必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
167.94.138.155 botsattack
KnownAttacker - BadReputation
2025-07-07 12:50:52
167.94.138.63 botsattackproxy
SSH dictionary attack
2025-06-19 12:58:59
167.94.138.41 attackproxy
VoIP blacklist IP
2025-06-16 12:53:41
167.94.138.120 botsattackproxy
SSH bot
2025-06-03 12:57:02
167.94.138.163 botsattack
Fraud scan
2025-02-07 17:59:37
167.94.138.167 attack
Fraud connect
2025-01-22 13:53:35
167.94.138.147 proxy
VPN fraud
2023-06-07 12:46:29
167.94.138.33 proxy
VPN fraud.
2023-06-07 12:43:58
167.94.138.136 proxy
VPN fraud
2023-06-05 12:53:02
167.94.138.131 proxy
VPN fraud
2023-05-29 13:10:03
167.94.138.124 proxy
VPN fraud
2023-05-29 13:06:05
167.94.138.127 proxy
VPN fraud
2023-05-25 12:38:28
167.94.138.52 proxy
VPN fraud
2023-05-16 12:51:16
167.94.138.152 proxy
Scanner VPN
2023-03-21 13:50:31
WHOIS信息:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#


NetRange:       167.94.138.0 - 167.94.138.255
CIDR:           167.94.138.0/24
NetName:        CENSY
NetHandle:      NET-167-94-138-0-1
Parent:         NET167 (NET-167-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Censys, Inc. (CENSY)
RegDate:        2021-09-13
Updated:        2024-03-29
Ref:            https://rdap.arin.net/registry/ip/167.94.138.0


OrgName:        Censys, Inc.
OrgId:          CENSY
Address:        116 1/2 S Main Street
City:           Ann Arbor
StateProv:      MI
PostalCode:     48104
Country:        US
RegDate:        2018-08-06
Updated:        2019-08-03
Comment:        https://censys.io
Ref:            https://rdap.arin.net/registry/entity/CENSY


OrgAbuseHandle: CAT20-ARIN
OrgAbuseName:   Censys Abuse Team
OrgAbusePhone:  +1-248-629-0125 
OrgAbuseEmail:  scan-abuse@censys.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/CAT20-ARIN

OrgTechHandle: COT12-ARIN
OrgTechName:   Censys Operations Team
OrgTechPhone:  +1-248-629-0125 
OrgTechEmail:  ops@censys.com
OrgTechRef:    https://rdap.arin.net/registry/entity/COT12-ARIN

OrgNOCHandle: COT12-ARIN
OrgNOCName:   Censys Operations Team
OrgNOCPhone:  +1-248-629-0125 
OrgNOCEmail:  ops@censys.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/COT12-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.94.138.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39092
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;167.94.138.161.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025101000 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 10 21:00:19 CST 2025
;; MSG SIZE  rcvd: 107
HOST信息:
Host 161.138.94.167.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 161.138.94.167.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
1.203.115.64 attackbotsspam
May 25 11:29:51 XXX sshd[19916]: Invalid user webadmin from 1.203.115.64 port 34338
2020-05-26 01:33:58
162.243.144.161 attackspam
" "
2020-05-26 01:27:14
106.54.16.96 attackspambots
May 25 17:20:15 edebian sshd[4335]: Failed password for root from 106.54.16.96 port 47808 ssh2
...
2020-05-26 01:31:27
103.18.242.69 attack
May 25 13:21:45 mail.srvfarm.net postfix/smtpd[235337]: lost connection after CONNECT from unknown[103.18.242.69]
May 25 13:27:24 mail.srvfarm.net postfix/smtps/smtpd[240148]: warning: unknown[103.18.242.69]: SASL PLAIN authentication failed: 
May 25 13:27:24 mail.srvfarm.net postfix/smtps/smtpd[240148]: lost connection after AUTH from unknown[103.18.242.69]
May 25 13:29:32 mail.srvfarm.net postfix/smtps/smtpd[235736]: warning: unknown[103.18.242.69]: SASL PLAIN authentication failed: 
May 25 13:29:33 mail.srvfarm.net postfix/smtps/smtpd[235736]: lost connection after AUTH from unknown[103.18.242.69]
2020-05-26 02:06:39
198.46.189.106 attackbotsspam
May 11 21:15:59 estefan sshd[32056]: reveeclipse mapping checking getaddrinfo for 198-46-189-106-host.colocrossing.com [198.46.189.106] failed - POSSIBLE BREAK-IN ATTEMPT!
May 11 21:15:59 estefan sshd[32056]: User ftp from 198.46.189.106 not allowed because not listed in AllowUsers
May 11 21:15:59 estefan sshd[32056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.189.106  user=ftp
May 11 21:16:01 estefan sshd[32056]: Failed password for invalid user ftp from 198.46.189.106 port 34850 ssh2
May 11 21:16:01 estefan sshd[32057]: Received disconnect from 198.46.189.106: 11: Bye Bye
May 11 21:22:46 estefan sshd[32098]: reveeclipse mapping checking getaddrinfo for 198-46-189-106-host.colocrossing.com [198.46.189.106] failed - POSSIBLE BREAK-IN ATTEMPT!
May 11 21:22:46 estefan sshd[32098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.189.106  user=r.r
May 11 21:22:48 estefan sshd[........
-------------------------------
2020-05-26 01:37:09
46.109.11.127 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-05-26 01:55:35
107.170.249.243 attack
May 25 16:00:43 vps sshd[350103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.249.243  user=root
May 25 16:00:45 vps sshd[350103]: Failed password for root from 107.170.249.243 port 47604 ssh2
May 25 16:04:32 vps sshd[366021]: Invalid user ginger from 107.170.249.243 port 53186
May 25 16:04:32 vps sshd[366021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.249.243
May 25 16:04:34 vps sshd[366021]: Failed password for invalid user ginger from 107.170.249.243 port 53186 ssh2
...
2020-05-26 01:49:16
37.139.20.6 attackbots
May 25 17:28:34 ArkNodeAT sshd\[25799\]: Invalid user victoria from 37.139.20.6
May 25 17:28:34 ArkNodeAT sshd\[25799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.20.6
May 25 17:28:35 ArkNodeAT sshd\[25799\]: Failed password for invalid user victoria from 37.139.20.6 port 49848 ssh2
2020-05-26 01:47:41
200.192.252.178 attackspam
May 25 13:13:42 mail.srvfarm.net postfix/smtpd[216665]: lost connection after CONNECT from unknown[200.192.252.178]
May 25 13:14:00 mail.srvfarm.net postfix/smtps/smtpd[217912]: warning: unknown[200.192.252.178]: SASL PLAIN authentication failed: 
May 25 13:14:00 mail.srvfarm.net postfix/smtps/smtpd[217912]: lost connection after AUTH from unknown[200.192.252.178]
May 25 13:18:42 mail.srvfarm.net postfix/smtps/smtpd[221526]: warning: unknown[200.192.252.178]: SASL PLAIN authentication failed: 
May 25 13:18:42 mail.srvfarm.net postfix/smtps/smtpd[221526]: lost connection after AUTH from unknown[200.192.252.178]
2020-05-26 01:59:09
114.67.230.163 attack
SSH Brute-Forcing (server2)
2020-05-26 01:28:11
222.186.42.155 attackspambots
May 25 19:38:03 home sshd[21647]: Failed password for root from 222.186.42.155 port 20416 ssh2
May 25 19:38:37 home sshd[21698]: Failed password for root from 222.186.42.155 port 35341 ssh2
May 25 19:38:39 home sshd[21698]: Failed password for root from 222.186.42.155 port 35341 ssh2
May 25 19:38:42 home sshd[21698]: Failed password for root from 222.186.42.155 port 35341 ssh2
...
2020-05-26 01:44:27
45.84.196.58 attackspambots
May 26 02:09:14 web1 sshd[29732]: Invalid user ubnt from 45.84.196.58 port 58670
May 26 02:09:14 web1 sshd[29732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.196.58
May 26 02:09:14 web1 sshd[29732]: Invalid user ubnt from 45.84.196.58 port 58670
May 26 02:09:16 web1 sshd[29732]: Failed password for invalid user ubnt from 45.84.196.58 port 58670 ssh2
May 26 02:09:19 web1 sshd[29750]: Invalid user admin from 45.84.196.58 port 36924
May 26 02:09:19 web1 sshd[29750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.196.58
May 26 02:09:19 web1 sshd[29750]: Invalid user admin from 45.84.196.58 port 36924
May 26 02:09:21 web1 sshd[29750]: Failed password for invalid user admin from 45.84.196.58 port 36924 ssh2
May 26 02:09:23 web1 sshd[29768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.84.196.58  user=root
May 26 02:09:26 web1 sshd[29768]: Failed pass
...
2020-05-26 01:36:21
185.143.75.157 attackspam
May 25 16:11:54 statusweb1.srvfarm.net postfix/smtpd[25657]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 25 16:12:32 statusweb1.srvfarm.net postfix/smtpd[25900]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 25 16:13:09 statusweb1.srvfarm.net postfix/smtpd[25657]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 25 16:13:45 statusweb1.srvfarm.net postfix/smtpd[25657]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 25 16:14:22 statusweb1.srvfarm.net postfix/smtpd[25900]: warning: unknown[185.143.75.157]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-05-26 02:03:02
14.29.204.213 attackbots
2020-05-25T07:36:30.3794691495-001 sshd[27805]: Invalid user cunanan from 14.29.204.213 port 54581
2020-05-25T07:36:32.2704431495-001 sshd[27805]: Failed password for invalid user cunanan from 14.29.204.213 port 54581 ssh2
2020-05-25T07:41:19.5946481495-001 sshd[28119]: Invalid user test2 from 14.29.204.213 port 50097
2020-05-25T07:41:19.6016251495-001 sshd[28119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.204.213
2020-05-25T07:41:19.5946481495-001 sshd[28119]: Invalid user test2 from 14.29.204.213 port 50097
2020-05-25T07:41:21.1633041495-001 sshd[28119]: Failed password for invalid user test2 from 14.29.204.213 port 50097 ssh2
...
2020-05-26 01:56:19
178.88.253.149 attackbots
 TCP (SYN) 178.88.253.149:54216 -> port 23, len 44
2020-05-26 01:40:35

最近上报的IP列表

206.42.225.250 58.212.237.216 124.31.104.181 159.0.75.209
159.0.75.81 159.0.75.76 43.199.229.129 54.83.151.136
52.72.114.140 42.236.17.214 27.185.229.20 47.92.132.12
47.92.113.136 47.92.224.96 142.93.107.221 39.98.33.79
39.103.128.74 27.185.229.26 83.143.119.10 154.44.1.92