2bV_matches	2020-03-19 02:00:26
118.174.45.29	attackspam	-	2020-03-19 01:52:37
180.76.155.19	attack	Mar 18 14:02:18 ns382633 sshd\[15787\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.155.19 user=root Mar 18 14:02:20 ns382633 sshd\[15787\]: Failed password for root from 180.76.155.19 port 59820 ssh2 Mar 18 14:09:05 ns382633 sshd\[16956\]: Invalid user ubuntu5 from 180.76.155.19 port 51846 Mar 18 14:09:05 ns382633 sshd\[16956\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.155.19 Mar 18 14:09:08 ns382633 sshd\[16956\]: Failed password for invalid user ubuntu5 from 180.76.155.19 port 51846 ssh2	2020-03-19 01:34:07
203.192.204.168	attack	Mar 18 14:54:06 eventyay sshd[1295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.204.168 Mar 18 14:54:09 eventyay sshd[1295]: Failed password for invalid user jatten from 203.192.204.168 port 35874 ssh2 Mar 18 14:58:38 eventyay sshd[1427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.204.168 ...	2020-03-19 01:45:47
51.79.68.147	attack	Invalid user deploy from 51.79.68.147 port 60324	2020-03-19 01:37:05
68.183.134.134	attackspambots	68.183.134.134 - - [18/Mar/2020:13:44:19 +0000] "POST /wp-login.php HTTP/1.1" 200 6627 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.134.134 - - [18/Mar/2020:13:44:24 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-03-19 02:14:34
190.0.30.90	attackspambots	Mar 18 16:27:36 www1 sshd\[33383\]: Invalid user chendaocheng from 190.0.30.90Mar 18 16:27:38 www1 sshd\[33383\]: Failed password for invalid user chendaocheng from 190.0.30.90 port 51012 ssh2Mar 18 16:31:01 www1 sshd\[33784\]: Invalid user tomcat from 190.0.30.90Mar 18 16:31:03 www1 sshd\[33784\]: Failed password for invalid user tomcat from 190.0.30.90 port 50876 ssh2Mar 18 16:34:29 www1 sshd\[34009\]: Invalid user musicbot from 190.0.30.90Mar 18 16:34:32 www1 sshd\[34009\]: Failed password for invalid user musicbot from 190.0.30.90 port 50738 ssh2 ...	2020-03-19 02:15:38
222.186.190.92	attackbots	2020-03-18T18:51:59.905235vps773228.ovh.net sshd[24760]: Failed password for root from 222.186.190.92 port 60796 ssh2 2020-03-18T18:52:03.157966vps773228.ovh.net sshd[24760]: Failed password for root from 222.186.190.92 port 60796 ssh2 2020-03-18T18:52:06.153821vps773228.ovh.net sshd[24760]: Failed password for root from 222.186.190.92 port 60796 ssh2 2020-03-18T18:52:06.154940vps773228.ovh.net sshd[24760]: error: maximum authentication attempts exceeded for root from 222.186.190.92 port 60796 ssh2 [preauth] 2020-03-18T18:52:06.154970vps773228.ovh.net sshd[24760]: Disconnecting: Too many authentication failures [preauth] ...	2020-03-19 01:55:28
112.35.90.128	attackspam	Mar 18 15:02:50 jane sshd[19209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.90.128 Mar 18 15:02:51 jane sshd[19209]: Failed password for invalid user xgridcontroller from 112.35.90.128 port 50746 ssh2 ...	2020-03-19 01:33:37
46.105.149.168	attackbotsspam	Mar 18 18:13:37 ns37 sshd[23773]: Failed password for root from 46.105.149.168 port 45422 ssh2 Mar 18 18:18:02 ns37 sshd[24134]: Failed password for root from 46.105.149.168 port 38182 ssh2 Mar 18 18:22:25 ns37 sshd[24403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.149.168	2020-03-19 01:54:21
157.245.202.159	attack	Mar 18 15:25:57 sshd\[10187\]: User root from 157.245.202.159 not allowed because not listed in AllowUsersMar 18 15:26:00 sshd\[10187\]: Failed password for invalid user root from 157.245.202.159 port 40106 ssh2 ...	2020-03-19 02:05:45
106.12.202.180	attack	Mar 18 18:29:22 legacy sshd[15759]: Failed password for root from 106.12.202.180 port 17989 ssh2 Mar 18 18:33:08 legacy sshd[15891]: Failed password for root from 106.12.202.180 port 63173 ssh2 ...	2020-03-19 01:51:35
51.75.153.255	attackspam	Mar 18 14:18:47 host01 sshd[24456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255 Mar 18 14:18:49 host01 sshd[24456]: Failed password for invalid user speech-dispatcher from 51.75.153.255 port 35426 ssh2 Mar 18 14:26:43 host01 sshd[25690]: Failed password for root from 51.75.153.255 port 54956 ssh2 ...	2020-03-19 01:28:54

Recently Reported IPs

92.42.9.18	52.231.10.53	157.38.243.173	81.16.245.217
101.69.53.221	178.62.57.140	90.143.153.8	119.123.78.2
223.204.233.43	168.232.152.242	5.16.120.46	79.79.44.100
113.140.69.198	109.162.249.67	122.62.16.176	59.57.182.41
2a01:4f8:192:80c4::2	1.175.9.27	157.44.84.109	54.202.144.168