AbuseIPDB » 167.94.145.97

167.94.145.97 was found in our database!

This IP was reported 13,489 times. Confidence of Abuse is 0%: ?

ISP	Censys, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS398705
Domain Name	censys.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 167.94.145.97 is an IP address from within our whitelist belonging to the subnet 167.94.145.0/24, which we identify as: "Censys (https://about.censys.io/)".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 167.94.145.97

Whois 167.94.145.97

IP Abuse Reports for 167.94.145.97:

This IP address has been reported a total of 13,489 times from 689 distinct sources. 167.94.145.97 was first reported on April 19th 2024, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
rtbh.com.tr	2025-03-28 08:48:31 (8 minutes ago)	list.rtbh.com.tr report: tcp/1071	Brute-Force
Study Bitcoin 🤗	2025-03-28 08:18:16 (38 minutes ago)	5 port probes: 5x tcp/53519 [ros]	Port Scan
nitrix	2025-03-28 07:19:52 (1 hour ago)	Unauthorized connection attempt (SYN scan)	Hacking
Anonymous	2025-03-28 06:49:51 (2 hours ago)	2025-03-28T07:49:50.308643+01:00 vps kernel: [4885141.562165] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more2025-03-28T07:49:50.308643+01:00 vps kernel: [4885141.562165] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=167.94.145.97 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=44355 DF PROTO=TCP SPT=57666 DPT=22666 WINDOW=21900 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
mkey	2025-03-28 05:55:25 (3 hours ago)	Multiple ports scan. (20 probes unauthorized connection)	Port Scan
Study Bitcoin 🤗	2025-03-28 05:38:22 (3 hours ago)	Port probe to tcp/139 (netbios) [srv124]	Port Scan
webbfabriken	2025-03-28 05:02:52 (3 hours ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
Pornomens	2025-03-28 05:01:15 (3 hours ago)	167.94.145.97 - - [28/Mar/2025:06:01:02 +0100] "GET / HTTP/1.1" 403 417 "-" "-" 167.94.145.97 ... show more167.94.145.97 - - [28/Mar/2025:06:01:02 +0100] "GET / HTTP/1.1" 403 417 "-" "-" 167.94.145.97 - - [28/Mar/2025:06:01:10 +0100] "GET / HTTP/1.1" 403 417 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 167.94.145.97 - - [28/Mar/2025:06:01:14 +0100] "GET /favicon.ico HTTP/1.1" 403 436 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" ... show less	Web App Attack
rtbh.com.tr	2025-03-28 04:48:30 (4 hours ago)	list.rtbh.com.tr report: tcp/9999	Brute-Force
SiyCah	2025-03-28 04:00:03 (4 hours ago)	167.94.145.97 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time ... show more167.94.145.97 fell into Endlessh tarpit; 0/3 total connections are currently still open. Total time wasted: 11s. Total bytes sent by tarpit: 740B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
Murazaki	2025-03-28 03:30:35 (5 hours ago)	2025/03/28 04:30:35 [error] 589487#589487: 1391426 empty URI in redirect to named location "@err" w ... show more2025/03/28 04:30:35 [error] 589487#589487: 1391426 empty URI in redirect to named location "@err" while reading client request line, client: 167.94.145.97, server: , request: "PRI * HTTP/2.0" ... show less	Hacking
David Ferneding	2025-03-28 03:04:25 (5 hours ago)	Blocked by UFW (TCP on 4449) Source port: 58808 TTL: 57 Packet length: 60 TO ... show moreBlocked by UFW (TCP on 4449) Source port: 58808 TTL: 57 Packet length: 60 TOS: 0x00 This report (for 167.94.145.97) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
dwmp	2025-03-28 03:03:09 (5 hours ago)	Mar 28 04:03:05 plesk postfix/smtpd[2620405]: lost connection after EHLO from unknown[167.94.145.97] ... show moreMar 28 04:03:05 plesk postfix/smtpd[2620405]: lost connection after EHLO from unknown[167.94.145.97] Mar 28 04:03:07 plesk postfix/smtpd[2620405]: lost connection after CONNECT from unknown[167.94.145.97] Mar 28 04:03:08 plesk postfix/smtpd[2620405]: lost connection after CONNECT from unknown[167.94.145.97] ... show less	Brute-Force SSH
diego	2025-03-28 02:45:48 (6 hours ago)	[probe-44-49] 2025-03-28 02:13:59, Client: 167.94.145.97:34718, Protocol: 6, Unauthorized activity t ... show more[probe-44-49] 2025-03-28 02:13:59, Client: 167.94.145.97:34718, Protocol: 6, Unauthorized activity to HTTP: GET / show less	Web App Attack
Study Bitcoin 🤗	2025-03-28 01:52:49 (7 hours ago)	Port probe to tcp/465 (smtps) [srv126]	Port Scan