167.94.138.78

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted. Whitelisted Subnet

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Abuse Confidence Score
0% Low Risk
162 reports
38 reporters · latest 11 months ago

167.94.138.78 is on our whitelist as Censys via the subnet 167.94.138.0/24.

ISP
Censys, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS398324
Hostname(s)
78.138.94.167.censys-scanner.com
Domain Name
censys.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

167.94.138.78 has been reported 162 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
162 from 38 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 oonux.net
RouterOS: Scanning detected TCP 167.94.138.78:63953 > x.x.x.x:412
Port Scan
🇺🇸 MPL
tcp port scan (6 or more attempts)
Port Scan
🇺🇸 MPL
tcp port scan (3 or more attempts)
Port Scan
🇺🇸 MPL
tcp/12955
Port Scan
🇺🇸 MPL
tcp/12955 (2 or more attempts)
Port Scan
🇳🇱 ATV
Unsolicited connection attempts to port 63533
Port Scan
🇧🇾 StatsMe
2025-11-07T16:45:00.033256+0300 ET DROP Dshield Block Listed Source group 1
Port Scan Hacking Spoofing Brute-Force
🇷🇴 abuse_IP_reporter
Nov 7 21:31:32 server UFW BLOCK SRC=167.94.138.78 PROTO=TCP SPT=55619 DPT=61883
Port Scan
🇺🇸 thororen
Blocked by UFW [26980/tcp] Source port: 48428 TTL: 54 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp ports: 18932,18718 (3 or more attempts)
Port Scan
🇺🇸 MPL
tcp port scan (7 or more attempts)
Port Scan
🇵🇱 Niko's Stuff
[1x] F2B | Suspicious activity blocked on: ufw | BanTime: 604800s | Suspicious TCP packet from 167.94.138.78:11406 → port 58852 | TTL: 53, LEN: 44, TOS: 0x00, PREC: 0x00, Interface: eth0
Port Scan
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇺🇸 xmission.com
Blocked by UFW (TCP on 54746) Source port: 39313 TTL: 57 Packet length: 44 TOS: 0x00 This report (for 167.94.138.78) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇳🇱 bontekoe.technology
167.94.138.78 banned on rtr - Threshold reached: 5 failures
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇲 195.250.79.2
🇨🇳 115.53.202.226
🇹🇼 101.13.2.183
🇸🇬 85.203.21.5
🇺🇸 208.94.66.180
🇧🇷 200.223.232.26
🇩🇪 167.94.146.65
🇩🇪 167.94.146.59
🇺🇸 152.163.187.234
🇺🇸 107.123.7.1
🇳🇬 102.88.137.80
🇵🇹 89.180.124.70
🇳🇱 77.91.71.27
🇺🇸 66.132.172.136
🇺🇸 216.25.89.116
🇩🇪 185.220.100.251
🇳🇱 156.233.104.244
🇰🇷 125.130.249.158
🇨🇳 101.96.196.243
🇳🇱 77.239.124.135
feedback