Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Bursa

Region: Bursa

Country: Turkey

Internet Service Provider: ETC

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '94.154.40.0 - 94.154.46.255'

% Abuse contact for '94.154.40.0 - 94.154.46.255' is 'abusep@kharkiv.com'

inetnum:        94.154.40.0 - 94.154.46.255
netname:        NET-94-15-40
country:        US
org:            ORG-VED1-RIPE
admin-c:        VED7-RIPE
tech-c:         VED7-RIPE
status:         ASSIGNED PI
mnt-by:         RIPE-NCC-END-MNT
mnt-by:         ISP5HAT-MNT
mnt-by:         PITLINE-MNT
mnt-routes:     PITLINE-MNT
mnt-domains:    PITLINE-MNT
geofeed:        https://pitline.net/geofeed.csv
abuse-c:        PCAM5-RIPE
created:        2018-03-06T15:17:48Z
last-modified:  2026-08-09T10:09:11Z
source:         RIPE
sponsoring-org: ORG-LA684-RIPE

organisation:   ORG-VED1-RIPE
org-name:       FOP Danik Vyacheslav Evgenievich
country:        UA
reg-nr:         Not Applicable
org-type:       OTHER
address:        61000, Ukraine, Kharkiv
abuse-c:        PTLN-RIPE
mnt-ref:        ISP5HAT-MNT
mnt-by:         ISP5HAT-MNT
created:        2009-09-24T08:57:02Z
last-modified:  2026-05-13T06:03:36Z
source:         RIPE # Filtered

person:         Vyacheslav E. Danik
address:        Ukraine, Kharkiv
phone:          +380675746805
nic-hdl:        VED7-RIPE
mnt-by:         ISP5HAT-MNT
created:        2009-09-24T07:59:31Z
last-modified:  2014-11-06T05:59:23Z
source:         RIPE # Filtered

% Information related to '94.154.43.0/24AS219502'

route:          94.154.43.0/24
origin:         AS219502
created:        2026-06-25T09:38:19Z
last-modified:  2026-06-25T09:38:19Z
source:         RIPE
mnt-by:         PITLINE-MNT

% This query was served by the RIPE Database Query Service version 1.123 (ABERDEEN)
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.154.43.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7185
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;94.154.43.104.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026081200 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 12 19:30:39 CST 2026
;; MSG SIZE  rcvd: 106
Host info
Host 104.43.154.94.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 104.43.154.94.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
45.179.245.31 attackspam
Attempted Brute Force (dovecot)
2020-09-03 04:56:47
51.79.85.154 attackspambots
51.79.85.154 - - [02/Sep/2020:21:29:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2345 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.79.85.154 - - [02/Sep/2020:21:29:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2286 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
51.79.85.154 - - [02/Sep/2020:21:29:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-03 04:54:32
104.198.172.68 attack
104.198.172.68 - - [02/Sep/2020:19:05:48 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.198.172.68 - - [02/Sep/2020:19:33:35 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-03 04:42:00
84.238.55.11 attackspambots
SSH bruteforce
2020-09-03 04:50:27
220.130.10.13 attackspam
Sep  2 20:36:33 electroncash sshd[43522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.10.13 
Sep  2 20:36:33 electroncash sshd[43522]: Invalid user cactiuser from 220.130.10.13 port 49684
Sep  2 20:36:35 electroncash sshd[43522]: Failed password for invalid user cactiuser from 220.130.10.13 port 49684 ssh2
Sep  2 20:40:18 electroncash sshd[44513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.10.13  user=root
Sep  2 20:40:20 electroncash sshd[44513]: Failed password for root from 220.130.10.13 port 54456 ssh2
...
2020-09-03 04:30:10
83.137.149.120 attackbotsspam
83.137.149.120 - - [02/Sep/2020:21:59:57 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
83.137.149.120 - - [02/Sep/2020:21:59:59 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
83.137.149.120 - - [02/Sep/2020:22:00:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-03 04:52:40
91.241.255.71 attackbots
SSH bruteforce
2020-09-03 04:48:58
64.188.3.210 attackspambots
Fail2Ban Ban Triggered
2020-09-03 04:26:42
74.129.23.72 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-09-03 04:41:40
222.186.169.194 attack
Sep  2 22:46:42 abendstille sshd\[17983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Sep  2 22:46:42 abendstille sshd\[17986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Sep  2 22:46:43 abendstille sshd\[17983\]: Failed password for root from 222.186.169.194 port 22860 ssh2
Sep  2 22:46:44 abendstille sshd\[17986\]: Failed password for root from 222.186.169.194 port 36978 ssh2
Sep  2 22:46:46 abendstille sshd\[17983\]: Failed password for root from 222.186.169.194 port 22860 ssh2
...
2020-09-03 04:55:04
218.92.0.138 attack
Sep  2 20:57:15 scw-6657dc sshd[29464]: Failed password for root from 218.92.0.138 port 52534 ssh2
Sep  2 20:57:15 scw-6657dc sshd[29464]: Failed password for root from 218.92.0.138 port 52534 ssh2
Sep  2 20:57:19 scw-6657dc sshd[29464]: Failed password for root from 218.92.0.138 port 52534 ssh2
...
2020-09-03 04:59:23
222.186.173.142 attackspam
Sep  2 22:25:57 sshgateway sshd\[14141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142  user=root
Sep  2 22:25:59 sshgateway sshd\[14141\]: Failed password for root from 222.186.173.142 port 16346 ssh2
Sep  2 22:26:02 sshgateway sshd\[14141\]: Failed password for root from 222.186.173.142 port 16346 ssh2
2020-09-03 04:36:15
37.235.142.10 attack
Automatic report - Banned IP Access
2020-09-03 04:27:00
119.236.251.23 attackbots
Bruteforce detected by fail2ban
2020-09-03 04:53:48
35.187.240.13 attackbots
SQL Injection Attempts
2020-09-03 04:50:50

Recently Reported IPs

207.175.165.43 103.25.103.94 142.93.200.221 20.209.195.97
47.236.251.169 43.106.49.190 153.117.50.103 2409:895a:543b:355:68de:7402:a6ae:22a5
124.239.12.177 18.162.46.139 104.194.81.245 195.114.156.197
194.187.177.5 194.187.177.172 47.88.5.56 165.22.161.152
63.31.1.233 161.35.116.167 120.239.126.224 120.228.139.203