This IP address has been reported a total of
149
times from
65 distinct
sources.
142.93.79.214 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 5
reports;
Germany
with 4
reports;
United States of America
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
23
times;
Bad Web Bot
9
times;
Brute-Force
6
times;
Hacking
5
times;
Port Scan
3
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing
show less
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: ...
show less
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ...
show moreAttacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
show less
Hidden-directory scanner with per-request User-Agent rotation, from a rented DigitalOcean droplet. B ...
show moreHidden-directory scanner with per-request User-Agent rotation, from a rented DigitalOcean droplet. Between 22/Oct/2026:18:06:56 and 18:07:10 +0000 -- 14 seconds -- this IP sent 60 HEAD requests to chalkwild.com walking a wordlist of staging and backup directory names: /backup/ /old/ /new/ /site/ /site1/ /wp/ /wordpress/ /cms/ /web/ /website/ /portal/ /main/ /v2/ /blog/ /blog2/ /news/ /press/ /content/ /media/ /store/ /shop/ /home/ /2023/ /2024/ /en/ /de/ /fr/ /us/. 26 returned 404. Decisive evidence of automation: across those 60 requests it presented 20 DIFFERENT User-Agent strings -- Android handsets (vivo, Redmi, TECNO, Nokia, OnePlus, Pixel), iPhone, Windows, Linux, Vivaldi, Edge, Firefox -- rotating identity per request. No real client changes device and browser between requests. HEAD-only is a scanner conserving bandwidth; no browser or crawler behaves this way. The host is hunting forgotten staging copies and backup directories to attack.
show less
