23.94.252.104
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DEDIK SERVICES LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS207043
- Hostname(s)
- 23-94-252-104-host.colocrossing.com
- Domain Name
- dedik.io
- Country
- 🇺🇸 United States of America
- City
- Buffalo, New York
No reports in the last 60 days
23.94.252.104 has been reported 101 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
101 from
71 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=95, sources=1)
|
Hacking Brute-Force SSH | |
| 🇨🇿 Countryman |
IPS detection: tcp_port_scan, 1003 > threshold 1000, repeats 2 times since last log
|
Port Scan | |
| 🇨🇿 Countryman |
IPS detection: tcp_port_scan, 1003 > threshold 1000, repeats 2 times since last log
|
Port Scan | |
| 🇯🇵 S.O.B.A. Dev. |
Persistent port scanning or vulnerability scanning
|
Port Scan | |
| 🇯🇵 VXG-NET |
port=3390, indicator_type=scan
|
Port Scan | |
| 🇺🇸 technash |
Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.
|
Port Scan | |
| 🇺🇸 drewf.ink |
[12:17] Port scanning. Port(s) scanned: TCP/5800
|
Port Scan | |
| 🇺🇸 OceanTreasure |
tcp/5900; Scan for open VNC remote desktop port (R18) @ 2026-04-16T11:30:54Z
|
Brute-Force | |
| Anonymous |
|
Port Scan | |
| 🇸🇬 drewf.ink |
[17:41] Port scanning. Port(s) scanned: TCP/5900, TCP/3389
|
Port Scan | |
| 🇺🇸 Bankbook8585 |
T-Pot honeypot | Heralding: vnc brute-force
|
Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp port scan (536 or more attempts)
|
Port Scan | |
| 🇺🇸 ISPLtd |
Apr 14 22:41:17 23.94.252.104 TCP SPT=40000 DPT=3389 SYN
Apr 14 22:41:17 23.94.252.104 TCP SPT=40000 DPT=3390 SYN
Apr 14 22:41:17 23.94.252.104 TCP SPT=40000 DPT=3391 SYN
...
|
Port Scan | |
| 🇺🇸 RAP |
2026-04-15 00:58:46 UTC Unauthorized activity to TCP port 5900.
|
Port Scan | |
| 🇺🇸 etu brutus |
23.94.252.104 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown