160.242.199.114

Basic Info

City: unknown

Region: unknown

Country: Togo

Internet Service Provider: Ministere des Postes et de l'Economie Numerique

Hostname: unknown

Organization: unknown

Usage Type: Government

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 160.242.199.114 to port 445	2020-01-11 08:11:14

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.242.199.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43981
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;160.242.199.114.		IN	A

;; AUTHORITY SECTION:
.			368	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011002 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 08:11:10 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 114.199.242.160.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 114.199.242.160.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
92.118.38.42	attack	2020-03-07 00:42:00 dovecot_login authenticator failed for $User$ \[92.118.38.42\]: 535 Incorrect authentication data $set_id=mohadhib@no-server.de$ 2020-03-07 00:42:09 dovecot_login authenticator failed for $User$ \[92.118.38.42\]: 535 Incorrect authentication data $set_id=mohadhib@no-server.de$ 2020-03-07 00:42:10 dovecot_login authenticator failed for $User$ \[92.118.38.42\]: 535 Incorrect authentication data $set_id=mohadhib@no-server.de$ 2020-03-07 00:42:13 dovecot_login authenticator failed for $User$ \[92.118.38.42\]: 535 Incorrect authentication data $set_id=mohadhib@no-server.de$ 2020-03-07 00:42:23 dovecot_login authenticator failed for $User$ \[92.118.38.42\]: 535 Incorrect authentication data $set_id=mohamed@no-server.de$ ...	2020-03-07 07:48:18
39.134.26.20	attackspam	Multi-port scan attack.	2020-03-07 07:43:07
80.82.78.20	attackspambots	03/06/2020-17:04:34.581853 80.82.78.20 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-03-07 07:43:55
35.227.35.222	attackspambots	$f2bV_matches	2020-03-07 07:59:51
49.234.44.48	attackbots	Mar 6 23:48:33 MK-Soft-VM5 sshd[18329]: Failed password for root from 49.234.44.48 port 54841 ssh2 ...	2020-03-07 07:49:01
222.186.180.6	attack	Mar 7 00:58:00 nextcloud sshd\[7291\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root Mar 7 00:58:01 nextcloud sshd\[7291\]: Failed password for root from 222.186.180.6 port 45876 ssh2 Mar 7 00:58:05 nextcloud sshd\[7291\]: Failed password for root from 222.186.180.6 port 45876 ssh2	2020-03-07 08:00:27
45.143.220.215	attack	[2020-03-06 19:09:38] NOTICE[1148] chan_sip.c: Registration from '"12345ab" ' failed for '45.143.220.215:5212' - Wrong password [2020-03-06 19:09:38] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-06T19:09:38.824-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="12345ab",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.215/5212",Challenge="60afb55d",ReceivedChallenge="60afb55d",ReceivedHash="9476de808c0d7d85079faff40234a846" [2020-03-06 19:09:38] NOTICE[1148] chan_sip.c: Registration from '"12345ab" ' failed for '45.143.220.215:5212' - Wrong password [2020-03-06 19:09:38] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-06T19:09:38.929-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="12345ab",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remot ...	2020-03-07 08:11:39
141.98.10.137	attackspambots	2020-03-07 00:25:50 dovecot_login authenticator failed for $User$ \[141.98.10.137\]: 535 Incorrect authentication data $set_id=solutions@no-server.de$ 2020-03-07 00:25:58 dovecot_login authenticator failed for $User$ \[141.98.10.137\]: 535 Incorrect authentication data $set_id=solutions@no-server.de$ 2020-03-07 00:25:58 dovecot_login authenticator failed for $User$ \[141.98.10.137\]: 535 Incorrect authentication data $set_id=solutions@no-server.de$ 2020-03-07 00:31:14 dovecot_login authenticator failed for $User$ \[141.98.10.137\]: 535 Incorrect authentication data $set_id=whiskey$ 2020-03-07 00:34:39 dovecot_login authenticator failed for $User$ \[141.98.10.137\]: 535 Incorrect authentication data $set_id=whiskey$ ...	2020-03-07 07:46:14
