94.143.198.173
Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
68% Elevated
29 reports
21 reporters ยท latest 3 days ago
ISP Home network HomeLine
Usage Type Fixed Line ISP
ASN AS42837
Hostname(s) 94-143-198-173.elcat.kg
Domain Name elcat.kg
Country ๐Ÿ‡ฐ๐Ÿ‡ฌ Kyrgyzstan
City Bishkek, Bishkek

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 94.143.198.173

This IP address has been reported a total of 29 times from 21 distinct sources. 94.143.198.173 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Germany with 5 reports; United States of America with 3 reports; Brazil with 1 report. The most common categories in these recent reports were: SSH 7 times; Port Scan 7 times; Brute-Force 6 times; IoT Targeted 1 time; Bad Web Bot 1 time.

Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡บ๐Ÿ‡ธ OceanTreasure
tcp/23; Legacy Telnet remote access probe @ 2026-09-25T06:14:18Z
IoT Targeted Port Scan
๐Ÿ‡ญ๐Ÿ‡ฐ mutebot.net
SRC=94.143.198.173, PROTO=TCP, SPT=43106, DPT=23
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช von44bis33
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
Brute-Force SSH
๐Ÿ‡ฉ๐Ÿ‡ช KPS
PortscanT
Port Scan
๐Ÿ‡ง๐Ÿ‡ท noconex
Port Scan Brute-Force SSH
๐Ÿ‡บ๐Ÿ‡ธ ISPLtd
Port Scan SSH
๐Ÿ‡จ๐Ÿ‡ญ blinx
Caught by endlessh, wasted time: 971s
Brute-Force SSH
Anonymous
Brute-Force
๐Ÿ‡ฐ๐Ÿ‡ท winter
Connection attemp from 94.143.198.173 to port 22
Brute-Force SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
Anonymous
Unauthorized connection to SSH port 22
Port Scan SSH
๐Ÿ‡บ๐Ÿ‡ธ ้ฌผๅฝฑ233
Bad Web Bot
๐Ÿ‡บ๐Ÿ‡ธ kosada.com
Web bot: denial-of-service flood
DDoS Attack Bad Web Bot
๐Ÿ‡ฎ๐Ÿ‡ฉ hermawan
Hacking Web App Attack
๐Ÿ‡ง๐Ÿ‡ท diego
Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds
DDoS Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 2604:a880:400:d1:0:5:db6:2001
๐Ÿ‡บ๐Ÿ‡ธ 2604:a880:400:d1:0:5:d8c:5001
๐Ÿ‡จ๐Ÿ‡ณ 101.67.138.127
๐Ÿ‡บ๐Ÿ‡ธ 2604:a880:800:14:0:3:91b9:4000
๐Ÿ‡บ๐Ÿ‡ธ 2604:a880:400:d1:0:5:d98:8001
๐Ÿ‡ซ๐Ÿ‡ท 194.5.53.59
๐Ÿ‡ป๐Ÿ‡ณ 171.224.11.221
๐Ÿ‡จ๐Ÿ‡ณ 120.48.20.147
๐Ÿ‡ซ๐Ÿ‡ท 109.205.176.10
๐Ÿ‡ธ๐Ÿ‡ช 104.243.196.115
๐Ÿ‡บ๐Ÿ‡ธ 162.216.149.68
๐Ÿ‡ณ๐Ÿ‡ฑ 109.160.32.163
๐Ÿ‡บ๐Ÿ‡ธ 104.17.71.10
๐Ÿ‡ฟ๐Ÿ‡ฆ 102.64.43.106
๐Ÿ‡ณ๐Ÿ‡ฑ 94.154.43.69
๐Ÿ‡น๐Ÿ‡ท 78.186.54.65
๐Ÿ‡ฎ๐Ÿ‡ณ 66.116.248.73
๐Ÿ‡ฑ๐Ÿ‡น 62.60.130.201
๐Ÿ‡บ๐Ÿ‡ธ 40.80.203.118
๐Ÿ‡ฆ๐Ÿ‡ฟ 213.172.73.149