Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
167.94.138.155 botsattack
KnownAttacker - BadReputation
2025-07-07 12:50:52
167.94.138.63 botsattackproxy
SSH dictionary attack
2025-06-19 12:58:59
167.94.138.41 attackproxy
VoIP blacklist IP
2025-06-16 12:53:41
167.94.138.120 botsattackproxy
SSH bot
2025-06-03 12:57:02
167.94.138.163 botsattack
Fraud scan
2025-02-07 17:59:37
167.94.138.167 attack
Fraud connect
2025-01-22 13:53:35
167.94.138.147 proxy
VPN fraud
2023-06-07 12:46:29
167.94.138.33 proxy
VPN fraud.
2023-06-07 12:43:58
167.94.138.136 proxy
VPN fraud
2023-06-05 12:53:02
167.94.138.131 proxy
VPN fraud
2023-05-29 13:10:03
167.94.138.124 proxy
VPN fraud
2023-05-29 13:06:05
167.94.138.127 proxy
VPN fraud
2023-05-25 12:38:28
167.94.138.52 proxy
VPN fraud
2023-05-16 12:51:16
167.94.138.152 proxy
Scanner VPN
2023-03-21 13:50:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.94.138.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42272
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.94.138.118.			IN	A

;; AUTHORITY SECTION:
.			211	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 16:33:04 CST 2022
;; MSG SIZE  rcvd: 107
Host info
118.138.94.167.in-addr.arpa domain name pointer scanner-27.ch1.censys-scanner.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
118.138.94.167.in-addr.arpa	name = scanner-27.ch1.censys-scanner.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
139.170.150.253 attackbotsspam
Aug  1 06:04:03 vps333114 sshd[25330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.253  user=root
Aug  1 06:04:06 vps333114 sshd[25330]: Failed password for root from 139.170.150.253 port 60243 ssh2
...
2020-08-01 12:05:19
192.35.169.33 attackbotsspam
port
2020-08-01 12:07:42
141.98.10.196 attackspam
SSH Bruteforce Attempt on Honeypot
2020-08-01 08:38:33
194.87.138.88 attack
Aug  1 01:04:59 ns382633 sshd\[10546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.138.88  user=root
Aug  1 01:05:01 ns382633 sshd\[10546\]: Failed password for root from 194.87.138.88 port 53842 ssh2
Aug  1 01:14:28 ns382633 sshd\[12429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.138.88  user=root
Aug  1 01:14:30 ns382633 sshd\[12429\]: Failed password for root from 194.87.138.88 port 37398 ssh2
Aug  1 01:20:17 ns382633 sshd\[13964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.87.138.88  user=root
2020-08-01 08:27:44
73.75.169.106 attackbots
Aug  1 03:58:27 *** sshd[4118]: User root from 73.75.169.106 not allowed because not listed in AllowUsers
2020-08-01 12:09:53
107.180.84.194 attack
107.180.84.194 - - [01/Aug/2020:04:58:32 +0100] "POST /wp-login.php HTTP/1.1" 200 1786 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
107.180.84.194 - - [01/Aug/2020:04:58:34 +0100] "POST /wp-login.php HTTP/1.1" 200 1779 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
107.180.84.194 - - [01/Aug/2020:04:58:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-01 12:07:16
51.68.230.181 attackspam
Jul 31 20:19:51 ws12vmsma01 sshd[62182]: Failed password for root from 51.68.230.181 port 45504 ssh2
Jul 31 20:23:48 ws12vmsma01 sshd[62852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.ip-51-68-230.eu  user=root
Jul 31 20:23:50 ws12vmsma01 sshd[62852]: Failed password for root from 51.68.230.181 port 59402 ssh2
...
2020-08-01 08:16:37
200.73.219.12 attack
Automatic report - Banned IP Access
2020-08-01 12:02:33
111.95.141.34 attackbots
Aug  1 02:18:16 vmd36147 sshd[9380]: Failed password for root from 111.95.141.34 port 55757 ssh2
Aug  1 02:22:30 vmd36147 sshd[18715]: Failed password for root from 111.95.141.34 port 33280 ssh2
...
2020-08-01 08:26:02
5.154.243.131 attack
Aug  1 04:54:27 rocket sshd[26323]: Failed password for root from 5.154.243.131 port 57648 ssh2
Aug  1 04:58:38 rocket sshd[26998]: Failed password for root from 5.154.243.131 port 35719 ssh2
...
2020-08-01 12:03:52
113.125.98.206 attackspam
$f2bV_matches
2020-08-01 08:15:26
178.32.124.62 attackspam
Web form spam
2020-08-01 08:24:35
125.62.214.220 attackbotsspam
Aug  1 05:58:17 host sshd[16009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.62.214.220  user=root
Aug  1 05:58:20 host sshd[16009]: Failed password for root from 125.62.214.220 port 41614 ssh2
...
2020-08-01 12:11:42
78.85.216.163 attackspam
Brute forcing RDP port 3389
2020-08-01 08:17:12
67.189.245.119 attack
Port scan detected on ports: 85[TCP], 85[TCP], 85[TCP]
2020-08-01 08:23:50

Recently Reported IPs

89.40.111.190 36.133.83.141 81.163.14.140 66.115.176.22
84.54.58.72 84.53.216.38 112.166.166.117 181.128.43.65
54.184.35.43 123.52.217.147 41.239.229.196 120.68.33.241
34.201.15.11 223.104.217.79 91.188.247.153 134.209.98.84
220.80.66.24 193.202.86.129 36.157.243.248 45.201.165.41