Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Zurich

Region: Zurich

Country: Switzerland

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
94.230.208.148 attack
Malicious brute force vulnerability hacking attacks
2020-08-02 06:30:39
94.230.208.148 attackspambots
CMS (WordPress or Joomla) login attempt.
2020-07-19 20:08:49
94.230.208.147 attack
DATE:2020-07-17 14:13:06, IP:94.230.208.147, PORT:5900 VNC brute force auth on honeypot server (epe-honey1-hq)
2020-07-17 22:32:06
94.230.208.147 attack
(mod_security) mod_security (id:218420) triggered by 94.230.208.147 (CH/Switzerland/tor3e1.digitale-gesellschaft.ch): 5 in the last 3600 secs
2020-07-15 20:24:05
94.230.208.147 attackspambots
AbusiveCrawling
2020-07-07 05:14:43
94.230.208.148 attackspambots
Unauthorized connection attempt detected from IP address 94.230.208.148 to port 21
2020-07-05 17:21:35
94.230.208.147 attack
WordPress user registration, really-simple-captcha js check bypass
2020-05-23 00:24:53
94.230.208.148 attack
Automatic report - Port Scan
2020-05-13 17:45:29
94.230.208.147 attackbots
Automatic report - Banned IP Access
2020-03-12 17:50:03
94.230.208.148 attack
02/09/2020-23:07:35.056693 94.230.208.148 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 89
2020-02-10 07:52:18
94.230.208.147 attack
Unauthorized access detected from banned ip
2020-01-26 22:08:54
94.230.208.148 attackbotsspam
Unauthorized access detected from banned ip
2020-01-14 04:49:31
94.230.208.147 attackspambots
Automatic report - XMLRPC Attack
2019-11-25 22:22:02
94.230.208.147 attackbots
abcdata-sys.de:80 94.230.208.147 - - \[17/Oct/2019:16:55:13 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 497 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_13_6\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/69.0.3497.100 Safari/537.36"
www.goldgier.de 94.230.208.147 \[17/Oct/2019:16:55:15 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 4081 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_13_6\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/69.0.3497.100 Safari/537.36"
2019-10-18 02:44:28
94.230.208.148 attack
Automatic report - XMLRPC Attack
2019-10-17 23:18:40
Whois info:
b
Dig info:
b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 94.230.208.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23832
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;94.230.208.34.			IN	A

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Jun 26 17:54:20 CST 2021
;; MSG SIZE  rcvd: 42

'
Host info
Host 34.208.230.94.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.208.230.94.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
107.172.211.38 attackspambots
2020-09-04 11:34:04.535944-0500  localhost smtpd[27058]: NOQUEUE: reject: RCPT from unknown[107.172.211.38]: 554 5.7.1 Service unavailable; Client host [107.172.211.38] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00ea9005.powertopic.co>
2020-09-05 16:53:42
186.167.249.219 attackbotsspam
Sep  4 18:48:20 mellenthin postfix/smtpd[31060]: NOQUEUE: reject: RCPT from unknown[186.167.249.219]: 554 5.7.1 Service unavailable; Client host [186.167.249.219] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.167.249.219; from= to= proto=ESMTP helo=<[186.167.249.219]>
2020-09-05 16:36:11
192.241.229.77 attack
GET /login HTTP/1.1 403 4291 "-" "Mozilla/5.0 zgrab/0.x"
2020-09-05 16:39:01
91.149.213.154 attackbotsspam
Hi,
Hi,

The IP 91.149.213.154 has just been banned by  after
5 attempts against postfix.


Here is more information about 91.149.213.154 :

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Condhostnameions.
% See hxxp://www.ripe.net/db/support/db-terms-condhostnameions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '91.149.213.0 - 91.149.213.255'

% x@x

inetnum:        91.149.213.0 - 91.149.213.255
org:            ORG-IB111-RIPE
netname:        IPV4-BUYERS-NET
country:        PL
admin-c:        ACRO23711-RIPE
tech-c:         ACRO23711-RIPE
mnt-domains:    MARTON-MNT
mnt-domains:    IPV4BUYERS
mnt-routes:     MARTON-MNT
mnt-routes:     IPV4MNT
status:         ASSIGNED PA
mnt-by:         MARTON-MNT
created:        2007-05-29T09:22:33Z
last-modified:  2020-07-02T08:54:59Z
source:         RIPE

organisation:   ........
------------------------------
2020-09-05 16:51:43
185.220.102.8 attackbots
Sep  5 08:25:16 host sshd[26968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.8
Sep  5 08:25:16 host sshd[26968]: Invalid user admin from 185.220.102.8 port 40697
Sep  5 08:25:18 host sshd[26968]: Failed password for invalid user admin from 185.220.102.8 port 40697 ssh2
...
2020-09-05 17:05:55
171.50.207.134 attackbotsspam
$f2bV_matches
2020-09-05 17:10:40
222.186.175.217 attackspam
Sep  5 10:47:16 nextcloud sshd\[12565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217  user=root
Sep  5 10:47:18 nextcloud sshd\[12565\]: Failed password for root from 222.186.175.217 port 21744 ssh2
Sep  5 10:47:34 nextcloud sshd\[12971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217  user=root
2020-09-05 16:49:43
35.188.166.245 attack
(sshd) Failed SSH login from 35.188.166.245 (US/United States/245.166.188.35.bc.googleusercontent.com): 5 in the last 3600 secs
2020-09-05 16:37:23
72.19.13.150 attack
2020-09-04 11:42:02.635046-0500  localhost smtpd[27340]: NOQUEUE: reject: RCPT from mail-a.webstudioten.com[72.19.13.150]: 554 5.7.1 Service unavailable; Client host [72.19.13.150] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL494153; from= to= proto=ESMTP helo=
2020-09-05 16:54:38
210.13.111.26 attackspambots
Sep  4 22:26:07 firewall sshd[30538]: Invalid user status from 210.13.111.26
Sep  4 22:26:09 firewall sshd[30538]: Failed password for invalid user status from 210.13.111.26 port 36441 ssh2
Sep  4 22:27:46 firewall sshd[30620]: Invalid user admin1 from 210.13.111.26
...
2020-09-05 16:28:48
159.89.38.228 attackspambots
$f2bV_matches
2020-09-05 16:50:07
91.225.172.109 attack
Honeypot attack, port: 445, PTR: 91-225-172-109.dynamic.kuznetsovsk.net.
2020-09-05 16:29:47
89.144.2.215 attackspambots
2020-09-04 11:46:25.207545-0500  localhost smtpd[27340]: NOQUEUE: reject: RCPT from unknown[89.144.2.215]: 450 4.7.25 Client host rejected: cannot find your hostname, [89.144.2.215]; from= to= proto=ESMTP helo=
2020-09-05 16:52:07
216.136.103.252 attack
 TCP (SYN) 216.136.103.252:52511 -> port 1433, len 40
2020-09-05 17:03:55
192.241.223.229 attack
 TCP (SYN) 192.241.223.229:32979 -> port 465, len 40
2020-09-05 16:30:37

Recently Reported IPs

201.131.180.149 117.199.192.76 105.71.18.108 66.23.204.63
119.237.149.153 111.90.50.61 111.90.50.218 181.46.66.151
185.68.253.238 62.140.24.145 212.162.9.150 109.104.59.154
195.122.181.61 171.5.224.93 85.14.242.77 71.187.199.7
71.187.199.40 164.68.127.52 188.126.89.24 114.122.106.199