198.199.111.242

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
198.199.111.218	attack	(smtpauth) Failed SMTP AUTH login from 198.199.111.218 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-01 08:21:50 login authenticator failed for (ADMIN) [198.199.111.218]: 535 Incorrect authentication data (set_id=finance@safanicu.com)	2020-04-01 15:45:24
198.199.111.218	attackspam	ADMIN	2020-03-25 16:51:45
198.199.111.218	attackspam	ADMIN	2020-03-17 08:50:23
198.199.111.190	attackbots	Automatic report - XMLRPC Attack	2019-11-08 16:47:11
198.199.111.190	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2019-11-01 04:18:01
198.199.111.190	attackbots	30.10.2019 12:45:49 - Wordpress fail Detected by ELinOX-ALM	2019-10-31 03:48:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.199.111.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;198.199.111.242.		IN	A

;; AUTHORITY SECTION:
.			154	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:13:10 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 242.111.199.198.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.111.199.198.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.233.145.188	attackbots	detected by Fail2Ban	2020-05-16 04:04:37
60.30.98.194	attackspam	May 15 19:38:02 localhost sshd[81288]: Invalid user sharks from 60.30.98.194 port 40689 May 15 19:38:02 localhost sshd[81288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.30.98.194 May 15 19:38:02 localhost sshd[81288]: Invalid user sharks from 60.30.98.194 port 40689 May 15 19:38:04 localhost sshd[81288]: Failed password for invalid user sharks from 60.30.98.194 port 40689 ssh2 May 15 19:44:28 localhost sshd[82078]: Invalid user admin from 60.30.98.194 port 15754 ...	2020-05-16 04:05:53
54.36.148.17	attackspam	Automatic report - Banned IP Access	2020-05-16 03:53:17
175.6.135.122	attackbots	May 15 19:56:42 vps333114 sshd[17330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.135.122 May 15 19:56:44 vps333114 sshd[17330]: Failed password for invalid user tunel from 175.6.135.122 port 55074 ssh2 ...	2020-05-16 04:08:52
139.199.0.28	attackspambots	May 15 21:26:33 sip sshd[19847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.0.28 May 15 21:26:34 sip sshd[19847]: Failed password for invalid user deploy from 139.199.0.28 port 48400 ssh2 May 15 21:32:22 sip sshd[22044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.0.28	2020-05-16 04:07:55
190.147.139.216	attack	2020-05-15T20:08:10.063057shield sshd\[26306\]: Invalid user naren from 190.147.139.216 port 44360 2020-05-15T20:08:10.072704shield sshd\[26306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.139.216 2020-05-15T20:08:12.714842shield sshd\[26306\]: Failed password for invalid user naren from 190.147.139.216 port 44360 ssh2 2020-05-15T20:10:59.403516shield sshd\[26776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.147.139.216 user=root 2020-05-15T20:11:01.915079shield sshd\[26776\]: Failed password for root from 190.147.139.216 port 56652 ssh2	2020-05-16 04:17:59
188.64.166.109	attack	1589545185 - 05/15/2020 14:19:45 Host: 188.64.166.109/188.64.166.109 Port: 445 TCP Blocked	2020-05-16 03:55:07
122.15.91.154	attack	Invalid user lc from 122.15.91.154 port 35150	2020-05-16 04:03:57
64.145.79.212	attackspambots	[2020-05-15 15:51:27] NOTICE[1157] chan_sip.c: Registration from '' failed for '64.145.79.212:64324' - Wrong password [2020-05-15 15:51:27] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-15T15:51:27.158-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1725",SessionID="0x7f5f102df088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.145.79.212/64324",Challenge="75bd7f0f",ReceivedChallenge="75bd7f0f",ReceivedHash="dcaea253de9309536204bf08a15fe2c5" [2020-05-15 15:51:41] NOTICE[1157] chan_sip.c: Registration from '' failed for '64.145.79.212:56270' - Wrong password [2020-05-15 15:51:41] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-15T15:51:41.540-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1126",SessionID="0x7f5f10b1c8b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.145.79.212 ...	2020-05-16 04:01:11
223.206.235.79	attackspam	scan r	2020-05-16 03:53:37
196.187.250.139	attackbots	Sql/code injection probe	2020-05-16 04:06:49
121.173.126.110	attackbotsspam	Telnet Server BruteForce Attack	2020-05-16 04:00:53
195.69.222.71	attack	DATE:2020-05-15 20:30:58, IP:195.69.222.71, PORT:ssh SSH brute force auth (docker-dc)	2020-05-16 04:12:54
194.204.194.11	attackbotsspam	Invalid user vnc from 194.204.194.11 port 57138	2020-05-16 03:47:11
213.251.41.225	attackspambots	May 15 21:13:42 Ubuntu-1404-trusty-64-minimal sshd\[9054\]: Invalid user werkstatt from 213.251.41.225 May 15 21:13:42 Ubuntu-1404-trusty-64-minimal sshd\[9054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.225 May 15 21:13:44 Ubuntu-1404-trusty-64-minimal sshd\[9054\]: Failed password for invalid user werkstatt from 213.251.41.225 port 60442 ssh2 May 15 21:24:15 Ubuntu-1404-trusty-64-minimal sshd\[13766\]: Invalid user maustin from 213.251.41.225 May 15 21:24:15 Ubuntu-1404-trusty-64-minimal sshd\[13766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.225	2020-05-16 04:11:55

Recently Reported IPs

5.90.133.8	146.59.184.10	91.188.246.180	8.218.53.38
58.246.206.84	111.193.227.236	105.112.143.252	148.244.143.18
202.107.153.62	189.129.151.82	121.52.219.42	1.162.221.80
1.22.176.14	177.85.17.27	117.217.231.38	191.96.87.28
45.67.213.75	112.81.202.173	109.187.64.30	112.2.168.37