AbuseIPDB » 185.94.34.247
185.94.34.247
This IP was reported 7 times. Confidence of
Abuse
is 0% : ?
ISP
Fast Servers (Pty) Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS59651
Domain Name
traffictransitsolution.us
Country
🇫🇮
Finland
City
Vantaa, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.94.34.247 :
This IP address has been reported a total of
7
times from
6 distinct
sources.
185.94.34.247 was first reported on
July 24th 2024 , and the most recent report was
1 month ago
Old Reports:
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-04-27 16:02:26
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.247 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 27 12:02:17.449124 2026] [security2:error] [pid 18681:tid 18681] [client 185.94.34.247:24041] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.englishmagic.us|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.englishmagic.us"] [uri "/s3cmd.ini"] [unique_id "ae-IiVaymI2TtZEdKVhDtgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-26 02:10:24
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 185.94.34.247 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 185.94.34.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 22:10:16.468793 2026] [security2:error] [pid 4907:tid 4907] [client 185.94.34.247:27035] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sagoscapes.com|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sagoscapes.com"] [uri "/s3cmd.ini"] [unique_id "ae10CA910vt3eDwzSWimJgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
CristianD
2026-02-11 17:27:00
(4 months ago)
DDoS Attack
🇨🇭
backslash
2025-11-21 11:05:04
(7 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
2024-09-30 12:15:08
(1 year ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
🇵🇱
sefinek.net
2024-08-30 12:04:39
(1 year ago)
This IP address has been identified as generating artificial traffic on websites following the purch ...
show more
This IP address has been identified as generating artificial traffic on websites following the purchase of a specific service from a Fiverr gig. User-Agent and Referrer: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/9.1.2 Safari/605.1.15 - -
show less
Bad Web Bot
2024-07-24 00:53:15
(1 year ago)
Ports: 2077,2078,2082,2083,2086,2087,2095,2096; Direction: 0; Trigger: LF_DISTATTACK
Brute-Force
SSH
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: