JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.154.113.254

94.154.113.254 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 14%: ?

14%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46475
Domain Name	finegroupservers.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.154.113.254

Whois 94.154.113.254

IP Abuse Reports for 94.154.113.254:

This IP address has been reported a total of 14 times from 9 distinct sources. 94.154.113.254 was first reported on July 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MusicLibrary	2026-07-11 18:15:14 (1 day ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇫🇷 Baking333	2026-07-08 17:19:31 (4 days ago)	[redacted] 94.154.113.254 - - [08/Jul/2026:18:19:28 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/332 ... show more [redacted] 94.154.113.254 - - [08/Jul/2026:18:19:28 +0100] "GET /[redacted] HTTP/1.1" 302 1518 0/33282 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 94.154.113.254 - - [08/Jul/2026:18:19:30 +0100] "GET /wp-admin HTTP/1.1" 302 1518 0/56516 "https://[redacted]" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-04-15 00:20:00 (2 months ago)	Try to access /xmlrpc.php?Fuck_You_Elon_Musk_XD	Web App Attack
🇨🇿 lp	2025-03-23 14:49:47 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 94.154.113.254 2025-03-23T14:31:52+01 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 94.154.113.254 2025-03-23T14:31:52+01:00 vpn Access-Reject '34524815' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-23T14:56:04+01:00 vpn Access-Reject 'scotland' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-21 16:21:10 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 94.154.113.254 2025-03-21T16:32:22+01 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 94.154.113.254 2025-03-21T16:32:22+01:00 vpn Access-Reject 'public' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-21T16:36:40+01:00 vpn Access-Reject 'darnell' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-18 23:50:42 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 94.154.113.254 2025-03-19T00:19:19+01 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 94.154.113.254 2025-03-19T00:19:19+01:00 vpn Access-Reject 'desiree' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-19T00:37:25+01:00 vpn Access-Reject 'mh' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-14 11:51:00 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.254 2025-03-14T12:16:03+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.254 2025-03-14T12:16:03+01:00 vpn Access-Reject 'claus' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-03-11 09:37:02 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-03-09 07:11:26 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇨🇿 lp	2025-03-08 08:50:18 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.254 2025-03-08T08:59:28+01 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.254 2025-03-08T08:59:28+01:00 vpn Access-Reject 'more' station: 94.154.113.254 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-03-04 12:04:40 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 94.154.113.254 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 94.154.113.254 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 04 07:04:32.962611 2025] [security2:error] [pid 27931:tid 27931] [client 94.154.113.254:19919] [client 94.154.113.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "honigcpa.com"] [uri "/.env"] [unique_id "Z8bsUNUmPpMhqfEtBl_E3AAAABE"], referer: https://tasamm.com/about/ggg107.html show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2025-01-27 13:23:16 (1 year ago)	94.154.113.254 - - [27/Jan/2025:14:23:16 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Lin ... show more 94.154.113.254 - - [27/Jan/2025:14:23:16 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.115 Safari/537.36" show less	VPN IP Hacking Web App Attack
🇷🇺 sms.ru	2024-09-30 02:05:07 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack
🇺🇸 MrDD	2024-07-09 18:19:09 (2 years ago)	Brute Force on Cisco Web VPN	Brute-Force

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:9440:3af::5e:72

🇨🇳 218.86.175.51

🇺🇸 151.240.62.143

🇫🇮 135.181.182.250

🇩🇪 104.207.57.222

🇧🇦 80.65.90.155

🇵🇰 59.103.221.21

🇩🇪 45.3.43.3

🇺🇸 205.210.31.43

🇬🇧 198.244.168.82

🇧🇪 198.235.24.233

🇩🇪 195.63.31.38

🇮🇶 185.158.22.150

🇺🇸 137.184.111.0

🇨🇳 119.96.158.87

🇲🇾 115.134.115.201

🇩🇪 104.207.57.228

🇱🇹 81.30.98.144

🇺🇸 52.224.109.126

🇹🇭 49.0.82.4