Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
167.94.138.155 botsattack
KnownAttacker - BadReputation
2025-07-07 12:50:52
167.94.138.63 botsattackproxy
SSH dictionary attack
2025-06-19 12:58:59
167.94.138.41 attackproxy
VoIP blacklist IP
2025-06-16 12:53:41
167.94.138.120 botsattackproxy
SSH bot
2025-06-03 12:57:02
167.94.138.163 botsattack
Fraud scan
2025-02-07 17:59:37
167.94.138.167 attack
Fraud connect
2025-01-22 13:53:35
167.94.138.147 proxy
VPN fraud
2023-06-07 12:46:29
167.94.138.33 proxy
VPN fraud.
2023-06-07 12:43:58
167.94.138.136 proxy
VPN fraud
2023-06-05 12:53:02
167.94.138.131 proxy
VPN fraud
2023-05-29 13:10:03
167.94.138.124 proxy
VPN fraud
2023-05-29 13:06:05
167.94.138.127 proxy
VPN fraud
2023-05-25 12:38:28
167.94.138.52 proxy
VPN fraud
2023-05-16 12:51:16
167.94.138.152 proxy
Scanner VPN
2023-03-21 13:50:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.94.138.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14693
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.94.138.112.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025042900 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 29 22:00:34 CST 2025
;; MSG SIZE  rcvd: 107
Host info
112.138.94.167.in-addr.arpa domain name pointer scanner-27.ch1.censys-scanner.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
112.138.94.167.in-addr.arpa	name = scanner-27.ch1.censys-scanner.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
192.99.68.89 attack
2019-08-31T22:23:47.797526abusebot-8.cloudsearch.cf sshd\[25945\]: Invalid user demouser from 192.99.68.89 port 60830
2019-09-01 06:31:43
129.28.148.242 attack
Sep  1 00:21:43 dedicated sshd[14201]: Invalid user wp from 129.28.148.242 port 52864
2019-09-01 06:37:06
104.244.72.98 attackspam
Aug 31 04:22:40 XXX sshd[19108]: Invalid user fake from 104.244.72.98
Aug 31 04:22:40 XXX sshd[19108]: Received disconnect from 104.244.72.98: 11: Bye Bye [preauth]
Aug 31 04:22:40 XXX sshd[19110]: Invalid user support from 104.244.72.98
Aug 31 04:22:40 XXX sshd[19110]: Received disconnect from 104.244.72.98: 11: Bye Bye [preauth]
Aug 31 04:22:40 XXX sshd[19112]: Invalid user user from 104.244.72.98
Aug 31 04:22:40 XXX sshd[19112]: Received disconnect from 104.244.72.98: 11: Bye Bye [preauth]
Aug 31 04:22:41 XXX sshd[19114]: Invalid user admin from 104.244.72.98
Aug 31 04:22:41 XXX sshd[19114]: Received disconnect from 104.244.72.98: 11: Bye Bye [preauth]
Aug 31 04:22:41 XXX sshd[19116]: User r.r from 104.244.72.98 not allowed because none of user's groups are listed in AllowGroups
Aug 31 04:22:41 XXX sshd[19116]: Received disconnect from 104.244.72.98: 11: Bye Bye [preauth]
Aug 31 04:22:41 XXX sshd[19118]: Invalid user guest from 104.244.72.98
Aug 31 04:22:41 XXX sshd[........
-------------------------------
2019-09-01 07:07:57
23.129.64.182 attack
Aug 31 23:52:53 mout sshd[23012]: Failed password for root from 23.129.64.182 port 16627 ssh2
Aug 31 23:52:56 mout sshd[23012]: Failed password for root from 23.129.64.182 port 16627 ssh2
Aug 31 23:52:59 mout sshd[23012]: Failed password for root from 23.129.64.182 port 16627 ssh2
2019-09-01 06:42:41
138.186.1.26 attackspambots
Aug 31 12:13:58 friendsofhawaii sshd\[13638\]: Invalid user himanshu from 138.186.1.26
Aug 31 12:13:58 friendsofhawaii sshd\[13638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=r-26.1-186-138.nrttelecom.com.br
Aug 31 12:14:01 friendsofhawaii sshd\[13638\]: Failed password for invalid user himanshu from 138.186.1.26 port 61744 ssh2
Aug 31 12:18:30 friendsofhawaii sshd\[14056\]: Invalid user send from 138.186.1.26
Aug 31 12:18:30 friendsofhawaii sshd\[14056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=r-26.1-186-138.nrttelecom.com.br
2019-09-01 06:35:05
37.97.216.193 attackbotsspam
Sep  1 00:53:08 www sshd\[216993\]: Invalid user lyb from 37.97.216.193
Sep  1 00:53:08 www sshd\[216993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.97.216.193
Sep  1 00:53:10 www sshd\[216993\]: Failed password for invalid user lyb from 37.97.216.193 port 53274 ssh2
...
