JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.94.34.134

185.94.34.134 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 1%: ?

ISP	Fast Servers (Pty) Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	traffictransitsolution.us
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.94.34.134

Whois 185.94.34.134

IP Abuse Reports for 185.94.34.134:

This IP address has been reported a total of 20 times from 11 distinct sources. 185.94.34.134 was first reported on December 31st 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-17 00:07:03 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 20:06:54.530015 2026] [security2:error] [pid 9044:tid 9044] [client 185.94.34.134:29843] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Hansen II/Hansen II/Pampa Rouge/originals/Thumbs.db"] [unique_id "agkGnmRA6D-7hqQVPyxAuQAAABA"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Hansen%20II/Hansen%20II/Pampa%20Rouge/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-16 01:42:38 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 21:42:33.432422 2026] [security2:error] [pid 2254567:tid 2254567] [client 185.94.34.134:61863] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Addison/Thumbs.db"] [unique_id "aeA-iWYynURSKGzOvQz7AAAAABs"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Addison/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 10:14:42 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:14:34.388314 2026] [security2:error] [pid 10638:tid 10638] [client 185.94.34.134:48301] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Carrington/Thumbs.db"] [unique_id "abU1CiiFHNKXU-ADBrHWRQAAAAQ"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Carrington/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-02-10 03:20:03 (4 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇫🇷 tilellit.pro	2026-02-06 04:30:04 (4 months ago)	Fail2Ban banned 185.94.34.134 for security violations in jail wp-armour. Log: 2026/02/06 04:30:04 [e ... show more Fail2Ban banned 185.94.34.134 for security violations in jail wp-armour. Log: 2026/02/06 04:30:04 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.94.34.134 \| Target: wplogin" , client: 185.94.34.134, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇫🇷 tilellit.pro	2026-02-05 13:51:55 (4 months ago)	Fail2Ban banned 185.94.34.134 for security violations in jail wp-armour. Log: 2026/02/05 13:51:54 [e ... show more Fail2Ban banned 185.94.34.134 for security violations in jail wp-armour. Log: 2026/02/05 13:51:54 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 185.94.34.134 \| Target: wplogin" , client: 185.94.34.134, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇨🇭 backslash	2026-01-03 17:05:07 (5 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2025-06-12 17:41:26 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 nowyouknow	2025-03-19 09:36:53 (1 year ago)	(From [email protected]) We have hundreds of BTC in cold storage , and we happen to be part of ... show more (From [email protected]) We have hundreds of BTC in cold storage , and we happen to be part of a group of bidders that were awarded exclusive contracts through the USA Strategic Bitcoin Reserve. Check this site to see where policy developments stand https://bitcoinreservemonitor.com We require participants to help us in operations execute our share of the contract. We have a limited amount BTC bought several years earlier. . .therefore, only a few claims are available. Claims are in units of one hundred dollars or one thousand dollars. Your first stake remains for ten days , upon completion your payout will be $200 or $2,000 - withdraw anytime you choose and any amount afterward. You're able to keep compounding your earnings every ten days for as long as three months. Don't wait, since we're covering all advisory taxes and fees and covering taxes and fees for you. Reach out to us to begin. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Products \| Clean show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-03-19 06:27:33 (1 year ago)	(From [email protected]) We've got hundreds of BTC kept in offline storage , and we hap ... show more (From [email protected]) We've got hundreds of BTC kept in offline storage , and we happen to be one among several investors that were granted contract opportunities on the U.S. Government Bitcoin Reserve. Go to this page to follow where policy developments stand https://bitcoinreservemonitor.com We require claim holders to assist us operationally execute our share of the contract. We own a restricted quantity crypto acquired a long time back. . .thus, the claim slots are scarce. Claims are in units of 100 USD or 1000 USD. Your first stake remains for ten days , upon completion your return is $200 or $2000 - withdraw at any time and for any amount later on. You have the option to reinvest your earnings every 10-day cycle for a maximum of 90 days. Take action quickly, because we are eliminating any associated fees and taxes while absorbing taxes and charges on our end. Contact us to get started. Nate +1 (602) 551-6607 Text and WhatsApp [email protected] Unger Cleaning Pro show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-03-14 02:18:10 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 185.94.34.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 13 22:18:03.792052 2025] [security2:error] [pid 10837:tid 10857] [client 185.94.34.134:17473] [client 185.94.34.134] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.jean-paullederer.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.jean-paullederer.com"] [uri "/[email protected]"] [unique_id "Z9OR2yC-Zo5YfBm7noSrzwAAAI8"], referer: https://www.jean-paullederer.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-07 09:57:40 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2025-02-25 02:03:27 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-28 09:29:02 (1 year ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2024-10-29 07:28:20 (1 year ago)	This IP was involved in an brute force and password spray attack on 2024/10/29 02:26:25	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 2a09:bac1:61c0:3380::388:b3

🇲🇩 217.156.64.228

🇧🇩 113.11.34.221

🇨🇳 222.178.214.50

🇲🇽 187.154.100.150

🇧🇷 177.155.133.175

🇯🇵 160.251.202.50

🇰🇷 125.130.223.207

🇫🇷 51.178.31.138

🇮🇳 49.205.176.44

🇳🇱 195.178.110.237

🇺🇸 146.190.119.189

🇨🇳 139.170.141.170

🇧🇩 103.183.62.0

🇨🇦 85.217.149.65

🇫🇷 85.217.140.25

🇬🇧 35.203.210.46

🇻🇳 27.79.5.139

🇪🇨 177.53.215.134

🇺🇸 162.216.149.137