JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.94.32.212

185.94.32.212 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 0%: ?

ISP	Fast Servers (Pty) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	traffictransitsolution.us
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.94.32.212

Whois 185.94.32.212

IP Abuse Reports for 185.94.32.212:

This IP address has been reported a total of 13 times from 9 distinct sources. 185.94.32.212 was first reported on March 29th 2024, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-27 19:00:57 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-09-26 12:20:31 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇭 backslash	2025-06-19 20:50:07 (11 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2024-12-21 23:51:12 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-10-05 17:35:08 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
🇺🇸 TPI-Abuse	2024-08-07 17:39:05 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.94.32.212 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.94.32.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 07 13:38:59.542810 2024] [security2:error] [pid 4822:tid 4822] [client 185.94.32.212:27041] [client 185.94.32.212] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Lazer/Stargo Black/Thumbs.db"] [unique_id "ZrOxM93t7CP4wM9BPl8tjQAAAAI"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Lazer/Stargo%20Black/ show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 essinghigh	2024-06-14 08:20:14 (2 years ago)	1718353213 # Service_probe # SIGNATURE_SEND # source_ip:185.94.32.212 # dst_port:4172 ...	Port Scan
🇦🇺 MAGIC	2024-05-21 04:07:51 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2024-05-17 06:15:03 (2 years ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇧🇪 taivas.nl	2024-05-15 19:02:02 (2 years ago)	Wordpress_Attack	Web App Attack
🇺🇸 TPI-Abuse	2024-04-29 22:06:36 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 185.94.32.212 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 185.94.32.212 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 29 18:06:28.993735 2024] [security2:error] [pid 13381] [client 185.94.32.212:13711] [client 185.94.32.212] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|harbouronline.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "harbouronline.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZjAZ5DiSh1TRNQm3aE_bXAAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2024-04-12 06:37:22 (2 years ago)	honeypot	Bad Web Bot
Anonymous	2024-03-29 10:14:38 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 193.163.203.12

🇲🇽 187.190.35.163

🇭🇰 154.221.17.137

🇰🇷 125.139.124.120

🇨🇳 123.235.51.142

🇷🇴 80.94.92.171

🇺🇸 45.8.19.102

🇺🇸 38.148.99.59

🇺🇸 20.64.105.168

🇮🇹 209.227.244.120

🇨🇳 171.217.92.33

🇩🇪 155.117.127.214

🇺🇸 150.107.38.198

🇺🇸 142.93.255.85

🇦🇱 130.12.209.134

🇯🇴 109.107.225.133

🇷🇴 2.57.122.238

🇩🇪 213.209.159.226

🇳🇱 195.178.110.30

🇭🇰 185.239.84.249