JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.184.18.54

94.184.18.54 was found in our database!

This IP was reported 1,028 times. Confidence of Abuse is 0%: ?

ISP	Institute for Research in Fundamental Sciences
Usage Type	Data Center/Web Hosting/Transit
ASN	AS205536
Domain Name	ipm.ac.ir
Country	🇮🇷 Iran (Islamic Republic of)
City	Tehran, Tehran

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.184.18.54

Whois 94.184.18.54

IP Abuse Reports for 94.184.18.54:

This IP address has been reported a total of 1,028 times from 445 distinct sources. 94.184.18.54 was first reported on November 6th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-04-07 08:33:24 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa01]	Brute-Force SSH
🇩🇪 FBI_CyberUnit	2025-12-17 19:05:23 (5 months ago)	Unauthorized SSH access attempts	Brute-Force SSH
🇮🇳 sh97	2025-11-23 22:19:27 (6 months ago)	IN01-DRDP-HYD: Blocked by Fail2Ban for SSH Brute Force from 94.184.18.54 at 2025-11-23 22:19:27 UTC	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-21 20:10:02 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇿🇦 agentics	2025-11-21 00:47:01 (6 months ago)	94.184.18.54 report :	DDoS Attack FTP Brute-Force Port Scan Hacking Spoofing Brute-Force Exploited Host
🇫🇷 SpaceHost-Server	2025-11-20 23:41:39 (6 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-20 20:10:02 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-11-20 13:49:58 (6 months ago)	This IP address carried out 350 port scanning attempts on 19-11-2025. For more information or to rep ... show more This IP address carried out 350 port scanning attempts on 19-11-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇸🇬 itachi1706	2025-11-20 10:29:48 (6 months ago)	2025-11-20T10:26:26.674514+00:00 sg-jumphost-server sshd[2238840]: Disconnected from authenticating ... show more 2025-11-20T10:26:26.674514+00:00 sg-jumphost-server sshd[2238840]: Disconnected from authenticating user root 94.184.18.54 port 46598 [preauth] 2025-11-20T10:28:28.020275+00:00 sg-jumphost-server sshd[2238956]: Disconnected from authenticating user root 94.184.18.54 port 35636 [preauth] 2025-11-20T10:29:47.430573+00:00 sg-jumphost-server sshd[2239004]: Disconnected from authenticating user root 94.184.18.54 port 57416 [preauth] ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-11-20 10:29:31 (6 months ago)	Nov 20 03:28:12 b146-14 sshd[3402784]: Failed password for root from 94.184.18.54 port 36810 ssh2 No ... show more Nov 20 03:28:12 b146-14 sshd[3402784]: Failed password for root from 94.184.18.54 port 36810 ssh2 Nov 20 03:29:29 b146-14 sshd[3402888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.184.18.54 user=root Nov 20 03:29:31 b146-14 sshd[3402888]: Failed password for root from 94.184.18.54 port 44200 ssh2 ... show less	Brute-Force SSH
🇺🇸 jennij	2025-11-20 10:28:54 (6 months ago)	Fail2Ban sshd ban on jenniferlawrence ...	Brute-Force SSH
🇺🇸 bigscoots.com	2025-11-20 10:27:12 (6 months ago)	94.184.18.54 (IR/Iran/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ... show more 94.184.18.54 (IR/Iran/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 20 04:26:47 15119 sshd[15130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.194.34 user=root Nov 20 04:26:49 15119 sshd[15132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.184.18.54 user=root Nov 20 04:26:49 15119 sshd[15130]: Failed password for root from 158.69.194.34 port 51698 ssh2 Nov 20 04:05:09 15119 sshd[13472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.217.5 user=root Nov 20 04:05:11 15119 sshd[13472]: Failed password for root from 45.78.217.5 port 58352 ssh2 IP Addresses Blocked: 158.69.194.34 (CA/Canada/mail.devopstacks.com) show less	Brute-Force SSH
🇺🇸 NetGuard	2025-11-20 09:58:47 (6 months ago)	PhantomGrid Honeypot Detection \| Type: Cowrie \| Attack: ssh_telnet_probe \| Country: Iran \| Detected: ... show more PhantomGrid Honeypot Detection \| Type: Cowrie \| Attack: ssh_telnet_probe \| Country: Iran \| Detected: 2025-11-20T09:58:47.339+00:00 show less	Web App Attack
🇺🇸 NetGuard	2025-11-20 09:48:37 (6 months ago)	🚨 CRITICAL: Real-time threat on Cowrie \| unknown \| PhantomGrid Real-time Defense	Brute-Force SSH
🇬🇧 ededited	2025-11-20 09:45:42 (6 months ago)	Nov 20 09:45:41 accessallareas sshd[2041291]: Invalid user behnam from 94.184.18.54 port 47038 ...	Brute-Force SSH

Showing 1 to 15 of 1028 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.232.74

🇦🇷 170.210.136.58

🇺🇸 165.154.162.54

🇨🇳 120.48.32.130

🇫🇷 84.5.129.68

🇧🇿 45.227.254.156

🇳🇱 45.148.10.151

🇫🇷 31.36.163.95

🇨🇳 14.103.117.81

🇨🇳 14.18.118.226

🇺🇸 3.142.50.206

🇷🇴 2.57.122.177

🇺🇸 2602:fb54:1400::c1

🇦🇷 181.177.9.119

🇺🇸 165.154.135.215

🇨🇳 106.12.75.58

🇰🇪 102.210.148.92

🇧🇬 91.92.40.204

🇵🇱 87.251.64.156

🇧🇬 77.83.36.161