Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
111.92.243.104 has a threat confidence score of 88%. This IP address from Hong Kong (AS401696, cognetcloud INC) has been observed in 62 honeypot sessions targeting SSH protocols. First observed on April 18, 2026, most recently active April 18, 2026.
Identifies the use of SCP in quiet mode (-q) with “to” mode (-t), indicating the remote system is receiving a file. This pattern is commonly associated with post-authentication payload delivery, lateral movement staging, or tool transfer to a compromised host.