197.242.1.41 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Gabon

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
197.242.145.186	spam	This address sent an email requesting my company to buy IT equipment with a stolen credit card	2020-12-05 08:16:27
197.242.124.229	attackspam	Unauthorized connection attempt from IP address 197.242.124.229 on Port 445(SMB)	2020-09-21 23:37:34
197.242.124.229	attackbotsspam	Unauthorized connection attempt from IP address 197.242.124.229 on Port 445(SMB)	2020-09-21 15:20:23
197.242.124.229	attack	Unauthorized connection attempt from IP address 197.242.124.229 on Port 445(SMB)	2020-09-21 07:15:10
197.242.144.61	attackspambots	SQL Injection in QueryString parameter: dokument1111111111111' UNION SELECT CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45),CHAR(45,120,54,45,81,45),CHAR(45,120,55,45,81,45),CHAR(45,120,56,45,81,45),CHAR(45,120,57,45,81,45),CHAR(45,120,49,48,45,81,45)--	2020-09-13 02:55:42
197.242.144.61	attackbots	SQL Injection in QueryString parameter: dokument1111111111111' UNION SELECT CHAR(45,120,49,45,81,45),CHAR(45,120,50,45,81,45),CHAR(45,120,51,45,81,45),CHAR(45,120,52,45,81,45),CHAR(45,120,53,45,81,45),CHAR(45,120,54,45,81,45),CHAR(45,120,55,45,81,45),CHAR(45,120,56,45,81,45),CHAR(45,120,57,45,81,45),CHAR(45,120,49,48,45,81,45)--	2020-09-12 18:58:46
197.242.100.156	attack	Sep 3 18:48:30 mellenthin postfix/smtpd[20953]: NOQUEUE: reject: RCPT from unknown[197.242.100.156]: 554 5.7.1 Service unavailable; Client host [197.242.100.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.242.100.156 / https://www.spamhaus.org/sbl/query/SBL174938; from= to= proto=ESMTP helo=<[197.242.100.156]>	2020-09-04 22:56:12
197.242.100.156	attack	Sep 3 18:48:30 mellenthin postfix/smtpd[20953]: NOQUEUE: reject: RCPT from unknown[197.242.100.156]: 554 5.7.1 Service unavailable; Client host [197.242.100.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.242.100.156 / https://www.spamhaus.org/sbl/query/SBL174938; from= to= proto=ESMTP helo=<[197.242.100.156]>	2020-09-04 14:28:11
197.242.100.156	attack	Sep 3 18:48:30 mellenthin postfix/smtpd[20953]: NOQUEUE: reject: RCPT from unknown[197.242.100.156]: 554 5.7.1 Service unavailable; Client host [197.242.100.156] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/197.242.100.156 / https://www.spamhaus.org/sbl/query/SBL174938; from= to= proto=ESMTP helo=<[197.242.100.156]>	2020-09-04 06:54:06
197.242.184.29	attackspam	Unauthorized connection attempt detected from IP address 197.242.184.29 to port 334 [T]	2020-08-16 20:17:18
197.242.102.141	attackbots	1596888676 - 08/08/2020 14:11:16 Host: 197.242.102.141/197.242.102.141 Port: 445 TCP Blocked	2020-08-09 02:16:05
197.242.152.135	attackbotsspam	Jul 22 10:51:52 Host-KEWR-E postfix/smtpd[29782]: NOQUEUE: reject: RCPT from spe6.ucebox.co.za[197.242.152.135]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= ...	2020-07-23 00:03:24
197.242.147.68	attackbotsspam	Jul 12 02:38:18 web1 sshd[30248]: Invalid user xzt from 197.242.147.68 port 56110 Jul 12 02:38:18 web1 sshd[30248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.242.147.68 Jul 12 02:38:18 web1 sshd[30248]: Invalid user xzt from 197.242.147.68 port 56110 Jul 12 02:38:20 web1 sshd[30248]: Failed password for invalid user xzt from 197.242.147.68 port 56110 ssh2 Jul 12 02:41:12 web1 sshd[31082]: Invalid user dieter from 197.242.147.68 port 54242 Jul 12 02:41:12 web1 sshd[31082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.242.147.68 Jul 12 02:41:12 web1 sshd[31082]: Invalid user dieter from 197.242.147.68 port 54242 Jul 12 02:41:15 web1 sshd[31082]: Failed password for invalid user dieter from 197.242.147.68 port 54242 ssh2 Jul 12 02:42:04 web1 sshd[31297]: Invalid user leejw from 197.242.147.68 port 34084 ...	2020-07-12 01:01:52
