This IP address has been reported a total of
5
times from
5 distinct
sources.
23.94.203.8 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Brazil
with 1
report;
Germany
with 1
report;
France
with 1
report.
The most common categories in these recent reports were:
Port Scan
2
times;
Web App Attack
2
times;
Bad Web Bot
1
time;
Hacking
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated abuse against self-hosted GitLab instance gitlab.dev-dave.de.
Source IP 23.94.203.8 beg ...
show moreAutomated abuse against self-hosted GitLab instance gitlab.dev-dave.de.
Source IP 23.94.203.8 began activity on 2026-10-24 at 21:39:51 CEST. Initial request used Python-urllib/3.12, followed by automated browser-like requests.
The source repeatedly accessed /users/sign_up, submitted POST /users requests and created 21 fraudulent @ai.local accounts. It then attempted POST /users/sign_in and queried /api/v4/user to test authentication.
Examples:
21:39:51 GET /users/sign_in - Python-urllib/3.12
21:39:53 POST /users - created [email protected]
21:39:54 POST /users/sign_in - login support
21:39:56 GET /api/v4/user - HTTP 401
21:39:58 POST /users - created [email protected]
All accounts remained blocked_pending_approval and were removed. Relevant GitLab logs were preserved. The incident was also reported directly to the responsible hosting provider's abuse contact.
show less
[Sat Oct 24 16:48:25.263507 2026] [authz_core:error] [pid 1854922:tid 1854954] [client 23.94.203.8:4 ...
show more[Sat Oct 24 16:48:25.263507 2026] [authz_core:error] [pid 1854922:tid 1854954] [client 23.94.203.8:42292] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
