Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Mozambique

Internet Service Provider: Instituto Nacional de Desenvolvimento da Educaaao

Hostname: unknown

Organization: unknown

Usage Type: University/College/School

Comments:
Type Details Datetime
attack
Mar  6 23:06:19 ArkNodeAT sshd\[18536\]: Invalid user mega from 41.94.97.138
Mar  6 23:06:19 ArkNodeAT sshd\[18536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.94.97.138
Mar  6 23:06:21 ArkNodeAT sshd\[18536\]: Failed password for invalid user mega from 41.94.97.138 port 37756 ssh2
2020-03-07 06:21:56
attack
2019-08-07T01:45:05.718590abusebot-7.cloudsearch.cf sshd\[2907\]: Invalid user vicky from 41.94.97.138 port 56360
2019-08-07 10:10:30
attackspam
SSH-BruteForce
2019-08-04 12:49:43
attackbots
Aug  2 21:55:46 mail sshd\[31316\]: Failed password for root from 41.94.97.138 port 60468 ssh2
Aug  2 22:13:25 mail sshd\[31565\]: Invalid user solr from 41.94.97.138 port 48608
Aug  2 22:13:25 mail sshd\[31565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.94.97.138
...
2019-08-03 05:22:07
attackbots
2019-07-22T09:37:29.008643  sshd[22705]: Invalid user oracle from 41.94.97.138 port 34410
2019-07-22T09:37:29.018885  sshd[22705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.94.97.138
2019-07-22T09:37:29.008643  sshd[22705]: Invalid user oracle from 41.94.97.138 port 34410
2019-07-22T09:37:31.189030  sshd[22705]: Failed password for invalid user oracle from 41.94.97.138 port 34410 ssh2
2019-07-22T09:43:48.303925  sshd[22766]: Invalid user git from 41.94.97.138 port 60818
...
2019-07-22 16:05:05
attackspam
Invalid user sales from 41.94.97.138 port 47762
2019-06-29 22:49:31
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.94.97.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46674
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.94.97.138.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062900 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 29 22:49:20 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 138.97.94.41.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 138.97.94.41.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
190.202.129.172 attackspambots
Invalid user db2admin from 190.202.129.172 port 22736
2020-09-23 18:18:09
65.49.206.125 attackspambots
Time:     Wed Sep 23 04:43:38 2020 +0000
IP:       65.49.206.125 (US/United States/65.49.206.125.16clouds.com)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 23 04:25:07 3 sshd[11236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.49.206.125  user=postgres
Sep 23 04:25:09 3 sshd[11236]: Failed password for postgres from 65.49.206.125 port 43404 ssh2
Sep 23 04:31:53 3 sshd[22335]: Invalid user vnc from 65.49.206.125 port 49910
Sep 23 04:31:54 3 sshd[22335]: Failed password for invalid user vnc from 65.49.206.125 port 49910 ssh2
Sep 23 04:43:33 3 sshd[14775]: Invalid user glassfish from 65.49.206.125 port 34798
2020-09-23 18:19:21
152.242.99.226 attackbots
Sep 22 14:00:35 ws12vmsma01 sshd[10960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.242.99.226  user=root
Sep 22 14:00:37 ws12vmsma01 sshd[10960]: Failed password for root from 152.242.99.226 port 41540 ssh2
Sep 22 14:00:39 ws12vmsma01 sshd[10970]: Invalid user ubnt from 152.242.99.226
...
2020-09-23 18:40:07
112.120.140.81 attack
Automatic report - Banned IP Access
2020-09-23 18:24:22
113.255.231.117 attackspambots
Unauthorized access to SSH at 23/Sep/2020:05:00:32 +0000.
2020-09-23 18:32:55
134.175.129.204 attackbotsspam
Invalid user test from 134.175.129.204 port 60836
2020-09-23 18:35:02
221.214.74.10 attackspam
2020-09-23T10:38:49+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-09-23 18:19:40
222.186.169.194 attack
Sep 23 00:10:09 php1 sshd\[11850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Sep 23 00:10:11 php1 sshd\[11850\]: Failed password for root from 222.186.169.194 port 54634 ssh2
Sep 23 00:10:27 php1 sshd\[11861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Sep 23 00:10:29 php1 sshd\[11861\]: Failed password for root from 222.186.169.194 port 4900 ssh2
Sep 23 00:10:32 php1 sshd\[11861\]: Failed password for root from 222.186.169.194 port 4900 ssh2
2020-09-23 18:14:49
81.224.190.185 attack
Sep 22 16:01:09 roki-contabo sshd\[18943\]: Invalid user ubnt from 81.224.190.185
Sep 22 16:01:09 roki-contabo sshd\[18943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.224.190.185
Sep 22 16:01:12 roki-contabo sshd\[18943\]: Failed password for invalid user ubnt from 81.224.190.185 port 45194 ssh2
Sep 22 19:01:05 roki-contabo sshd\[20534\]: Invalid user guest from 81.224.190.185
Sep 22 19:01:05 roki-contabo sshd\[20534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.224.190.185
...
2020-09-23 18:33:28
84.255.249.179 attack
Sep 23 09:46:51 rancher-0 sshd[231424]: Invalid user system from 84.255.249.179 port 52588
...
2020-09-23 18:27:40
49.88.112.118 attackbotsspam
Sep 23 10:26:43 email sshd\[17112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.118  user=root
Sep 23 10:26:45 email sshd\[17112\]: Failed password for root from 49.88.112.118 port 58271 ssh2
Sep 23 10:26:47 email sshd\[17112\]: Failed password for root from 49.88.112.118 port 58271 ssh2
Sep 23 10:26:49 email sshd\[17112\]: Failed password for root from 49.88.112.118 port 58271 ssh2
Sep 23 10:27:14 email sshd\[17210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.118  user=root
...
2020-09-23 18:31:51
123.205.179.16 attack
Icarus honeypot on github
2020-09-23 18:39:06
192.35.169.38 attackbotsspam
 TCP (SYN) 192.35.169.38:27071 -> port 51001, len 44
2020-09-23 18:37:13
94.102.57.153 attackspam
TCP ports : 3232 / 3614 / 3657
2020-09-23 18:28:33
106.76.209.128 attack
1600794078 - 09/22/2020 19:01:18 Host: 106.76.209.128/106.76.209.128 Port: 445 TCP Blocked
2020-09-23 18:20:56

Recently Reported IPs

114.232.216.104 93.56.161.87 101.96.121.177 103.56.207.125
229.53.0.35 88.236.28.76 180.121.138.75 167.88.7.134
19.6.236.142 37.180.180.57 113.163.130.246 180.121.148.68
134.209.181.225 94.102.51.30 158.69.212.109 38.80.146.101
174.54.9.188 46.132.3.170 189.89.210.193 213.65.47.39