197.242.147.68	attackbots	Jun 30 23:37:03 master sshd[3626]: Failed password for invalid user mysql from 197.242.147.68 port 40384 ssh2	2020-07-02 04:13:34
197.242.1.116	attackbotsspam	Unauthorized connection attempt from IP address 197.242.1.116 on Port 445(SMB)	2020-06-03 03:06:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.242.1.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28638
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;197.242.1.41.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 16:34:33 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 41.1.242.197.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 41.1.242.197.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.106.41.16	attack	Invalid user user from 188.106.41.16 port 51393	2020-04-04 00:27:47
198.245.50.81	attackbotsspam	SSH Login Bruteforce	2020-04-04 00:24:15
195.12.137.210	attackspam	Apr 3 17:58:08 * sshd[30324]: Failed password for root from 195.12.137.210 port 43030 ssh2	2020-04-04 01:09:07
106.13.125.241	attackbotsspam	$f2bV_matches	2020-04-04 00:46:24
107.170.91.121	attackbotsspam	Apr 3 17:42:30 eventyay sshd[17064]: Failed password for root from 107.170.91.121 port 12759 ssh2 Apr 3 17:48:09 eventyay sshd[17260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.91.121 Apr 3 17:48:11 eventyay sshd[17260]: Failed password for invalid user bkroot from 107.170.91.121 port 26100 ssh2 ...	2020-04-04 00:45:37
196.251.61.227	attack	Invalid user zjw from 196.251.61.227 port 47064	2020-04-04 01:08:45
200.252.68.34	attackspambots	Invalid user ftpuser from 200.252.68.34 port 48506	2020-04-04 01:07:10
165.22.107.59	attackbots	Invalid user test from 165.22.107.59 port 50184	2020-04-04 01:18:15
167.172.218.158	attack	Invalid user wanganding from 167.172.218.158 port 50076	2020-04-04 01:16:33
58.247.201.25	attack	Invalid user diego from 58.247.201.25 port 5829	2020-04-04 00:54:09
177.152.16.45	attackspam	Apr 3 16:58:19 MainVPS sshd[14863]: Invalid user zhangxiaofei from 177.152.16.45 port 29631 Apr 3 16:58:19 MainVPS sshd[14863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.152.16.45 Apr 3 16:58:19 MainVPS sshd[14863]: Invalid user zhangxiaofei from 177.152.16.45 port 29631 Apr 3 16:58:21 MainVPS sshd[14863]: Failed password for invalid user zhangxiaofei from 177.152.16.45 port 29631 ssh2 Apr 3 17:03:47 MainVPS sshd[25130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.152.16.45 user=root Apr 3 17:03:49 MainVPS sshd[25130]: Failed password for root from 177.152.16.45 port 10942 ssh2 ...	2020-04-04 00:32:25
51.38.71.36	attackspam	Apr 3 18:04:59 pve sshd[18280]: Failed password for root from 51.38.71.36 port 46382 ssh2 Apr 3 18:08:58 pve sshd[18949]: Failed password for root from 51.38.71.36 port 57166 ssh2	2020-04-04 00:55:57
183.103.115.2	attackspam	5x Failed Password	2020-04-04 00:28:47
138.197.222.141	attackbotsspam	Invalid user jz from 138.197.222.141 port 44786	2020-04-04 01:21:19
193.142.146.21	attackspambots	Invalid user administrator from 193.142.146.21 port 56520	2020-04-04 01:10:19

Recently Reported IPs

209.190.146.36	227.51.205.44	104.181.82.208	247.15.59.170
31.3.53.217	221.177.40.76	14.209.157.141	254.152.246.184
79.127.215.108	55.77.75.67	247.104.168.48	56.169.80.38
159.180.205.18	15.98.59.178	59.26.116.191	146.49.242.207
143.203.34.218	205.79.60.209	69.251.235.31	150.60.235.218