198.23.242.162

Basic Info

City: Los Angeles

Region: California

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
198.23.242.107	attack	Wed, 12 Feb 2020 14:09:12 -0500 Received: from [198.23.242.107] (port=58763 helo=mail.chaicwr.surf) From: "Home Warranty Special" Subject: What You Need to Protect..Plus Free Month! spam	2020-02-13 16:20:39

Whois info:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



# start

NetRange:       198.23.128.0 - 198.23.255.255
CIDR:           198.23.128.0/17
NetName:        CC-10
NetHandle:      NET-198-23-128-0-1
Parent:         NET198 (NET-198-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   HostPapa (HOSTP-7)
RegDate:        2012-10-05
Updated:        2024-02-02
Ref:            https://rdap.arin.net/registry/ip/198.23.128.0



OrgName:        HostPapa
OrgId:          HOSTP-7
Address:        325 Delaware Avenue
Address:        Suite 300
City:           Buffalo
StateProv:      NY
PostalCode:     14202
Country:        US
RegDate:        2016-06-06
Updated:        2025-10-05
Ref:            https://rdap.arin.net/registry/entity/HOSTP-7


OrgAbuseHandle: NETAB23-ARIN
OrgAbuseName:   NETABUSE
OrgAbusePhone:  +1-905-315-3455 
OrgAbuseEmail:  net-abuse-global@hostpapa.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NETAB23-ARIN

OrgTechHandle: NETTE9-ARIN
OrgTechName:   NETTECH
OrgTechPhone:  +1-905-315-3455 
OrgTechEmail:  net-tech-global@hostpapa.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NETTE9-ARIN

RAbuseHandle: NETAB27-ARIN
RAbuseName:   NETABUSE-COLOCROSSING
RAbusePhone:  +1-800-518-9716 
RAbuseEmail:  abuse@colocrossing.com
RAbuseRef:    https://rdap.arin.net/registry/entity/NETAB27-ARIN

RTechHandle: NETTE11-ARIN
RTechName:   NETTECH-COLOCROSSING
RTechPhone:  +1-800-518-9716 
RTechEmail:  support@colocrossing.com
RTechRef:    https://rdap.arin.net/registry/entity/NETTE11-ARIN

# end


# start

NetRange:       198.23.242.160 - 198.23.242.191
CIDR:           198.23.242.160/27
NetName:        CC-198-23-242-0-27
NetHandle:      NET-198-23-242-160-1
Parent:         CC-10 (NET-198-23-128-0-1)
NetType:        Reassigned
OriginAS:       
Customer:       RackNerd LLC (C07736807)
RegDate:        2021-01-22
Updated:        2021-01-22
Ref:            https://rdap.arin.net/registry/ip/198.23.242.160


CustName:       RackNerd LLC
Address:        222 N. Mountain Ave. Suite #106
City:           Upland
StateProv:      CA
PostalCode:     91786
Country:        US
RegDate:        2021-01-22
Updated:        2021-01-22
Ref:            https://rdap.arin.net/registry/entity/C07736807

OrgAbuseHandle: NETAB23-ARIN
OrgAbuseName:   NETABUSE
OrgAbusePhone:  +1-905-315-3455 
OrgAbuseEmail:  net-abuse-global@hostpapa.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NETAB23-ARIN

OrgTechHandle: NETTE9-ARIN
OrgTechName:   NETTECH
OrgTechPhone:  +1-905-315-3455 
OrgTechEmail:  net-tech-global@hostpapa.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NETTE9-ARIN

RAbuseHandle: NETAB27-ARIN
RAbuseName:   NETABUSE-COLOCROSSING
RAbusePhone:  +1-800-518-9716 
RAbuseEmail:  abuse@colocrossing.com
RAbuseRef:    https://rdap.arin.net/registry/entity/NETAB27-ARIN

RTechHandle: NETTE11-ARIN
RTechName:   NETTECH-COLOCROSSING
RTechPhone:  +1-800-518-9716 
RTechEmail:  support@colocrossing.com
RTechRef:    https://rdap.arin.net/registry/entity/NETTE11-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.23.242.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;198.23.242.162.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026070903 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 10 07:00:26 CST 2026
;; MSG SIZE  rcvd: 107

