160.242.192.104

Basic Info

City: Lomé

Region: Maritime

Country: Togo

Internet Service Provider: Ministere des Postes et de l'Economie Numerique

Hostname: unknown

Organization: TogoTelecom, Togo

Usage Type: Government

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	suspicious action Fri, 21 Feb 2020 10:18:57 -0300	2020-02-21 23:16:17
attack	445/tcp 445/tcp 445/tcp... [2019-06-06/07-24]15pkt,1pt.(tcp)	2019-07-25 01:31:19

Comments on same subnet:

IP	Type	Details	Datetime
160.242.192.126	attackbots	SMB Server BruteForce Attack	2020-05-04 01:12:49
160.242.192.95	attackbots	Unauthorized connection attempt from IP address 160.242.192.95 on Port 445(SMB)	2019-12-10 04:42:45

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.242.192.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19524
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;160.242.192.104.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 20:53:56 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 104.192.242.160.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 104.192.242.160.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.187.204.32	attackbots	20 attempts against mh-ssh on cloud	2020-05-07 19:34:31
217.182.169.228	attack	May 7 00:27:23 pixelmemory sshd[1095011]: Invalid user a4 from 217.182.169.228 port 50994 May 7 00:27:23 pixelmemory sshd[1095011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.169.228 May 7 00:27:23 pixelmemory sshd[1095011]: Invalid user a4 from 217.182.169.228 port 50994 May 7 00:27:24 pixelmemory sshd[1095011]: Failed password for invalid user a4 from 217.182.169.228 port 50994 ssh2 May 7 00:32:23 pixelmemory sshd[1096016]: Invalid user student from 217.182.169.228 port 33082 ...	2020-05-07 19:27:42
192.144.219.201	attack	SSH Login Bruteforce	2020-05-07 19:34:44
134.249.141.83	attackspam	C2,WP GET //wp-includes/wlwmanifest.xml	2020-05-07 18:58:48
159.65.172.240	attackspambots	$f2bV_matches	2020-05-07 19:06:41
189.15.50.44	attackspam	port 23	2020-05-07 19:31:22
191.235.91.156	attackbotsspam	5x Failed Password	2020-05-07 19:33:45
165.22.234.94	attackspam	May 7 08:31:48 sip sshd[7771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.234.94 May 7 08:31:50 sip sshd[7771]: Failed password for invalid user test from 165.22.234.94 port 60032 ssh2 May 7 08:40:29 sip sshd[11003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.234.94	2020-05-07 19:25:14
180.76.134.70	attackspam	web-1 [ssh] SSH Attack	2020-05-07 19:28:06
144.217.12.194	attackbotsspam	May 7 06:38:39 mail sshd\[57293\]: Invalid user mysql from 144.217.12.194 ...	2020-05-07 18:56:31
41.210.17.170	attack	20/5/6@23:48:18: FAIL: IoT-SSH address from=41.210.17.170 ...	2020-05-07 19:13:23
185.234.218.249	attackspambots	May 7 12:46:43 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=185.118.197.126, session= May 7 12:48:00 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=185.118.197.126, session=<4HsnnQylDKe56tr5> May 7 12:48:07 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=185.234.218.249, lip=185.118.197.126, session=<++9XnQyl5gS56tr5> May 7 12:48:07 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=185.234.218.249, lip=185.118.197.126, session=<3bhVnQyl5vm56tr5> May 7 12:48:08 mail.srvfarm.net dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=P	2020-05-07 19:03:00
161.8.102.115	attackbotsspam	May 7 12:15:44 mout sshd[22577]: Invalid user deploy from 161.8.102.115 port 40630	2020-05-07 19:10:57
197.2.125.75	attack	port 23	2020-05-07 19:16:44
54.36.166.190	attackspam	May 7 05:49:09 scw-6657dc sshd[19208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.166.190 May 7 05:49:09 scw-6657dc sshd[19208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.166.190 May 7 05:49:11 scw-6657dc sshd[19208]: Failed password for invalid user nxitc from 54.36.166.190 port 46032 ssh2 ...	2020-05-07 18:57:25

Recently Reported IPs

45.192.72.221	51.235.140.38	12.242.101.216	182.38.110.37
189.232.142.117	173.178.231.197	104.244.73.23	94.226.78.162
114.236.46.243	177.129.221.78	153.245.154.119	74.208.250.16
100.36.9.183	51.14.66.68	14.170.113.75	109.213.22.81
187.1.183.107	4.140.51.119	59.46.136.54	193.121.126.205