222.186.30.145	attackspam	Mar 6 23:50:02 localhost sshd[90111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.145 user=root Mar 6 23:50:04 localhost sshd[90111]: Failed password for root from 222.186.30.145 port 36436 ssh2 Mar 6 23:50:06 localhost sshd[90111]: Failed password for root from 222.186.30.145 port 36436 ssh2 Mar 6 23:50:02 localhost sshd[90111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.145 user=root Mar 6 23:50:04 localhost sshd[90111]: Failed password for root from 222.186.30.145 port 36436 ssh2 Mar 6 23:50:06 localhost sshd[90111]: Failed password for root from 222.186.30.145 port 36436 ssh2 Mar 6 23:50:02 localhost sshd[90111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.145 user=root Mar 6 23:50:04 localhost sshd[90111]: Failed password for root from 222.186.30.145 port 36436 ssh2 Mar 6 23:50:06 localhost sshd[90111]: Fa ...	2020-03-07 07:52:04
122.165.207.221	attackbots	Mar 6 13:28:38 hanapaa sshd\[4296\]: Invalid user user from 122.165.207.221 Mar 6 13:28:38 hanapaa sshd\[4296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.207.221 Mar 6 13:28:41 hanapaa sshd\[4296\]: Failed password for invalid user user from 122.165.207.221 port 9430 ssh2 Mar 6 13:36:42 hanapaa sshd\[5019\]: Invalid user loyal from 122.165.207.221 Mar 6 13:36:42 hanapaa sshd\[5019\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.207.221	2020-03-07 07:45:10
84.119.173.125	attackbots	Mar 6 23:27:04 localhost sshd\[20482\]: Invalid user hanshow from 84.119.173.125 port 54306 Mar 6 23:27:04 localhost sshd\[20482\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.119.173.125 Mar 6 23:27:07 localhost sshd\[20482\]: Failed password for invalid user hanshow from 84.119.173.125 port 54306 ssh2	2020-03-07 07:42:56
148.70.113.96	attackspam	Mar 7 00:26:45 h2779839 sshd[10996]: Invalid user astalavista123 from 148.70.113.96 port 57038 Mar 7 00:26:45 h2779839 sshd[10996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.113.96 Mar 7 00:26:45 h2779839 sshd[10996]: Invalid user astalavista123 from 148.70.113.96 port 57038 Mar 7 00:26:47 h2779839 sshd[10996]: Failed password for invalid user astalavista123 from 148.70.113.96 port 57038 ssh2 Mar 7 00:30:03 h2779839 sshd[11048]: Invalid user qwedcxza from 148.70.113.96 port 37492 Mar 7 00:30:03 h2779839 sshd[11048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.113.96 Mar 7 00:30:03 h2779839 sshd[11048]: Invalid user qwedcxza from 148.70.113.96 port 37492 Mar 7 00:30:04 h2779839 sshd[11048]: Failed password for invalid user qwedcxza from 148.70.113.96 port 37492 ssh2 Mar 7 00:36:36 h2779839 sshd[11157]: Invalid user serverg from 148.70.113.96 port 54864 ...	2020-03-07 07:42:42
68.183.68.148	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-03-07 08:09:56
217.19.154.218	attackspambots	Mar 6 23:07:05 MK-Soft-VM5 sshd[17921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.19.154.218 Mar 6 23:07:07 MK-Soft-VM5 sshd[17921]: Failed password for invalid user cpaneleximscanner from 217.19.154.218 port 39419 ssh2 ...	2020-03-07 08:10:41
5.189.167.205	attackbots	Mar 6 23:04:41 163-172-32-151 sshd[3976]: Invalid user elvis from 5.189.167.205 port 55380 ...	2020-03-07 07:38:39

Recently Reported IPs

117.204.240.246	128.46.250.24	163.172.9.28	202.79.168.37
51.79.101.221	186.24.56.101	171.100.22.237	39.98.46.32
123.21.133.203	80.144.109.193	190.53.30.233	64.150.200.34
146.185.201.211	49.88.65.145	79.176.222.129	210.122.10.36
193.56.28.151	187.189.27.97	85.209.0.25	177.139.224.8