Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Sweden

Internet Service Provider: Bahnhof AB

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Mar  7 05:50:41 srv206 sshd[13775]: Invalid user pi from 94.254.3.8
Mar  7 05:50:41 srv206 sshd[13775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=h-94-254-3-8.na.cust.bahnhof.se
Mar  7 05:50:41 srv206 sshd[13775]: Invalid user pi from 94.254.3.8
Mar  7 05:50:43 srv206 sshd[13775]: Failed password for invalid user pi from 94.254.3.8 port 35466 ssh2
...
2020-03-07 19:41:15
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.254.3.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7274
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.254.3.8.			IN	A

;; AUTHORITY SECTION:
.			487	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030700 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 07 19:41:11 CST 2020
;; MSG SIZE  rcvd: 114
Host info
8.3.254.94.in-addr.arpa domain name pointer h-94-254-3-8.NA.cust.bahnhof.se.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
8.3.254.94.in-addr.arpa	name = h-94-254-3-8.NA.cust.bahnhof.se.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
142.93.116.168 attackspam
Oct 12 18:55:51 vps647732 sshd[3090]: Failed password for root from 142.93.116.168 port 47852 ssh2
...
2019-10-13 03:20:23
5.135.108.140 attackspambots
Oct 12 21:03:12 SilenceServices sshd[26873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.108.140
Oct 12 21:03:14 SilenceServices sshd[26873]: Failed password for invalid user Hell2017 from 5.135.108.140 port 50863 ssh2
Oct 12 21:06:41 SilenceServices sshd[27815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.108.140
2019-10-13 03:26:13
183.207.181.138 attackbots
Oct 12 17:03:25 vps647732 sshd[1022]: Failed password for root from 183.207.181.138 port 40513 ssh2
...
2019-10-13 03:24:07
104.37.169.192 attackbots
Oct 12 07:11:23 web9 sshd\[1041\]: Invalid user Stone123 from 104.37.169.192
Oct 12 07:11:23 web9 sshd\[1041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.37.169.192
Oct 12 07:11:26 web9 sshd\[1041\]: Failed password for invalid user Stone123 from 104.37.169.192 port 33980 ssh2
Oct 12 07:15:23 web9 sshd\[1689\]: Invalid user Bonjour1@3 from 104.37.169.192
Oct 12 07:15:23 web9 sshd\[1689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.37.169.192
2019-10-13 03:37:11
149.56.45.87 attackbots
Lines containing failures of 149.56.45.87 (max 1000)
Oct 11 00:09:06 localhost sshd[9462]: User r.r from 149.56.45.87 not allowed because listed in DenyUsers
Oct 11 00:09:06 localhost sshd[9462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.45.87  user=r.r
Oct 11 00:09:09 localhost sshd[9462]: Failed password for invalid user r.r from 149.56.45.87 port 34180 ssh2
Oct 11 00:09:10 localhost sshd[9462]: Received disconnect from 149.56.45.87 port 34180:11: Bye Bye [preauth]
Oct 11 00:09:10 localhost sshd[9462]: Disconnected from invalid user r.r 149.56.45.87 port 34180 [preauth]
Oct 11 00:29:02 localhost sshd[12430]: Invalid user 123 from 149.56.45.87 port 51334
Oct 11 00:29:02 localhost sshd[12430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.45.87 
Oct 11 00:29:04 localhost sshd[12430]: Failed password for invalid user 123 from 149.56.45.87 port 51334 ssh2
Oct 11 00:29:05 l........
------------------------------
2019-10-13 03:34:08
72.30.35.9 attackspambots
Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); spam volume up to 15/day.  Spam series change: shift from repetitive redirects from blacklisted IP 92.63.192.124 & .151 to malicious attachments.

Unsolicited bulk spam - panotetsu.com, CHINANET hebei province network - 106.115.39.239

Permitted sender domain jmramosmejia.com.ar = 67.222.7.109 PrivateSystems Networks

Repetitive reply to:
Reply-To: nanikarige@yahoo.com = 72.30.35.9 Oath Holdings Inc.

Repetitive Apple mail:
-	boundary=" Apple-Mail-B7687EC7-712A-D2F6-E174-B1707B9FFC68"
-	X-Mailer: iPad Mail (13E238)

Spam series change: no phishing redirect spam link.  Malicious attachment - Outlook blocked access to unsafe attachment: 22.jpg
2019-10-13 03:05:38
212.64.109.31 attackbotsspam
Oct 12 16:09:37 debian64 sshd\[8526\]: Invalid user 123Bike from 212.64.109.31 port 45610
Oct 12 16:09:37 debian64 sshd\[8526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.109.31
Oct 12 16:09:39 debian64 sshd\[8526\]: Failed password for invalid user 123Bike from 212.64.109.31 port 45610 ssh2
...
2019-10-13 03:39:28
109.15.238.237 attackbotsspam
Trying ports that it shouldn't be.
2019-10-13 03:22:33
116.7.176.146 attack
Oct 12 14:11:18 sshgateway sshd\[4152\]: Invalid user Irene@321 from 116.7.176.146
Oct 12 14:11:18 sshgateway sshd\[4152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.7.176.146
Oct 12 14:11:19 sshgateway sshd\[4152\]: Failed password for invalid user Irene@321 from 116.7.176.146 port 60334 ssh2
2019-10-13 02:56:31
94.23.254.24 attackbots
Oct 12 17:36:51 lnxmysql61 sshd[24399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.254.24
2019-10-13 03:25:22
185.53.91.150 attackspambots
" "
2019-10-13 03:21:03
189.225.92.193 attackbots
firewall-block, port(s): 81/tcp, 85/tcp
2019-10-13 03:13:17
75.179.31.49 attackbots
CLDAP port
2019-10-13 03:07:23
196.52.43.114 attackspam
firewall-block, port(s): 5632/udp
2019-10-13 03:10:46
134.209.99.209 attackspambots
Oct  9 10:12:13 zn006 sshd[4790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.209  user=r.r
Oct  9 10:12:15 zn006 sshd[4790]: Failed password for r.r from 134.209.99.209 port 43352 ssh2
Oct  9 10:12:15 zn006 sshd[4790]: Received disconnect from 134.209.99.209: 11: Bye Bye [preauth]
Oct  9 10:25:50 zn006 sshd[6217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.209  user=r.r
Oct  9 10:25:53 zn006 sshd[6217]: Failed password for r.r from 134.209.99.209 port 42416 ssh2
Oct  9 10:25:53 zn006 sshd[6217]: Received disconnect from 134.209.99.209: 11: Bye Bye [preauth]
Oct  9 10:30:08 zn006 sshd[6710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.209  user=r.r
Oct  9 10:30:10 zn006 sshd[6710]: Failed password for r.r from 134.209.99.209 port 56652 ssh2
Oct  9 10:30:10 zn006 sshd[6710]: Received disconnect from 134.209.........
-------------------------------
2019-10-13 02:59:45

Recently Reported IPs

245.218.28.78 234.243.187.176 35.172.60.186 136.54.104.158
226.57.31.104 227.178.180.241 163.87.151.210 172.69.134.122
109.200.30.163 77.100.69.255 208.113.164.202 171.118.245.64
140.233.226.108 31.211.86.7 14.20.180.193 119.237.148.10
39.70.201.40 96.149.2.170 117.242.138.26 175.214.73.166