JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.94.119.167

66.94.119.167 was found in our database!

This IP was reported 268 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS40021
Hostname(s)	vmi3288038.contaboserver.net
Domain Name	contabo.com
Country	🇺🇸 United States of America
City	St. Louis, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.94.119.167

Whois 66.94.119.167

IP Abuse Reports for 66.94.119.167:

This IP address has been reported a total of 268 times from 168 distinct sources. 66.94.119.167 was first reported on November 25th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-05-12 08:23:06 (3 weeks ago)	[08:23] Attempted SSH login on port 2222 with credentials builder:builder	Brute-Force SSH
🇫🇷 Version Net	2026-05-12 08:21:01 (3 weeks ago)	IPS Detection: Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking
🇨🇱 ifiguero	2026-05-12 08:08:29 (3 weeks ago)	Web Attack (\x00\x00\x00\x00\x00). 7d ban	Web App Attack
🇺🇸 drewf.ink	2026-05-12 08:07:06 (3 weeks ago)	[08:07] Attempted SSH login on port 2222 with credentials root:1a2b3c	Brute-Force SSH
🇺🇸 xmission.com	2026-05-12 08:04:25 (3 weeks ago)	Blocked by UFW (TCP on 2222) Source port: 59967 TTL: 59 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2222) Source port: 59967 TTL: 59 Packet length: 40 TOS: 0x00 This report (for 66.94.119.167) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇲🇿 delsio	2026-05-12 07:52:44 (3 weeks ago)	AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=66.94.119.167; destinatio ... show more AS37697 ntopng observed inbound attack; alert=Live Flow High Score; source=66.94.119.167; destination=102.210.73.147; destination_port=443; score=100; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=repeated high-score sensitive-port hits=3 dsts=1 port=443 show less	Port Scan
🇺🇸 drewf.ink	2026-05-12 07:51:43 (3 weeks ago)	[07:51] Attempted SSH login on port 2222 with credentials root:Root1234	Brute-Force SSH
🇺🇸 drewf.ink	2026-05-12 07:35:54 (3 weeks ago)	[07:35] Attempted SSH login on port 2222 with credentials admin:p	Brute-Force SSH
🇧🇷 SOC-BR	2026-05-12 07:22:58 (3 weeks ago)	Attack detected by Fortinet - web_server: PHPUnit.Eval-stdin.PHP.Remote.Code.Execution - 2026-05-11 ... show more Attack detected by Fortinet - web_server: PHPUnit.Eval-stdin.PHP.Remote.Code.Execution - 2026-05-11 19:39:43 - Source Port 38632 show less	Port Scan Hacking
🇺🇸 drewf.ink	2026-05-12 07:20:05 (3 weeks ago)	[07:20] Attempted SSH login on port 2222 with credentials root:123123123	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-12 07:14:24 (3 weeks ago)	(sshd) Failed SSH login from 66.94.119.167 (US/United States/vmi3288038.contaboserver.net): 5 in the ... show more (sshd) Failed SSH login from 66.94.119.167 (US/United States/vmi3288038.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 12 02:13:06 15726 sshd[16208]: Invalid user admin from 66.94.119.167 port 48714 May 12 02:13:08 15726 sshd[16208]: Failed password for invalid user admin from 66.94.119.167 port 48714 ssh2 May 12 02:13:39 15726 sshd[16219]: Invalid user orangepi from 66.94.119.167 port 38666 May 12 02:13:40 15726 sshd[16219]: Failed password for invalid user orangepi from 66.94.119.167 port 38666 ssh2 May 12 02:14:10 15726 sshd[16288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.94.119.167 user=root show less	Brute-Force SSH
🇩🇪 pigro	2026-05-12 07:11:21 (3 weeks ago)	66.94.119.167 - - [12/May/2026:09:11:20 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin. ... show more 66.94.119.167 - - [12/May/2026:09:11:20 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" 66.94.119.167 - - [12/May/2026:09:11:21 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 153 "-" "libredtail-http" ... show less	Web App Attack
🇺🇸 gu-alvareza	2026-05-12 07:05:08 (3 weeks ago)	Apache.HTTP.Server.cgi-bin.Path.Traversal	Web App Attack Hacking
🇺🇸 drewf.ink	2026-05-12 07:04:05 (3 weeks ago)	[07:04] Attempted SSH login on port 2222 with credentials root:admin01	Brute-Force SSH
🇨🇳 GoForceX	2026-05-12 06:55:35 (3 weeks ago)	2026-05-12T14:54:55.789516+08:00 C20241211186402 sshd[609424]: Invalid user orangepi from 66.94.119. ... show more 2026-05-12T14:54:55.789516+08:00 C20241211186402 sshd[609424]: Invalid user orangepi from 66.94.119.167 port 49038 2026-05-12T14:54:55.793057+08:00 C20241211186402 sshd[609424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.94.119.167 2026-05-12T14:54:57.658584+08:00 C20241211186402 sshd[609424]: Failed password for invalid user orangepi from 66.94.119.167 port 49038 ssh2 2026-05-12T14:55:31.412900+08:00 C20241211186402 sshd[609449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.94.119.167 user=root 2026-05-12T14:55:33.218540+08:00 C20241211186402 sshd[609449]: Failed password for root from 66.94.119.167 port 57984 ssh2 ... show less	Brute-Force SSH

Showing 46 to 60 of 268 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.150.105.5

🇨🇦 85.217.149.64

🇷🇴 80.94.92.167

🇵🇪 63.246.37.42

🇺🇸 45.33.84.124

🇺🇸 207.90.244.12

🇳🇨 202.166.183.19

192.168.222.222

🇷🇺 188.234.239.243

🇭🇰 165.154.60.76

🇩🇪 162.158.111.238

🇩🇪 162.158.111.167

🇨🇳 115.190.113.87

🇨🇳 111.127.65.70

🇺🇸 107.150.102.192

🇺🇸 107.148.180.44

🇳🇱 45.148.10.152

🇧🇦 31.176.181.98

🇺🇸 209.90.232.71

🇸🇬 168.144.141.128