Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
botsattackproxy
BOOT SSH
2025-03-13 13:54:18
Comments on same subnet:
IP Type Details Datetime
167.94.145.64 botsattack
Apache attacker IP
2025-07-04 12:34:41
167.94.145.107 botsattackproxy
SSH bot
2025-07-02 13:03:32
167.94.145.103 spamattackproxy
Postfix attacker IP
2025-07-01 12:41:43
167.94.145.102 botsattackproxy
SSH bot
2025-06-10 14:47:50
167.94.145.99 botsattackproxy
SSH bot
2025-03-19 20:57:58
167.94.145.97 spambotsattackproxy
SSH bot
2025-02-10 14:24:23
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.94.145.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21451
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.94.145.104.			IN	A

;; AUTHORITY SECTION:
.			379	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 06:17:27 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 104.145.94.167.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.145.94.167.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.47.242.117 attackspambots
Jun 26 19:35:55 pve1 sshd[15243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.242.117 
Jun 26 19:35:57 pve1 sshd[15243]: Failed password for invalid user anon from 103.47.242.117 port 53152 ssh2
...
2020-06-27 03:26:53
188.168.82.246 attackspam
$f2bV_matches
2020-06-27 03:38:49
129.226.59.53 attackspambots
2020-06-26T16:34:48.145451lavrinenko.info sshd[7735]: Invalid user ora from 129.226.59.53 port 35366
2020-06-26T16:34:48.156159lavrinenko.info sshd[7735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.59.53
2020-06-26T16:34:48.145451lavrinenko.info sshd[7735]: Invalid user ora from 129.226.59.53 port 35366
2020-06-26T16:34:50.025668lavrinenko.info sshd[7735]: Failed password for invalid user ora from 129.226.59.53 port 35366 ssh2
2020-06-26T16:37:23.942465lavrinenko.info sshd[7860]: Invalid user wu from 129.226.59.53 port 47028
...
2020-06-27 03:52:47
185.39.9.150 attackspambots
firewall-block, port(s): 7905/tcp, 7908/tcp
2020-06-27 03:25:36
104.223.197.3 attackspam
 TCP (SYN) 104.223.197.3:53464 -> port 3437, len 44
2020-06-27 03:29:48
128.199.154.93 attack
Lines containing failures of 128.199.154.93
Jun 26 08:56:21 ghostnameioc sshd[11577]: Invalid user admin from 128.199.154.93 port 39140
Jun 26 08:56:21 ghostnameioc sshd[11577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.93 
Jun 26 08:56:23 ghostnameioc sshd[11577]: Failed password for invalid user admin from 128.199.154.93 port 39140 ssh2
Jun 26 08:56:24 ghostnameioc sshd[11577]: Received disconnect from 128.199.154.93 port 39140:11: Bye Bye [preauth]
Jun 26 08:56:24 ghostnameioc sshd[11577]: Disconnected from invalid user admin 128.199.154.93 port 39140 [preauth]
Jun 26 09:11:39 ghostnameioc sshd[12110]: Invalid user sakamoto from 128.199.154.93 port 41666
Jun 26 09:11:39 ghostnameioc sshd[12110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.154.93 
Jun 26 09:11:42 ghostnameioc sshd[12110]: Failed password for invalid user sakamoto from 128.199.154.93 port 41666 ........
------------------------------
2020-06-27 03:31:15
181.40.73.86 attack
5x Failed Password
2020-06-27 03:36:53
61.177.172.142 attackbots
$f2bV_matches
2020-06-27 03:47:49
52.231.35.221 attackspambots
Jun 26 09:37:07 garuda sshd[344195]: Invalid user frappe from 52.231.35.221
Jun 26 09:37:07 garuda sshd[344195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.231.35.221 
Jun 26 09:37:09 garuda sshd[344195]: Failed password for invalid user frappe from 52.231.35.221 port 52834 ssh2
Jun 26 09:37:09 garuda sshd[344195]: Received disconnect from 52.231.35.221: 11: Bye Bye [preauth]
Jun 26 09:38:04 garuda sshd[344382]: Invalid user hellen from 52.231.35.221
Jun 26 09:38:04 garuda sshd[344382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.231.35.221 
Jun 26 09:38:05 garuda sshd[344382]: Failed password for invalid user hellen from 52.231.35.221 port 48242 ssh2
Jun 26 09:38:05 garuda sshd[344382]: Received disconnect from 52.231.35.221: 11: Bye Bye [preauth]
Jun 26 09:43:34 garuda sshd[346346]: Invalid user tftpd from 52.231.35.221
Jun 26 09:43:34 garuda sshd[346346]: pam_unix(sshd:auth........
-------------------------------
2020-06-27 03:37:19
112.85.42.195 attackbots
2020-06-26T21:27:51.772997sd-86998 sshd[15771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
2020-06-26T21:27:54.035679sd-86998 sshd[15771]: Failed password for root from 112.85.42.195 port 40037 ssh2
2020-06-26T21:27:56.450801sd-86998 sshd[15771]: Failed password for root from 112.85.42.195 port 40037 ssh2
2020-06-26T21:27:51.772997sd-86998 sshd[15771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
2020-06-26T21:27:54.035679sd-86998 sshd[15771]: Failed password for root from 112.85.42.195 port 40037 ssh2
2020-06-26T21:27:56.450801sd-86998 sshd[15771]: Failed password for root from 112.85.42.195 port 40037 ssh2
2020-06-26T21:27:51.772997sd-86998 sshd[15771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195  user=root
2020-06-26T21:27:54.035679sd-86998 sshd[15771]: Failed password for root from 112.85.
...
2020-06-27 03:31:40
220.128.100.25 attackbotsspam
1593170538 - 06/26/2020 13:22:18 Host: 220.128.100.25/220.128.100.25 Port: 445 TCP Blocked
2020-06-27 03:22:28
52.233.227.83 attackbotsspam
SSH authentication failure x 6 reported by Fail2Ban
...
2020-06-27 03:22:04
78.128.113.42 attack
[H1.VM10] Blocked by UFW
2020-06-27 03:33:15
218.92.0.145 attack
Jun 26 20:55:49 inter-technics sshd[28124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Jun 26 20:55:51 inter-technics sshd[28124]: Failed password for root from 218.92.0.145 port 12702 ssh2
Jun 26 20:55:54 inter-technics sshd[28124]: Failed password for root from 218.92.0.145 port 12702 ssh2
Jun 26 20:55:49 inter-technics sshd[28124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Jun 26 20:55:51 inter-technics sshd[28124]: Failed password for root from 218.92.0.145 port 12702 ssh2
Jun 26 20:55:54 inter-technics sshd[28124]: Failed password for root from 218.92.0.145 port 12702 ssh2
Jun 26 20:55:49 inter-technics sshd[28124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145  user=root
Jun 26 20:55:51 inter-technics sshd[28124]: Failed password for root from 218.92.0.145 port 12702 ssh2
Jun 26 20:55:54 i
...
2020-06-27 03:18:35
1.255.153.167 attackspambots
Jun 26 19:11:05 scw-tender-jepsen sshd[1933]: Failed password for root from 1.255.153.167 port 44526 ssh2
2020-06-27 03:50:21

Recently Reported IPs

196.52.43.160 167.94.145.166 168.1.128.87 169.53.184.27
196.52.43.151 196.52.43.13 93.174.89.117 93.174.93.156
92.118.160.137 89.248.171.144 92.118.160.131 192.241.94.4
167.94.146.132 167.94.146.40 5.182.39.195 167.94.138.201
185.173.35.243 92.118.161.58 92.118.161.174 168.1.128.62