JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 23.94.252.142

23.94.252.142 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 66%: ?

66%

ISP	DEDIK SERVICES LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207043
Hostname(s)	23-94-252-142-host.colocrossing.com
Domain Name	dedik.io
Country	🇺🇸 United States of America
City	Buffalo, New York

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 23.94.252.142

Whois 23.94.252.142

IP Abuse Reports for 23.94.252.142:

This IP address has been reported a total of 19 times from 16 distinct sources. 23.94.252.142 was first reported on May 26th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 tjs	2026-07-08 23:10:00 (5 days ago)	web attack	Hacking Web App Attack
🇩🇪 lespbaj	2026-07-07 23:15:27 (6 days ago)	23.94.252.142 - - [07/Jul/2026:23:15:25 +0000] "GET /+webvpn+/index.html HTTP/1.1" 400 230 "-" "Mozi ... show more 23.94.252.142 - - [07/Jul/2026:23:15:25 +0000] "GET /+webvpn+/index.html HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; what-vpn-go/0.1)" 23.94.252.142 - - [07/Jul/2026:23:15:25 +0000] "GET /+CSCOE+/logon.html HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; what-vpn-go/0.1)" 23.94.252.142 - - [07/Jul/2026:23:15:25 +0000] "GET /remote/login HTTP/1.1" 400 230 "-" "what-vpn-go/0.1" 23.94.252.142 - - [07/Jul/2026:23:15:25 +0000] "POST /global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 400 230 "-" "PAN GlobalProtect" 23.94.252.142 - - [07/Jul/2026:23:15:26 +0000] "GET /dana-na HTTP/1.1" 400 230 "-" "ncsrv" ... show less	Web App Attack
🇩🇪 barbarella	2026-07-07 19:10:28 (6 days ago)	Scanning for open proxy server (CONNECT /CSCOSSLC/tunnel)	Hacking Web App Attack
🇩🇪 kivitendo.de	2026-07-07 18:46:56 (6 days ago)	{"reqId":"ifR0pW9zpgvZ09rJ3rSC","level":1,"time":"2026-07-07T18:46:53+00:00","remoteAddr":"23.94.252 ... show more {"reqId":"ifR0pW9zpgvZ09rJ3rSC","level":1,"time":"2026-07-07T18:46:53+00:00","remoteAddr":"23.94.252.142","user":"--","app":"core","method":"GET","url":"/+webvpn+/index.html","scriptName":"/index.php","message":"Trusted domain error. \"23.94.252.142\" tried to access using \"37.24.44.97:443\" as host.","userAgent":"Mozilla/5.0 (compatible; what-vpn-go/0.1)","version":"32.0.12.1","data":{"app":"core"}} {"reqId":"Bx36g0GqCYNk7Tc25MiQ","level":1,"time":"2026-07-07T18:46:54+00:00","remoteAddr":"23.94.252.142","user":"--","app":"core","method":"GET","url":"/+CSCOE+/logon.html","scriptName":"/index.php","message":"Trusted domain error. \"23.94.252.142\" tried to access using \"37.24.44.97:443\" as host.","userAgent":"Mozilla/5.0 (compatible; what-vpn-go/0.1)","version":"32.0.12.1","data":{"app":"core"}} {"reqId":"Lm1hVL2Ggf5TLxsT4xxj","level":1,"time":"2026-07-07T18:46:54+00:00","remoteAddr":"23.94.252.142","user":"--","app":"core","method":"GET","url":"/remote/login","scriptName":"/index.ph ... show less	Brute-Force Web App Attack
🇩🇪 lespbaj	2026-07-07 18:46:21 (6 days ago)	23.94.252.142 - - [07/Jul/2026:18:46:18 +0000] "GET /+webvpn+/index.html HTTP/1.1" 400 230 "-" "Mozi ... show more 23.94.252.142 - - [07/Jul/2026:18:46:18 +0000] "GET /+webvpn+/index.html HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; what-vpn-go/0.1)" 23.94.252.142 - - [07/Jul/2026:18:46:18 +0000] "GET /+CSCOE+/logon.html HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; what-vpn-go/0.1)" 23.94.252.142 - - [07/Jul/2026:18:46:19 +0000] "GET /remote/login HTTP/1.1" 400 230 "-" "what-vpn-go/0.1" 23.94.252.142 - - [07/Jul/2026:18:46:19 +0000] "POST /global-protect/prelogin.esp?tmp=tmp&clientVer=4100&clientos=Windows HTTP/1.1" 400 230 "-" "PAN GlobalProtect" 23.94.252.142 - - [07/Jul/2026:18:46:19 +0000] "GET /global-protect/login.esp HTTP/1.1" 400 230 "-" "PAN GlobalProtect" ... show less	Web App Attack
