Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
167.94.138.155 botsattack
KnownAttacker - BadReputation
2025-07-07 12:50:52
167.94.138.63 botsattackproxy
SSH dictionary attack
2025-06-19 12:58:59
167.94.138.41 attackproxy
VoIP blacklist IP
2025-06-16 12:53:41
167.94.138.120 botsattackproxy
SSH bot
2025-06-03 12:57:02
167.94.138.163 botsattack
Fraud scan
2025-02-07 17:59:37
167.94.138.167 attack
Fraud connect
2025-01-22 13:53:35
167.94.138.147 proxy
VPN fraud
2023-06-07 12:46:29
167.94.138.33 proxy
VPN fraud.
2023-06-07 12:43:58
167.94.138.136 proxy
VPN fraud
2023-06-05 12:53:02
167.94.138.131 proxy
VPN fraud
2023-05-29 13:10:03
167.94.138.124 proxy
VPN fraud
2023-05-29 13:06:05
167.94.138.127 proxy
VPN fraud
2023-05-25 12:38:28
167.94.138.52 proxy
VPN fraud
2023-05-16 12:51:16
167.94.138.152 proxy
Scanner VPN
2023-03-21 13:50:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.94.138.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.94.138.117.			IN	A

;; AUTHORITY SECTION:
.			288	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 09:55:03 CST 2022
;; MSG SIZE  rcvd: 107
Host info
117.138.94.167.in-addr.arpa domain name pointer scanner-27.ch1.censys-scanner.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
117.138.94.167.in-addr.arpa	name = scanner-27.ch1.censys-scanner.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
49.235.153.54 attackbots
Aug 25 13:32:44 mockhub sshd[9565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.153.54
Aug 25 13:32:47 mockhub sshd[9565]: Failed password for invalid user user from 49.235.153.54 port 49626 ssh2
...
2020-08-26 08:20:31
117.94.140.170 attackbotsspam
Aug 26 04:54:46 shivevps sshd[7948]: Bad protocol version identification '\024' from 117.94.140.170 port 36024
Aug 26 04:54:46 shivevps sshd[7907]: Bad protocol version identification '\024' from 117.94.140.170 port 36014
Aug 26 04:54:47 shivevps sshd[8106]: Bad protocol version identification '\024' from 117.94.140.170 port 36060
...
2020-08-26 12:33:34
182.74.25.246 attackbotsspam
Invalid user lgl from 182.74.25.246 port 29837
2020-08-26 12:18:37
118.128.190.153 attackbotsspam
Connection to SSH Honeypot - Detected by HoneypotDB
2020-08-26 12:15:35
159.65.136.141 attackspam
*Port Scan* detected from 159.65.136.141 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 35 seconds
2020-08-26 12:35:52
114.31.20.2 attackbots
Aug 26 04:52:56 shivevps sshd[4236]: Bad protocol version identification '\024' from 114.31.20.2 port 40573
Aug 26 04:53:28 shivevps sshd[4790]: Bad protocol version identification '\024' from 114.31.20.2 port 40672
Aug 26 04:54:51 shivevps sshd[8323]: Bad protocol version identification '\024' from 114.31.20.2 port 41965
...
2020-08-26 12:14:02
2.227.254.144 attack
Aug 26 05:50:55 eventyay sshd[5761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.227.254.144
Aug 26 05:50:57 eventyay sshd[5761]: Failed password for invalid user bungee from 2.227.254.144 port 61930 ssh2
Aug 26 05:55:10 eventyay sshd[5874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.227.254.144
...
2020-08-26 12:29:03
117.67.76.239 attackbots
Aug 26 04:52:58 shivevps sshd[4335]: Bad protocol version identification '\024' from 117.67.76.239 port 15868
Aug 26 04:54:46 shivevps sshd[8012]: Bad protocol version identification '\024' from 117.67.76.239 port 48406
Aug 26 04:54:52 shivevps sshd[8406]: Bad protocol version identification '\024' from 117.67.76.239 port 29750
...
2020-08-26 12:03:32
183.88.131.93 attackbotsspam
Aug 26 04:52:52 shivevps sshd[3843]: Bad protocol version identification '\024' from 183.88.131.93 port 54426
Aug 26 04:52:58 shivevps sshd[4475]: Bad protocol version identification '\024' from 183.88.131.93 port 54610
Aug 26 04:54:50 shivevps sshd[8302]: Bad protocol version identification '\024' from 183.88.131.93 port 57376
...
2020-08-26 12:17:46
107.161.177.66 attackbots
107.161.177.66 - - [26/Aug/2020:04:55:19 +0100] "POST /wp-login.php HTTP/1.1" 200 2082 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
107.161.177.66 - - [26/Aug/2020:04:55:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
107.161.177.66 - - [26/Aug/2020:04:55:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2063 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-26 12:07:56
207.74.77.190 attack
*Port Scan* detected from 207.74.77.190 (US/United States/Michigan/Ann Arbor/-). 4 hits in the last 220 seconds
2020-08-26 12:29:25
180.183.158.254 attackspam
Aug 26 04:53:01 shivevps sshd[4655]: Bad protocol version identification '\024' from 180.183.158.254 port 45527
Aug 26 04:53:01 shivevps sshd[4669]: Bad protocol version identification '\024' from 180.183.158.254 port 45533
Aug 26 04:54:52 shivevps sshd[8407]: Bad protocol version identification '\024' from 180.183.158.254 port 48148
...
2020-08-26 12:05:16
183.236.71.170 attackspambots
Brute force attempt
2020-08-26 12:24:12
103.145.13.172 attackbotsspam
103.145.13.172 was recorded 12 times by 4 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 12, 31, 31
2020-08-26 12:15:56
209.197.191.71 attack
*Port Scan* detected from 209.197.191.71 (CA/Canada/Alberta/Edmonton (Southeast Edmonton)/209-197-191-71.rdns.distributel.net). 4 hits in the last 156 seconds
2020-08-26 12:27:46

Recently Reported IPs

77.81.139.82 121.121.160.94 165.22.213.145 200.56.2.83
31.37.100.254 101.35.252.158 125.44.195.56 1.186.249.222
182.68.13.158 31.56.52.167 223.166.107.55 189.226.65.79
120.86.237.221 217.118.56.51 61.68.164.224 123.231.186.156
125.21.144.134 27.47.42.7 1.46.149.87 162.158.63.242