JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.180.253.238

94.180.253.238 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	JSC ER-Telecom Holding Kazan branch
Usage Type	Fixed Line ISP
ASN	AS41668
Hostname(s)	94x180x253x238.static-business.kzn.ertelecom.ru
Domain Name	ertelecom.ru
Country	🇷🇺 Russian Federation
City	Kazan, Tatarstan Republic

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.180.253.238

Whois 94.180.253.238

IP Abuse Reports for 94.180.253.238:

This IP address has been reported a total of 57 times from 40 distinct sources. 94.180.253.238 was first reported on June 2nd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 Indexyz	2026-06-03 05:50:27 (2 weeks ago)	2026-06-03T13:47:26.303378+08:00 hostname sshd-session[143083]: Invalid user documentacion from 94 ... show more 2026-06-03T13:47:26.303378+08:00 hostname sshd-session[143083]: Invalid user documentacion from 94.180.253.238 port 42420 2026-06-03T13:48:55.413819+08:00 hostname sshd-session[143085]: Connection from 94.180.253.238 port 44854 on 198.176.52.83 port 22 rdomain "" 2026-06-03T13:48:56.142491+08:00 hostname sshd-session[143085]: Invalid user esmtp from 94.180.253.238 port 44854 2026-06-03T13:50:25.866877+08:00 hostname sshd-session[143091]: Connection from 94.180.253.238 port 47290 on 198.176.52.83 port 22 rdomain "" 2026-06-03T13:50:26.587901+08:00 hostname sshd-session[143091]: Invalid user kantoor from 94.180.253.238 port 47290 show less	Brute-Force SSH
🇺🇸 fazar	2026-06-03 05:49:21 (2 weeks ago)	crowdsecurity/ssh-slow-bf on node: us01	SSH Brute-Force
Anonymous	2026-06-03 05:47:31 (2 weeks ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-03 05:46:45 (2 weeks ago)	(sshd) Failed SSH login from 94.180.253.238 (RU/Russia/94x180x253x238.static-business.kzn.ertelecom. ... show more (sshd) Failed SSH login from 94.180.253.238 (RU/Russia/94x180x253x238.static-business.kzn.ertelecom.ru): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 3 00:31:20 13979 sshd[2000]: Invalid user holmes from 94.180.253.238 port 38922 Jun 3 00:31:22 13979 sshd[2000]: Failed password for invalid user holmes from 94.180.253.238 port 38922 ssh2 Jun 3 00:45:01 13979 sshd[8698]: Invalid user academia from 94.180.253.238 port 48582 Jun 3 00:45:03 13979 sshd[8698]: Failed password for invalid user academia from 94.180.253.238 port 48582 ssh2 Jun 3 00:46:36 13979 sshd[9620]: Invalid user documentacion from 94.180.253.238 port 51044 show less	Brute-Force SSH
🇫🇷 georgton.tech	2026-06-03 05:45:37 (2 weeks ago)	Jun 3 02:37:27 vmi2395471 sshd[3088952]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Jun 3 02:37:27 vmi2395471 sshd[3088952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.253.238 Jun 3 02:37:29 vmi2395471 sshd[3088952]: Failed password for invalid user holmes from 94.180.253.238 port 33934 ssh2 Jun 3 02:45:36 vmi2395471 sshd[3089068]: Invalid user academia from 94.180.253.238 port 42608 ... show less	Brute-Force SSH
🇺🇸 brycemaxheimer	2026-06-03 05:10:03 (2 weeks ago)	Cowrie SSH honeypot: 6 events in 10m window 2026-06-03T05:00:00+00:00. Users tried: 345gs5662d34,roo ... show more Cowrie SSH honeypot: 6 events in 10m window 2026-06-03T05:00:00+00:00. Users tried: 345gs5662d34,root. Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh ; cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx show less	Hacking Brute-Force SSH
🇵🇱 webadmin	2026-06-03 05:04:45 (2 weeks ago)		Brute-Force SSH
🇺🇸 MSchienle	2026-06-03 04:06:14 (2 weeks ago)	2026-06-02 23:03:31.386248-0500 localhost sshd-session[75443]: Failed password for invalid user adm ... show more 2026-06-02 23:03:31.386248-0500 localhost sshd-session[75443]: Failed password for invalid user admin from 94.180.253.238 port 58246 ssh2 show less	Brute-Force