🇵🇱 sefinek.net	2026-07-07 18:39:34 (6 days ago)	Honeypot hit: Large payload (1453 bytes); 9999 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1453 bytes); 9999 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 tpjg	2026-07-07 18:26:59 (6 days ago)	Automated: 15 requests with error status in 120s window from 23.94.252.142. Evidence: /RDWeb/Pages/e ... show more Automated: 15 requests with error status in 120s window from 23.94.252.142. Evidence: /RDWeb/Pages/en-US/login.aspx:404,/sslvpn_logon.shtml:404,/wgcgi.cgi:404,/sslvpnclient:404,/cgi/login:404,/logon/LogonPoint/index.html:404,/vpn/index.html:404,/dana-na:404,/clients:404,/global-protect/login.esp:404,/global-protect/prelogin.esp:404,/remote/login:404,/+CSCOE+/logon.html:404,/+webvpn+/index.html:404,/CSCOSSLC/tunnel:404 show less	Web App Attack
🇩🇪 Dennis	2026-07-07 18:23:00 (6 days ago)	23.94.252.142 has been banned for triggering http-probing (11 events over 1.523734262s).	Brute-Force Web App Attack
🇫🇷 LRob	2026-07-07 18:09:10 (6 days ago)	CrowdSec: crowdsecurity/http-open-proxy \| req: ["/CSCOSSLC/tunnel"] \| UA: ["-"]	Hacking
🇫🇮 albionfreemarket.com	2026-07-07 17:56:44 (6 days ago)	23.94.252.142 - - [07/Jul/2026:17:56:42 +0000] "POST /wgcgi.cgi HTTP/1.1" 403 153 "-" "Mozilla/5.0 ( ... show more 23.94.252.142 - - [07/Jul/2026:17:56:42 +0000] "POST /wgcgi.cgi HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; what-vpn-go/0.1)" 0.000 "-" "-" 23.94.252.142 - - [07/Jul/2026:17:56:43 +0000] "GET /RDWeb/Pages/en-US/login.aspx HTTP/1.1" 403 153 "-" "what-vpn-go/0.1" 0.000 "-" "-" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-07-07 17:54:55 (6 days ago)	CrowdSec blocked IP for crowdsecurity/http-open-proxy on vps_agent	Web App Attack
🇳🇱 DonAtari	2026-07-01 20:57:37 (1 week ago)	DShield firewall scan - TCP to port 7547	Brute-Force SSH
Anonymous	2026-06-20 06:06:40 (3 weeks ago)	This IP was involved in an brute force and password spray attack on 2026/06/20 01:03:44	Port Scan Brute-Force Exploited Host Web App Attack
🇨🇿 lp	2026-06-20 04:51:28 (3 weeks ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 23.94.252.142 2026-06-20T05:38:23+02: ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 23.94.252.142 2026-06-20T05:38:23+02:00 vpn Access-Reject 'sdrinkard' station: 23.94.252.142 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-06-20T06:28:28+02:00 vpn Access-Reject 'utilgisprod' station: 23.94.252.142 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 shab	2026-06-19 23:25:52 (3 weeks ago)	Repeated VPN Brute Force	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2400:8901::2000:97ff:feee:edb8

🇰🇷 211.54.230.131

🇷🇴 193.46.255.86

🇫🇮 178.20.210.152

🇺🇸 162.216.150.178

🇺🇸 162.17.163.226

🇮🇳 143.110.246.124

🇳🇱 45.148.10.183

🇳🇱 45.148.10.141

🇶🇦 34.153.64.155

🇬🇧 2.57.17.43

🇩🇪 2a09:bac5:2a96:248c::3a4:17

🇺🇸 205.210.31.106

🇹🇭 125.25.237.103

🇳🇱 45.156.87.161

🇨🇳 223.111.161.83

🇸🇬 178.128.210.183

🇮🇳 122.186.202.58

🇹🇼 111.70.32.192

🇲🇳 103.212.116.87