JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.94.32.63

185.94.32.63 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 15%: ?

15%

ISP	Fast Servers (Pty) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	traffictransitsolution.us
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.94.32.63

Whois 185.94.32.63

IP Abuse Reports for 185.94.32.63:

This IP address has been reported a total of 30 times from 14 distinct sources. 185.94.32.63 was first reported on March 31st 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 13:25:06 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:24:58.362458 2026] [security2:error] [pid 28528:tid 28528] [client 185.94.32.63:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "local639.com"] [uri "/wp-config.bak"] [unique_id "ahBZKpV5KZa1K6e1gK8wyQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 11:46:32 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:46:25.847775 2026] [security2:error] [pid 15585:tid 15585] [client 185.94.32.63:38251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gracebaptisthartsville.com"] [uri "/wp-config.php.old"] [unique_id "ahBCEcezf8e-ZwVQ_W4WOAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 01:13:53 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 21:13:46.673104 2026] [security2:error] [pid 27547:tid 27547] [client 185.94.32.63:17935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fusteriafontane.com"] [uri "/wp-config.php~"] [unique_id "ag-tyiRqLU4BZmRHsMPSlQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-21 15:56:29 (3 weeks ago)	IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.php.orig	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:12:06 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:11:59.176569 2026] [security2:error] [pid 16891:tid 16891] [client 185.94.32.63:32849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thebestac.com"] [uri "/wp-config.txt"] [unique_id "ag4jnxzrTr2yryZ-6fXDAwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nationaleventpros.com	2026-05-01 03:06:14 (1 month ago)	vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 01:30:15 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 20:30:06.860203 2025] [security2:error] [pid 2713:tid 2713] [client 185.94.32.63:18873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|btccasting.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "btccasting.com"] [uri "/"] [unique_id "aVCIHhu2DijqtRP5sTuyggAAAAQ"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-14 17:13:38 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 14 12:13:33.288718 2025] [security2:error] [pid 17558:tid 17558] [client 185.94.32.63:41955] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|webjemm.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "webjemm.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aT7wPTX3Wn6veZmr4_Ho9wAAAAA"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-04-15 14:51:59 (1 year ago)	(From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At ... show more (From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At Global Wide PR, we specialize in connecting businesses with top media platforms to increase visibility and credibility. As a gesture to get started, we’re offering a free article on Digital Journal—a great way to showcase your business to a wider audience. For those looking to maximize exposure, we can also feature your brand on affiliates of FOX, NBC, CBS, ABC, and 300+ other sites for just $297. These placements can help you build trust and attract new customers. To take advantage of this opportunity, click the link below to sign up on our site, and we’ll get back to you ASAP: https://bit.ly/gwidepressrelease Looking forward to helping your brand shine! Best regards, Claudine Global Wide PR We value your preferences and understand that our emails may not always be relevant. To opt out of our emails, please complete this quick form with your website address: bit. ly/unsubscribemeurl show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-04-08 19:06:28 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 185.94.32.63 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 08 15:06:21.629862 2025] [security2:error] [pid 13084:tid 13084] [client 185.94.32.63:35077] [client 185.94.32.63] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|urlpick.com\|F\|2"] [data ".adoptsearch.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "urlpick.com"] [uri "/http:/www.adoptsearch.com"] [unique_id "Z_VzrR1oBcwR_FWQLgecOgAAABM"], referer: http://urlpick.com/contacts.html show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-04-05 05:05:54 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nowyouknow	2025-04-05 03:39:26 (1 year ago)	(From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At ... show more (From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At Global Wide PR, we specialize in connecting businesses with top media platforms to increase visibility and credibility. As a gesture to get started, we’re offering a free article on Digital Journal—a great way to showcase your business to a wider audience. For those looking to maximize exposure, we can also feature your brand on affiliates of FOX, NBC, CBS, ABC, and 300+ other sites for just $297. These placements can help you build trust and attract new customers. To take advantage of this opportunity, click the link below to sign up on our site, and we’ll get back to you ASAP: https://bit.ly/gwidepressrelease Looking forward to helping your brand shine! Best regards, Claudine Global Wide PR We understand that you might prefer not to receive our updates. To opt out of our emails, please complete this quick form with your website address: bit. ly/unsubscribemeurl show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-28 09:07:53 (1 year ago)	(From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At ... show more (From [email protected]) Hi, Your brand deserves to stand out, and we’re here to help. At Global Wide PR, we specialize in connecting businesses with top media platforms to increase visibility and credibility. As a gesture to get started, we’re offering a free article on Digital Journal—a great way to showcase your business to a wider audience. For those looking to maximize exposure, we can also feature your brand on affiliates of FOX, NBC, CBS, ABC, and 300+ other sites for just $297. These placements can help you build trust and attract new customers. To take advantage of this opportunity, click the link below to sign up on our site, and we’ll get back to you ASAP: https://bit.ly/globalwidpr Looking forward to helping your brand shine! Best regards, Claudine Global Wide PR We understand that our emails may not always be relevant. To unsubscribe from our list, please fill out the unsubscribe form with your website address: bit. ly/unsubscribemeurl show less	Phishing Web Spam
🇨🇭 backslash	2025-03-25 18:45:05 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇹 Progetto1	2025-02-16 07:15:02 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 202.142.67.222

🇩🇪 194.88.98.113

🇧🇪 188.93.112.20

🇦🇷 186.148.224.83

🇳🇱 172.235.173.150

🇻🇳 113.166.228.53

🇷🇴 92.118.39.62

🇫🇷 51.77.158.34

🇫🇷 51.15.149.97

🇸🇬 43.134.124.166

🇵🇭 222.127.226.53

🇨🇳 220.161.52.149

🇨🇳 180.76.234.93

🇺🇸 172.253.91.153

🇺🇸 162.216.149.74

🇻🇳 103.154.62.14

🇮🇩 103.110.34.131

🇺🇦 91.234.139.176

🇧🇬 91.191.209.198

🇲🇾 47.250.172.71