This IP address has been reported a total of
27
times from
20 distinct
sources.
94.142.143.194 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 4
reports;
Czechia
with 2
reports;
Germany
with 2
reports.
The most common categories in these recent reports were:
Bad Web Bot
4
times;
Brute-Force
4
times;
Web App Attack
3
times;
VPN IP
1
time;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(wordpress) Failed wordpress login from 94.142.143.194 (RU/Russia/Moscow/Moscow/-/[redacted]): (CF_ ...
show more(wordpress) Failed wordpress login from 94.142.143.194 (RU/Russia/Moscow/Moscow/-/[redacted]): (CF_ENABLE)
show less
Unauthorized VPN login attempts: 1 attempts were recorded from 94.142.143.194
2026-09-30T06:31:52+02 ...
show moreUnauthorized VPN login attempts: 1 attempts were recorded from 94.142.143.194
2026-09-30T06:31:52+02:00 vpn Access-Reject 'xklak00' station: 94.142.143.194 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0
show less
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show moreMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ...
show moreMozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
show less
UDP flood (DDoS) vs AS215599: 2197 pkts / 3.14 MB to UDP 80/8443 across 373 dst IP(s), 2026-08-19 21 ...
show moreUDP flood (DDoS) vs AS215599: 2197 pkts / 3.14 MB to UDP 80/8443 across 373 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
UDP flood (DDoS) vs AS215599: 2197 pkts / 3.14 MB to UDP 80/8443 across 373 dst IP(s), 2026-08-19 21 ...
show moreUDP flood (DDoS) vs AS215599: 2197 pkts / 3.14 MB to UDP 80/8443 across 373 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters.
show less
Automated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically cr ...
show moreAutomated distributed scraping of Forgejo git server (git.vitexsoftware.com). Bots systematically crawled git blame endpoints (/*/blame/commit/<hash>/file) across all commits of public repositories, causing server load of 17+ (normal: <2). Over 71,000 unique IPs involved. Attack window: 2026-05-26 03:30-06:37 UTC. Primary target: PureHTML/purezencart (9933 commits, 5065 files). Each blame request triggers expensive git operations; 30,000+ slow requests per hour.
show less
