AbuseIPDB » 185.94.35.54
185.94.35.54 was found in our database!
This IP was reported 7 times. Confidence of
Abuse
is 10% : ?
ISP
Fast Servers (Pty) Ltd
Usage Type
Data Center/Web Hosting/Transit
ASN
AS59651
Domain Name
traffictransitsolution.us
Country
๐ซ๐ฎ
Finland
City
Vantaa, Uusimaa
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.94.35.54 :
This IP address has been reported a total of
7
times from
7 distinct
sources.
185.94.35.54 was first reported on
August 29th 2024 , and the most recent report was
3 weeks ago .
Old Reports:
The most recent abuse report for this IP address is from
3 weeks ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-05-13 20:39:46
(3 weeks ago)
(mod_security) mod_security (id:211030) triggered by 185.94.35.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211030) triggered by 185.94.35.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:39:39.392865 2026] [security2:error] [pid 4131:tid 4131] [client 185.94.35.54:40625] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.genesis-castle.com|F|2"] [data "Matched Data: ('~'||( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/picture.php"] [unique_id "agThi0anJR36FjibQGh3UwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
solution.it
2026-05-09 07:21:20
(3 weeks ago)
[Sat May 09 09:21:19.945689 2026] [php7:error] [pid 2078583:tid 2078583] [client 185.94.35.54:17619] ...
show more
[Sat May 09 09:21:19.945689 2026] [php7:error] [pid 2078583:tid 2078583] [client 185.94.35.54:17619] script '/var/www/html/blog.solution.it/admin-login.php' not found or unable to stat
show less
Web App Attack
๐จ๐ญ
backslash
2025-11-19 16:35:04
(6 months ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
๐ฉ๐ช
dot.mg
2025-02-20 14:13:38
(1 year ago)
Russian spam
Web Spam
Blog Spam
๐ฉ๐ช
css672
2024-10-17 09:19:33
(1 year ago)
Credential brute-force attacks on webpage logins [18,21].
remote_addr: 185.94.35.54, error_code: 76
...
show more
Credential brute-force attacks on webpage logins [18,21].
remote_addr: 185.94.35.54, error_code: 76
username: annashevchuk12ukr-net
password: [censored]
fruad_score: 0, abuseConfidenceScore: 0
css672: V.4.10.16.1436
show less
Brute-Force
Web App Attack
๐จ๐ฆ
wil.com
2024-09-25 05:33:23
(1 year ago)
GlobalProtect login attempts with user jkemp.
VPN IP
Brute-Force
Anonymous
2024-08-29 02:35:33
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: