92.242.18.198 - IPInfo

Basic Info

City: Yekaterinburg

Region: Sverdlovskaya Oblast'

Country: Russia

Internet Service Provider: LLC Komtehcentr

Hostname: unknown

Organization: LLC KomTehCentr

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Honeypot attack, port: 445, PTR: PTR record not found	2019-08-17 02:52:11

Comments on same subnet:

IP	Type	Details	Datetime
92.242.186.12	attackbots	Jul 20 13:46:52 our-server-hostname postfix/smtpd[29798]: connect from unknown[92.242.186.12] Jul 20 13:46:54 our-server-hostname postfix/smtpd[27547]: connect from unknown[92.242.186.12] Jul 20 13:46:55 our-server-hostname postfix/smtpd[29475]: connect from unknown[92.242.186.12] Jul x@x Jul 20 13:46:56 our-server-hostname postfix/smtpd[29798]: 5C54AA4007C: client=unknown[92.242.186.12] Jul x@x .... truncated .... au>, Message-ID: , mail_id: yqHX3I5Fpxua, Hhostnames: -, size: 6765, queued_as: 72D32A40081, 99 ms Jul 20 13:49:34 our-server-hostname amavis[29483]: (29483-08) Passed CLEAN, [92.242.186.12] [92.242.186.12] , mail_id: cOZcETJYD9tM, Hhostnames: -, size: 6459, queued_as: 74EB9A400A0, 104 ms Jul x@x Jul 20 13:49:34 our-server-hostname postfix/smtpd[27547]: CD668A4007C: client=unknown[92.242.186.12] Jul 20 13:49:35 our-server-hostname postfix/smtpd[30882]: 4C770A40081: client=unknown[127.0.0.1], orig_client=unknown[92.242.186.12] Jul 20 13:49:35 our-se........ -------------------------------	2020-07-20 14:22:34
92.242.186.6	attackbots	Jul 20 01:22:37 mail postfix/smtpd[3812]: connect from approachdoll.co[92.242.186.6] Jul x@x Jul x@x Jul x@x Jul 20 01:22:43 mail postfix/smtpd[3812]: disconnect from approachdoll.co[92.242.186.6] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Jul 20 01:24:43 mail postfix/smtpd[3812]: connect from approachdoll.co[92.242.186.6] Jul x@x Jul x@x Jul x@x Jul 20 01:24:44 mail postfix/smtpd[3812]: disconnect from approachdoll.co[92.242.186.6] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=92.242.186.6	2020-07-20 08:15:51

Type

Details

Datetime

92.242.186.12

attackbots

Jul 20 13:46:52 our-server-hostname postfix/smtpd[29798]: connect from unknown[92.242.186.12]
Jul 20 13:46:54 our-server-hostname postfix/smtpd[27547]: connect from unknown[92.242.186.12]
Jul 20 13:46:55 our-server-hostname postfix/smtpd[29475]: connect from unknown[92.242.186.12]
Jul x@x
Jul 20 13:46:56 our-server-hostname postfix/smtpd[29798]: 5C54AA4007C: client=unknown[92.242.186.12]
Jul x@x
.... truncated .... 
au>, Message-ID: , mail_id: yqHX3I5Fpxua, Hhostnames: -, size: 6765, queued_as: 72D32A40081, 99 ms
Jul 20 13:49:34 our-server-hostname amavis[29483]: (29483-08) Passed CLEAN, [92.242.186.12] [92.242.186.12] , mail_id: cOZcETJYD9tM, Hhostnames: -, size: 6459, queued_as: 74EB9A400A0, 104 ms
Jul x@x
Jul 20 13:49:34 our-server-hostname postfix/smtpd[27547]: CD668A4007C: client=unknown[92.242.186.12]
Jul 20 13:49:35 our-server-hostname postfix/smtpd[30882]: 4C770A40081: client=unknown[127.0.0.1], orig_client=unknown[92.242.186.12]
Jul 20 13:49:35 our-se........
-------------------------------

2020-07-20 14:22:34

92.242.186.6

attackbots

Jul 20 01:22:37 mail postfix/smtpd[3812]: connect from approachdoll.co[92.242.186.6]
Jul x@x
Jul x@x
Jul x@x
Jul 20 01:22:43 mail postfix/smtpd[3812]: disconnect from approachdoll.co[92.242.186.6] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5
Jul 20 01:24:43 mail postfix/smtpd[3812]: connect from approachdoll.co[92.242.186.6]
Jul x@x
Jul x@x
Jul x@x
Jul 20 01:24:44 mail postfix/smtpd[3812]: disconnect from approachdoll.co[92.242.186.6] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=92.242.186.6

2020-07-20 08:15:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.242.18.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23943
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.242.18.198.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 02:52:03 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 198.18.242.92.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 198.18.242.92.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.204.89.115	attack	Mar 25 21:54:55 powerpi2 sshd[27928]: Invalid user test12 from 129.204.89.115 port 60450 Mar 25 21:54:58 powerpi2 sshd[27928]: Failed password for invalid user test12 from 129.204.89.115 port 60450 ssh2 Mar 25 22:03:40 powerpi2 sshd[28583]: Invalid user caleb from 129.204.89.115 port 55604 ...	2020-03-26 06:43:22
36.227.167.238	attackspambots	Telnet Server BruteForce Attack	2020-03-26 07:11:07
183.89.212.85	attackspambots	B: Magento admin pass test (wrong country)	2020-03-26 07:03:51
198.22.162.61	attackbots	Mar 25 18:24:48 ny01 sshd[23646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.22.162.61 Mar 25 18:24:50 ny01 sshd[23646]: Failed password for invalid user succes from 198.22.162.61 port 52220 ssh2 Mar 25 18:28:34 ny01 sshd[25724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.22.162.61	2020-03-26 06:49:13
193.70.88.213	attack	Mar 25 23:09:24 eventyay sshd[19284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.88.213 Mar 25 23:09:26 eventyay sshd[19284]: Failed password for invalid user arturo from 193.70.88.213 port 47078 ssh2 Mar 25 23:13:15 eventyay sshd[19391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.88.213 ...	2020-03-26 07:12:19
190.145.5.170	attackspambots	" "	2020-03-26 06:49:44
91.230.153.121	attackbotsspam	Mar 25 23:48:35 debian-2gb-nbg1-2 kernel: \[7435593.001689\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=91.230.153.121 DST=195.201.40.59 LEN=40 TOS=0x10 PREC=0x60 TTL=245 ID=33991 PROTO=TCP SPT=49047 DPT=56052 WINDOW=1024 RES=0x00 SYN URGP=0	2020-03-26 06:58:14
139.199.164.21	attackbotsspam	Mar 25 18:46:35 vps46666688 sshd[25456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.21 Mar 25 18:46:37 vps46666688 sshd[25456]: Failed password for invalid user sian from 139.199.164.21 port 50082 ssh2 ...	2020-03-26 06:40:41
13.92.238.216	attackspam	RDP Brute-Force (Grieskirchen RZ2)	2020-03-26 06:41:29
23.236.118.161	attackbotsspam	Invalid user studentisch from 23.236.118.161 port 43914	2020-03-26 07:08:15
14.116.216.176	attackspambots	Mar 25 14:13:06: Invalid user pdf from 14.116.216.176 port 35909	2020-03-26 07:15:43
106.75.72.100	attack	Mar 25 22:39:44 xeon sshd[57365]: Failed password for invalid user masmokhtar from 106.75.72.100 port 50814 ssh2	2020-03-26 06:43:35
61.157.91.111	attackbotsspam	03/25/2020-17:43:11.182670 61.157.91.111 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-03-26 07:15:22
13.75.89.89	attackbotsspam	Mar 26 00:07:26 www4 sshd\[46846\]: Invalid user xb from 13.75.89.89 Mar 26 00:07:26 www4 sshd\[46846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.75.89.89 Mar 26 00:07:28 www4 sshd\[46846\]: Failed password for invalid user xb from 13.75.89.89 port 45112 ssh2 ...	2020-03-26 07:03:20
185.220.100.255	attackspambots	Mar 26 00:08:12 vpn01 sshd[27224]: Failed password for root from 185.220.100.255 port 11256 ssh2 Mar 26 00:08:15 vpn01 sshd[27224]: Failed password for root from 185.220.100.255 port 11256 ssh2 ...	2020-03-26 07:17:04

Recently Reported IPs

110.35.63.97	208.168.142.6	38.167.157.29	54.240.229.173
191.53.248.211	209.211.74.216	93.241.35.131	181.53.12.6
163.221.126.8	194.61.24.56	53.108.21.152	120.204.178.215
177.129.206.93	131.161.230.190	174.177.186.218	217.52.89.116
24.49.96.117	98.204.153.141	188.28.217.44	128.125.230.13