Host info

162.242.23.198.in-addr.arpa domain name pointer 198-23-242-162-host.colocrossing.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
162.242.23.198.in-addr.arpa	name = 198-23-242-162-host.colocrossing.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.135	attackspam	Dec 9 06:06:17 php1 sshd\[883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.135 user=root Dec 9 06:06:19 php1 sshd\[883\]: Failed password for root from 218.92.0.135 port 30657 ssh2 Dec 9 06:06:23 php1 sshd\[883\]: Failed password for root from 218.92.0.135 port 30657 ssh2 Dec 9 06:06:27 php1 sshd\[883\]: Failed password for root from 218.92.0.135 port 30657 ssh2 Dec 9 06:06:36 php1 sshd\[906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.135 user=root	2019-12-10 00:26:51
218.92.0.179	attackspambots	Dec 9 06:33:52 web9 sshd\[1110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.179 user=root Dec 9 06:33:54 web9 sshd\[1110\]: Failed password for root from 218.92.0.179 port 5425 ssh2 Dec 9 06:34:12 web9 sshd\[1160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.179 user=root Dec 9 06:34:14 web9 sshd\[1160\]: Failed password for root from 218.92.0.179 port 40347 ssh2 Dec 9 06:34:27 web9 sshd\[1160\]: Failed password for root from 218.92.0.179 port 40347 ssh2	2019-12-10 00:47:39
132.232.113.102	attack	Dec 9 16:57:13 eventyay sshd[10470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.113.102 Dec 9 16:57:15 eventyay sshd[10470]: Failed password for invalid user marimo from 132.232.113.102 port 56087 ssh2 Dec 9 17:05:34 eventyay sshd[10726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.113.102 ...	2019-12-10 00:22:44
114.237.109.155	attackspam	Email spam message	2019-12-10 00:21:22
66.110.216.132	attackbots	[munged]::80 66.110.216.132 - - [09/Dec/2019:16:04:08 +0100] "POST /[munged]: HTTP/1.1" 200 3861 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 66.110.216.132 - - [09/Dec/2019:16:04:09 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 66.110.216.132 - - [09/Dec/2019:16:04:10 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 66.110.216.132 - - [09/Dec/2019:16:04:11 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 66.110.216.132 - - [09/Dec/2019:16:04:12 +0100] "POST /[munged]: HTTP/1.1" 200 3860 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::80 66.110.216.132 - - [09/Dec/2019:16:04:13	2019-12-10 00:16:07
54.38.160.4	attack	Dec 9 06:36:22 hpm sshd\[19677\]: Invalid user bluesk from 54.38.160.4 Dec 9 06:36:22 hpm sshd\[19677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4.ip-54-38-160.eu Dec 9 06:36:24 hpm sshd\[19677\]: Failed password for invalid user bluesk from 54.38.160.4 port 33512 ssh2 Dec 9 06:42:11 hpm sshd\[20381\]: Invalid user joaquim from 54.38.160.4 Dec 9 06:42:11 hpm sshd\[20381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4.ip-54-38-160.eu	2019-12-10 00:54:52
45.141.84.29	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-12-10 00:36:30
129.204.46.170	attackbotsspam	Dec 9 17:38:40 sauna sshd[80721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.46.170 Dec 9 17:38:43 sauna sshd[80721]: Failed password for invalid user superbow from 129.204.46.170 port 42518 ssh2 ...	2019-12-10 00:34:31
117.69.47.231	attack	Email spam message	2019-12-10 00:20:58
49.235.137.58	attackbots	Dec 9 10:57:52 linuxvps sshd\[58054\]: Invalid user faley from 49.235.137.58 Dec 9 10:57:52 linuxvps sshd\[58054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.137.58 Dec 9 10:57:53 linuxvps sshd\[58054\]: Failed password for invalid user faley from 49.235.137.58 port 46632 ssh2 Dec 9 11:05:08 linuxvps sshd\[62899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.137.58 user=sync Dec 9 11:05:10 linuxvps sshd\[62899\]: Failed password for sync from 49.235.137.58 port 38008 ssh2	2019-12-10 00:17:36
41.210.4.33	spamattack	strange mail with just two kink from unknown person	2019-12-10 00:22:06
158.69.196.76	attack	Dec 9 06:23:26 tdfoods sshd\[8896\]: Invalid user walkins from 158.69.196.76 Dec 9 06:23:26 tdfoods sshd\[8896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.ip-158-69-196.net Dec 9 06:23:28 tdfoods sshd\[8896\]: Failed password for invalid user walkins from 158.69.196.76 port 54414 ssh2 Dec 9 06:29:08 tdfoods sshd\[10199\]: Invalid user hhhhhhhhhh from 158.69.196.76 Dec 9 06:29:08 tdfoods sshd\[10199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.ip-158-69-196.net	2019-12-10 00:44:21
187.111.210.160	attack	Lines containing failures of 187.111.210.160 Dec 9 15:54:02 hvs sshd[180531]: error: maximum authentication attempts exceeded for r.r from 187.111.210.160 port 38156 ssh2 [preauth] Dec 9 15:54:02 hvs sshd[180531]: Disconnecting authenticating user r.r 187.111.210.160 port 38156: Too many authentication failures [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.111.210.160	2019-12-10 00:19:20
197.52.156.156	attackbotsspam	SSH bruteforce	2019-12-10 00:38:46
182.176.97.49	attackspam	Dec 9 14:16:15 pi sshd\[30110\]: Invalid user emp from 182.176.97.49 port 58908 Dec 9 14:16:15 pi sshd\[30110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.176.97.49 Dec 9 14:16:17 pi sshd\[30110\]: Failed password for invalid user emp from 182.176.97.49 port 58908 ssh2 Dec 9 15:04:18 pi sshd\[32471\]: Invalid user info from 182.176.97.49 port 41434 Dec 9 15:04:18 pi sshd\[32471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.176.97.49 ...	2019-12-10 00:10:38

Recently Reported IPs

216.118.252.134	2606:4700:10::6816:1116	2606:4700:10::6814:7038	2606:4700:10::6816:4880
20.221.72.241	2606:4700:10::6814:6359	110.78.138.179	164.155.74.64
151.243.11.231	47.92.89.244	2606:4700:10::6816:3713	2606:4700:10::6814:5769
152.32.132.230	62.210.142.167	98.94.81.30	93.158.91.39
54.91.228.244	44.201.163.116	185.139.175.35	178.73.232.160