AbuseIPDB » 94.177.49.36
94.177.49.36
This IP was reported 4 times. Confidence of
Abuse
is 4% : ?
ISP
virtual solution srl
Usage Type
Data Center/Web Hosting/Transit
ASN
AS64445
Domain Name
server-dedicato.com
Country
🇮🇹
Italy
City
Milan, Lombardy
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 94.177.49.36 :
This IP address has been reported a total of
4
times from
2 distinct
sources.
94.177.49.36 was first reported on
February 1st 2026 , and the most recent report was
2 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-25 02:21:40
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 94.177.49.36 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 94.177.49.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 22:21:27.695582 2026] [security2:error] [pid 10630:tid 10630] [client 94.177.49.36:51357] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nbcnewsradio.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nbcnewsradio.com"] [uri "/db.db"] [unique_id "at1np21F2h-SJJGjq15-agAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 01:55:45
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 94.177.49.36 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 94.177.49.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:54:56.829029 2026] [security2:error] [pid 6156:tid 6278] [client 94.177.49.36:53883] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.kettlehill.net|F|2"] [data ".kettlehill.net.db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.net"] [uri "/mail.kettlehill.net.db"] [unique_id "ahzmcKVGAwiqj-RNG0MYQQAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-02-09 12:30:05
(8 months ago)
| A web attack returned code 200 (success).
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 11:29:05
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 94.177.49.36 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 94.177.49.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 06:28:57.091847 2026] [security2:error] [pid 16720:tid 16844] [client 94.177.49.36:52989] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.kettlehill.net|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kettlehill.net"] [uri "/file=http:/example.com"] [unique_id "aX84-XgN2ebRaezbXtJEIQAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: