Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Angra dos Reis

Region: Rio de Janeiro

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
168.194.164.174 attack
WordPress brute force
2020-08-25 05:51:07
168.194.164.202 attackbotsspam
23/tcp 23/tcp
[2020-05-12/06-30]2pkt
2020-07-01 15:36:14
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       168.194.0.0 - 168.194.255.255
CIDR:           168.194.0.0/16
NetName:        LACNIC-ERX-168-194-0-0
NetHandle:      NET-168-194-0-0-1
Parent:         NET168 (NET-168-0-0-0-0)
NetType:        Transferred to LACNIC
OriginAS:       
Organization:   Latin American and Caribbean IP address Regional Registry (LACNIC)
RegDate:        2010-11-03
Updated:        2010-11-17
Comment:        This IP address range is under LACNIC responsibility
Comment:        for further allocations to users in LACNIC region.
Comment:        Please see http://www.lacnic.net/ for further details,
Comment:        or check the WHOIS server located at http://whois.lacnic.net
Ref:            https://rdap.arin.net/registry/ip/168.194.0.0

ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois
ResourceLink:  whois.lacnic.net


OrgName:        Latin American and Caribbean IP address Regional Registry
OrgId:          LACNIC
Address:        Rambla Republica de Mexico 6125
City:           Montevideo
StateProv:      
PostalCode:     11400
Country:        UY
RegDate:        2002-07-27
Updated:        2018-03-15
Ref:            https://rdap.arin.net/registry/entity/LACNIC

ReferralServer:  whois://whois.lacnic.net
ResourceLink:  http://lacnic.net/cgi-bin/lacnic/whois

OrgTechHandle: LACNIC-ARIN
OrgTechName:   LACNIC Whois Info
OrgTechPhone:  +598-2604-2222 
OrgTechEmail:  whois-contact@lacnic.net
OrgTechRef:    https://rdap.arin.net/registry/entity/LACNIC-ARIN

OrgAbuseHandle: LWI100-ARIN
OrgAbuseName:   LACNIC Whois Info
OrgAbusePhone:  +598-2604-2222 
OrgAbuseEmail:  abuse@lacnic.net
OrgAbuseRef:    https://rdap.arin.net/registry/entity/LWI100-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#



Found a referral to whois.lacnic.net.

% IP Client: 124.223.158.242
 % Copyright (c) Nic.br - Use of this data is governed by the Use and
% Privacy Policy at https://registro.br/upp . Distribution,
% commercialization, reproduction, and use for advertising or similar
% purposes are expressly prohibited.
% 2026-09-16T01:00:30-03:00 - 124.223.158.242

inetnum:     168.194.164.0/22
aut-num:     AS265393
abuse-c:     FASOA12
owner:       FIRENET SERVI�OS DE TELECOMUNICA��ES LTDA
ownerid:     12.643.873/0001-00
responsible: LUCIANO JORGE
owner-c:     FASOA12
tech-c:      FASOA12
inetrev:     168.194.164.0/22
nserver:     ns1.nexuslinkdatacenter.com.br [lame - not published]
nsstat:      20260914 UH
nslastaa:    20260102
nserver:     ns2.nexuslinkdatacenter.com.br [lame - not published]
nsstat:      20260914 UH
nslastaa:    20240611
created:     20160804
changed:     20160804

nic-hdl-br:  FASOA12
person:      Fabio Soares
created:     20081124
changed:     20250524

% Security and mail abuse issues should also be addressed to cert.br,
% respectivelly to cert@cert.br and mail-abuse@cert.br
%
% whois.registro.br only accepts exact match queries for domains,
% registrants, contacts, tickets, providers, IPs, and ASNs.
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.194.164.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;168.194.164.3.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026091501 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 12:00:30 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 3.164.194.168.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.164.194.168.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
78.130.181.132 attackbots
Jul 15 02:02:53 django sshd[98772]: reveeclipse mapping checking getaddrinfo for clients-pools.pl.cooolbox.bg [78.130.181.132] failed - POSSIBLE BREAK-IN ATTEMPT!
Jul 15 02:02:53 django sshd[98772]: Invalid user kea from 78.130.181.132
Jul 15 02:02:53 django sshd[98772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.130.181.132 
Jul 15 02:02:55 django sshd[98772]: Failed password for invalid user kea from 78.130.181.132 port 43648 ssh2
Jul 15 02:02:55 django sshd[98773]: Received disconnect from 78.130.181.132: 11: Bye Bye
Jul 15 02:16:41 django sshd[100756]: reveeclipse mapping checking getaddrinfo for clients-pools.pl.cooolbox.bg [78.130.181.132] failed - POSSIBLE BREAK-IN ATTEMPT!
Jul 15 02:16:41 django sshd[100756]: Invalid user dm from 78.130.181.132
Jul 15 02:16:41 django sshd[100756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.130.181.132 
Jul 15 02:16:43 django sshd[1007........
-------------------------------
2020-07-15 10:18:27
116.235.131.148 attackbots
Jul 15 04:55:53 ift sshd\[12015\]: Invalid user mongodb from 116.235.131.148Jul 15 04:55:55 ift sshd\[12015\]: Failed password for invalid user mongodb from 116.235.131.148 port 51426 ssh2Jul 15 05:00:28 ift sshd\[12821\]: Invalid user rose from 116.235.131.148Jul 15 05:00:31 ift sshd\[12821\]: Failed password for invalid user rose from 116.235.131.148 port 44474 ssh2Jul 15 05:05:16 ift sshd\[13480\]: Invalid user shashank from 116.235.131.148
...
2020-07-15 10:10:51
40.87.28.15 attackbotsspam
Jul 15 04:19:40 ns3164893 sshd[14791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.87.28.15
Jul 15 04:19:41 ns3164893 sshd[14791]: Failed password for invalid user admin from 40.87.28.15 port 54462 ssh2
...
2020-07-15 10:23:34
39.45.49.117 attackspam
Jul 14 20:23:02 mellenthin postfix/smtpd[18810]: NOQUEUE: reject: RCPT from unknown[39.45.49.117]: 554 5.7.1 Service unavailable; Client host [39.45.49.117] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/39.45.49.117; from= to= proto=ESMTP helo=<[39.45.49.117]>
2020-07-15 09:47:11
60.251.121.196 attackbotsspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-15 09:52:47
47.92.111.243 attackspambots
400 BAD REQUEST
2020-07-15 10:19:03
116.233.110.11 attackbots
Jul 15 01:06:18 zn008 sshd[9363]: Invalid user aboss from 116.233.110.11
Jul 15 01:06:18 zn008 sshd[9363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.233.110.11 
Jul 15 01:06:20 zn008 sshd[9363]: Failed password for invalid user aboss from 116.233.110.11 port 56322 ssh2
Jul 15 01:06:20 zn008 sshd[9363]: Received disconnect from 116.233.110.11: 11: Bye Bye [preauth]
Jul 15 01:23:50 zn008 sshd[11108]: Invalid user kafka from 116.233.110.11
Jul 15 01:23:50 zn008 sshd[11108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.233.110.11 
Jul 15 01:23:52 zn008 sshd[11108]: Failed password for invalid user kafka from 116.233.110.11 port 49396 ssh2
Jul 15 01:23:52 zn008 sshd[11108]: Received disconnect from 116.233.110.11: 11: Bye Bye [preauth]
Jul 15 01:27:41 zn008 sshd[11582]: Invalid user qjx from 116.233.110.11
Jul 15 01:27:41 zn008 sshd[11582]: pam_unix(sshd:auth): authentication fai........
-------------------------------
2020-07-15 10:15:59
159.203.219.38 attackbots
Jul 15 04:02:12 home sshd[13352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.219.38
Jul 15 04:02:14 home sshd[13352]: Failed password for invalid user abhijit from 159.203.219.38 port 51321 ssh2
Jul 15 04:05:13 home sshd[13703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.219.38
...
2020-07-15 10:15:34
31.135.107.61 attackspambots
Port Scan detected!
...
2020-07-15 09:48:52
129.45.101.114 attackbotsspam
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-07-15 10:06:45
222.112.255.124 attack
Jul 14 22:03:07 NPSTNNYC01T sshd[17698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124
Jul 14 22:03:09 NPSTNNYC01T sshd[17698]: Failed password for invalid user cqc from 222.112.255.124 port 53320 ssh2
Jul 14 22:05:16 NPSTNNYC01T sshd[17859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.112.255.124
...
2020-07-15 10:08:55
213.16.38.11 attackspam
5x Failed Password
2020-07-15 09:58:11
49.0.64.223 attack
Honeypot attack, port: 445, PTR: 49-0-64-0.24.fixed-public.tls1b-bcr.myaisfibre.com.
2020-07-15 09:59:50
185.220.100.245 attackspambots
21 attempts against mh-misbehave-ban on sonic
2020-07-15 10:15:02
49.233.208.45 attackspam
Jul  9 13:27:26 server sshd[1949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.208.45
Jul  9 13:27:28 server sshd[1949]: Failed password for invalid user reno from 49.233.208.45 port 35304 ssh2
Jul  9 13:44:10 server sshd[2938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.208.45
Jul  9 13:44:11 server sshd[2938]: Failed password for invalid user ucpss from 49.233.208.45 port 38114 ssh2
2020-07-15 09:50:05

Recently Reported IPs

199.45.154.48 113.229.120.248 194.187.177.216 95.111.241.206
165.245.177.51 20.169.50.152 59.60.87.69 49.87.216.7
49.85.31.67 49.85.17.13 49.73.87.72 36.25.195.62
27.156.128.34 223.155.98.117 221.227.27.48 220.186.143.111
183.23.150.4 183.161.108.196 182.38.126.37 182.32.177.183