23.94.194.173

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
143 reports
92 reporters Β· latest 7 minutes ago
ISP
RackNerd LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS36352
Hostname(s)
23-94-194-173-host.colocrossing.com
Domain Name
racknerd.com
Country
πŸ‡ΊπŸ‡Έ United States of America
City
Elk Grove Village, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
143 from 92 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations πŸ‡ΊπŸ‡Έ United States of America 51 πŸ‡©πŸ‡ͺ Germany 28 πŸ‡«πŸ‡· France 11
Most common categories Port Scan 94 SSH 67 Brute-Force 50 Hacking 24 DDoS Attack 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
πŸ‡·πŸ‡Ί Panamaaa
Port scan detected
Port Scan
πŸ‡ΊπŸ‡Έ freehosts.eu
Blocked by UFW [2222/tcp] | SPT: 34190 | TTL: 240 | LEN: 40 | TOS: 0x00 β€’ Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
πŸ‡«πŸ‡· JohnAtlas
Honeypot: connection attempt to unused port(s) 2222/tcp on a server where these services do not exist. Automated firewall trap.
Port Scan Hacking Brute-Force SSH
πŸ‡ΊπŸ‡Έ MPL
tcp/22
Port Scan
πŸ‡·πŸ‡΄ firmadeit
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=22
Port Scan Hacking
πŸ‡©πŸ‡ͺ Jochen Pretli
connection to honeypot
Email Spam Port Scan
πŸ‡ΊπŸ‡Έ MPL
tcp ports: 22,2222 (3 or more attempts)
Port Scan
πŸ‡ΊπŸ‡Έ MPL
tcp/22 (2 or more attempts)
Port Scan
πŸ‡©πŸ‡ͺ NetReportsGermany
2026-11-08 22:48:23 UTC - blocked by AbuseIPDB blocklist - ports: 2222 - TCP flags: S, src port: 39882, TTL: 243, length: 44 bytes
Port Scan
πŸ‡ΊπŸ‡Έ MPL
tcp/2222 (2 or more attempts)
Port Scan
πŸ‡«πŸ‡· gianluca.demartino75
2026-11-08T23:12:22.020247+01:00 vps-49934a4d endlessh[321732]: 2026-11-08T22:12:22.019Z ACCEPT host=::ffff:23.94.194.173 port=48950 fd=4 n=1/4096 ...
Brute-Force SSH
πŸ‡«πŸ‡· uthul
T-Pot honeypot: 2 hits on ports [2222] (automated)
Port Scan
πŸ‡ΊπŸ‡Έ MPL
tcp ports: 22,2222 (4 or more attempts)
Port Scan
Anonymous
Blocked by firewall on hugin [2222/tcp] | Rule: UFW | SPT: 35289 | TTL: 239 | LEN: 40 | TOS: 0x00 β€’ Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
πŸ‡ΊπŸ‡Έ RAP
2026-11-08 19:49:36 UTC Unauthorized activity to TCP port 22. SSH
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

πŸ‡ΊπŸ‡Έ 108.18.114.94
πŸ‡§πŸ‡© 103.196.234.221
πŸ‡§πŸ‡¬ 79.124.58.106
πŸ‡ΉπŸ‡Ό 203.203.43.13
πŸ‡°πŸ‡Ό 188.236.105.73
πŸ‡¨πŸ‡΄ 186.87.28.78
πŸ‡¨πŸ‡Ώ 185.87.121.1
πŸ‡«πŸ‡· 169.58.88.107
πŸ‡©πŸ‡ͺ 109.160.32.44
πŸ‡¨πŸ‡³ 82.156.136.224
πŸ‡ΊπŸ‡Έ 34.11.208.199
πŸ‡ΊπŸ‡Έ 162.216.150.83
πŸ‡ΊπŸ‡Έ 161.35.121.228
πŸ‡ΊπŸ‡Έ 109.105.210.8
πŸ‡»πŸ‡³ 14.186.72.43
πŸ‡¦πŸ‡· 201.220.152.175
πŸ‡³πŸ‡± 176.65.132.216
πŸ‡―πŸ‡² 173.225.243.212
feedback