JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.154.113.92

94.154.113.92 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 16%: ?

16%

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59651
Domain Name	finegroupservers.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.154.113.92

Whois 94.154.113.92

IP Abuse Reports for 94.154.113.92:

This IP address has been reported a total of 16 times from 7 distinct sources. 94.154.113.92 was first reported on January 26th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-05-28 22:51:27 (1 week ago)	(mod_security) mod_security (id:900177) triggered by 94.154.113.92 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900177) triggered by 94.154.113.92 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇩🇪 Oakley	2026-05-17 05:11:12 (3 weeks ago)	(mod_security) mod_security (id:900178) triggered by 94.154.113.92 (US/United States/-): 5 in the la ... show more (mod_security) mod_security (id:900178) triggered by 94.154.113.92 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇱🇻 garmtech.com	2026-05-10 11:21:36 (4 weeks ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇱🇻 garmtech.com	2026-05-07 06:05:38 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-05.94.154.113.92.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-05.94.154.113.92.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-05-05 19:26:54 (1 month ago)	Forum/form spam	Web Spam
Anonymous	2026-01-05 02:42:24 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-17 20:09:25 (5 months ago)	(mod_security) mod_security (id:210350) triggered by 94.154.113.92 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 94.154.113.92 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 17 15:09:18.111134 2025] [security2:error] [pid 15324:tid 15324] [client 94.154.113.92:45565] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.powerastronomy.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.powerastronomy.com"] [uri "/Runequest/doku.php"] [unique_id "aUMN7jjuoig0XcmYXB_7LwAAAAI"], referer: http://www.powerastronomy.com/Runequest/doku.php?id=cat888_bet&do=register show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-08-21 18:23:48 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-08-21T20:15:56+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-08-21T20:15:56+02:00 vpn Access-Reject 'isabella' station: 94.154.113.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-08-20 15:23:47 (9 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-08-20T16:57:39+02: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-08-20T16:57:39+02:00 vpn Access-Reject 'statistics' station: 94.154.113.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-02-07 20:50:24 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-02-07T20:50:11+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-02-07T20:50:11+01:00 vpn Access-Reject 'ndr' station: 94.154.113.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-02-04 16:21:19 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-02-04T16:05:33+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-02-04T16:05:33+01:00 vpn Access-Reject 'burks' station: 94.154.113.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-02-02 16:21:06 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-02-02T17:13:07+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 94.154.113.92 2025-02-02T17:13:07+01:00 vpn Access-Reject 'sabering' station: 94.154.113.92 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-01-29 13:31:35 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-01-27 13:18:22 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-01-26 07:27:10 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 2a00:809:2b8:f31f:5cd3:696a:8cf8:c063

🇨🇴 190.0.63.226

🇩🇪 178.105.176.35

🇺🇸 104.238.52.241

🇩🇪 91.56.12.18

🇵🇭 49.149.108.136

🇺🇸 34.82.55.144

🇲🇽 187.230.115.212

🇨🇴 186.179.100.17

🇬🇧 185.247.137.116

🇷🇺 176.120.22.147

🇷🇴 80.94.92.182

🇺🇸 45.74.252.76

🇨🇳 42.100.23.170

🇻🇳 14.225.7.70

🇻🇳 1.53.75.36

🇫🇷 178.170.38.56

🇷🇴 151.242.30.212

🇨🇳 47.95.199.24

🇨🇳 36.41.173.197