🇭🇺 tokyohost.eu	2026-06-03 04:06:13 (2 weeks ago)	Jun 3 06:01:19 node1 sshd[2158401]: Failed password for invalid user admin from 94.180.253.238 port ... show more Jun 3 06:01:19 node1 sshd[2158401]: Failed password for invalid user admin from 94.180.253.238 port 37890 ssh2 Jun 3 06:06:10 node1 sshd[2309282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.253.238 user=root Jun 3 06:06:12 node1 sshd[2309282]: Failed password for root from 94.180.253.238 port 56634 ssh2 ... show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-06-03 04:04:06 (2 weeks ago)	Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: admin:q1w2e3r4 ... show more Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH • Credential used: admin:q1w2e3r4 • Number of login attempts: 1 • Client: SSH-2.0-libssh_0.9.6 Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH
🇧🇬 IVPLUS LTD	2026-06-03 03:17:15 (2 weeks ago)	2026-06-03T06:15:35.665711+03:00 netstat sshd[68309]: Invalid user mcserver from 94.180.253.238 port ... show more 2026-06-03T06:15:35.665711+03:00 netstat sshd[68309]: Invalid user mcserver from 94.180.253.238 port 49478 2026-06-03T06:15:35.676857+03:00 netstat sshd[68309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.253.238 2026-06-03T06:15:36.970335+03:00 netstat sshd[68309]: Failed password for invalid user mcserver from 94.180.253.238 port 49478 ssh2 2026-06-03T06:17:12.394139+03:00 netstat sshd[69391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.253.238 user=root 2026-06-03T06:17:14.339635+03:00 netstat sshd[69391]: Failed password for root from 94.180.253.238 port 55614 ssh2 ... show less	Brute-Force SSH
🇩🇪 formality	2026-06-03 03:09:08 (2 weeks ago)	Invalid user john from 94.180.253.238 port 33238	Brute-Force SSH
🇧🇷 chronos	2026-06-03 03:06:01 (2 weeks ago)	Generic malicious activity: [HONEYPOT] Attempted SSH access... \| Port: 2222 \| Proto: TCP \| Location: ... show more Generic malicious activity: [HONEYPOT] Attempted SSH access... \| Port: 2222 \| Proto: TCP \| Location: Russia, Kazan' show less	Port Scan Hacking
🇺🇸 kipfel★	2026-06-03 02:25:43 (2 weeks ago)	2026-06-02T21:20:15.574683-05:00 nocix-dedi-bf2421-mci sshd-session[152799]: Invalid user fss from 9 ... show more 2026-06-02T21:20:15.574683-05:00 nocix-dedi-bf2421-mci sshd-session[152799]: Invalid user fss from 94.180.253.238 port 41034 2026-06-02T21:24:12.997630-05:00 nocix-dedi-bf2421-mci sshd-session[153087]: Invalid user seafight from 94.180.253.238 port 58180 2026-06-02T21:25:43.370929-05:00 nocix-dedi-bf2421-mci sshd-session[153186]: Invalid user cpa from 94.180.253.238 port 35148 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-06-03 02:25:11 (2 weeks ago)	(sshd) Failed SSH login from 94.180.253.238 (RU/Russia/94x180x253x238.static-business.kzn.ertelecom. ... show more (sshd) Failed SSH login from 94.180.253.238 (RU/Russia/94x180x253x238.static-business.kzn.ertelecom.ru): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 2 21:12:27 14966 sshd[17805]: Invalid user fss from 94.180.253.238 port 43530 Jun 2 21:12:29 14966 sshd[17805]: Failed password for invalid user fss from 94.180.253.238 port 43530 ssh2 Jun 2 21:23:24 14966 sshd[23862]: Invalid user seafight from 94.180.253.238 port 41436 Jun 2 21:23:26 14966 sshd[23862]: Failed password for invalid user seafight from 94.180.253.238 port 41436 ssh2 Jun 2 21:24:57 14966 sshd[24593]: Invalid user cpa from 94.180.253.238 port 46652 show less	Brute-Force SSH

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac1:6560:8::2e4:e7

🇯🇵 202.78.167.209

🇩🇪 94.130.218.167

🇬🇧 45.198.224.141

🇺🇸 20.42.95.196

🇺🇸 216.73.160.131

🇬🇧 195.96.139.19

🇸🇬 168.144.45.209

🇨🇳 115.231.78.11

🇫🇷 95.182.82.67

🇺🇸 72.17.34.38

🇰🇷 59.21.37.60

🇺🇸 13.90.206.6

🇬🇧 195.96.139.253

🇭🇰 194.187.178.22

🇱🇻 185.113.139.51

🇧🇩 182.252.69.91

🇷🇺 178.178.222.59

🇦🇲 87.241.157.208

🇬🇧 87.236.176.236