2019-09-01 06:34:03
200.108.143.6 attack
Aug 31 22:54:36 MK-Soft-VM3 sshd\[10223\]: Invalid user helpdesk from 200.108.143.6 port 60664
Aug 31 22:54:36 MK-Soft-VM3 sshd\[10223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6
Aug 31 22:54:37 MK-Soft-VM3 sshd\[10223\]: Failed password for invalid user helpdesk from 200.108.143.6 port 60664 ssh2
...
2019-09-01 07:08:22
182.61.18.17 attackspambots
Aug 31 22:55:28 MK-Soft-VM5 sshd\[19776\]: Invalid user Schueler from 182.61.18.17 port 33640
Aug 31 22:55:28 MK-Soft-VM5 sshd\[19776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.18.17
Aug 31 22:55:30 MK-Soft-VM5 sshd\[19776\]: Failed password for invalid user Schueler from 182.61.18.17 port 33640 ssh2
...
2019-09-01 07:06:56
193.70.90.59 attackspambots
Aug 31 12:45:05 lcprod sshd\[18550\]: Invalid user mega from 193.70.90.59
Aug 31 12:45:05 lcprod sshd\[18550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.ip-193-70-90.eu
Aug 31 12:45:07 lcprod sshd\[18550\]: Failed password for invalid user mega from 193.70.90.59 port 35950 ssh2
Aug 31 12:48:50 lcprod sshd\[18902\]: Invalid user chucky from 193.70.90.59
Aug 31 12:48:50 lcprod sshd\[18902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.ip-193-70-90.eu
2019-09-01 07:09:44
213.120.170.33 attack
Aug 31 12:22:30 lcdev sshd\[30356\]: Invalid user first from 213.120.170.33
Aug 31 12:22:30 lcdev sshd\[30356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host213-120-170-33.in-addr.btopenworld.com
Aug 31 12:22:32 lcdev sshd\[30356\]: Failed password for invalid user first from 213.120.170.33 port 54266 ssh2
Aug 31 12:28:31 lcdev sshd\[30825\]: Invalid user netcool from 213.120.170.33
Aug 31 12:28:31 lcdev sshd\[30825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host213-120-170-33.in-addr.btopenworld.com
2019-09-01 06:43:03
103.249.205.78 attackbots
Aug 31 12:27:12 auw2 sshd\[1306\]: Invalid user musicbot from 103.249.205.78
Aug 31 12:27:12 auw2 sshd\[1306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.205.78
Aug 31 12:27:14 auw2 sshd\[1306\]: Failed password for invalid user musicbot from 103.249.205.78 port 51031 ssh2
Aug 31 12:32:05 auw2 sshd\[1737\]: Invalid user bacula from 103.249.205.78
Aug 31 12:32:05 auw2 sshd\[1737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.205.78
2019-09-01 06:33:42
46.101.235.214 attackspam
Aug 31 12:10:17 php1 sshd\[26268\]: Invalid user test from 46.101.235.214
Aug 31 12:10:17 php1 sshd\[26268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.235.214
Aug 31 12:10:18 php1 sshd\[26268\]: Failed password for invalid user test from 46.101.235.214 port 42788 ssh2
Aug 31 12:15:08 php1 sshd\[27090\]: Invalid user webmin from 46.101.235.214
Aug 31 12:15:08 php1 sshd\[27090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.235.214
2019-09-01 06:30:45
93.39.116.254 attack
Aug 31 22:36:42 hb sshd\[7010\]: Invalid user adishopfr from 93.39.116.254
Aug 31 22:36:42 hb sshd\[7010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-39-116-254.ip75.fastwebnet.it
Aug 31 22:36:44 hb sshd\[7010\]: Failed password for invalid user adishopfr from 93.39.116.254 port 44248 ssh2
Aug 31 22:40:41 hb sshd\[7315\]: Invalid user class2005 from 93.39.116.254
Aug 31 22:40:41 hb sshd\[7315\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-39-116-254.ip75.fastwebnet.it
2019-09-01 06:50:43
141.98.9.130 attack
Aug 31 23:46:12 mail postfix/smtpd\[15824\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Aug 31 23:46:57 mail postfix/smtpd\[15616\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  1 00:17:40 mail postfix/smtpd\[16722\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep  1 00:18:26 mail postfix/smtpd\[16781\]: warning: unknown\[141.98.9.130\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-09-01 06:29:53
106.75.240.46 attackbots
fail2ban
2019-09-01 06:36:11

Recently Reported IPs

196.251.66.177 39.154.15.108 39.154.0.68 223.97.134.116
223.85.243.192 183.209.102.201 120.231.24.121 120.230.21.44
120.229.83.218 117.179.167.6 112.32.243.66 213.44.68.32
187.189.141.183 227.155.35.143 118.194.233.185 101.71.37.211
48.42.65.225 45.91.67.196 223.15.229.34 125.187.31.36