AbuseIPDB » 185.168.30.144
185.168.30.144 was found in our database!
This IP was reported 8 times. Confidence of
Abuse
is 4% : ?
ISP
NETLABS LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS213954
Domain Name
netlabs.com.ua
Country
π©πͺ
Germany
City
Berlin, State of Berlin
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 185.168.30.144 :
This IP address has been reported a total of
8
times from
6 distinct
sources.
185.168.30.144 was first reported on
March 15th 2026 , and the most recent report was
1 hour ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
π©πͺ
LRob
2026-08-18 16:36:28
(1 hour ago)
WordPress probing | req: /xmlrpc.php | UA: Googlebot/2.1 (+http://www.google.com/bot.html)
Brute-Force
Web App Attack
π©πͺ
MBombeck
2026-05-18 10:43:31
(3 months ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
πΊπΈ
TPI-Abuse
2026-05-06 10:58:30
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 185.168.30.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.168.30.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 06 06:58:22.791611 2026] [security2:error] [pid 22225:tid 22239] [client 185.168.30.144:55095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dulemba.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dulemba.com"] [uri "/wp-json/wp/v2/users"] [unique_id "afsezgfFws1_wGoZVERIOAAAAIo"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
kjaerulff
2026-05-03 23:30:29
(3 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
Anonymous
2026-05-02 21:19:13
(3 months ago)
PARMACOM WEBEXPLOIT 185.168.30.144 (185.168.30.144)
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-26 01:42:47
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 185.168.30.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.168.30.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 25 21:42:40.093946 2026] [security2:error] [pid 32121:tid 32130] [client 185.168.30.144:40647] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||peimbert.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "peimbert.com"] [uri "/wp-json/wp/v2/users"] [unique_id "acSPEEXgdnwiJT8w6uh-GQAAAEQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-03-16 12:15:36
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 185.168.30.144 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 185.168.30.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 08:15:31.678960 2026] [security2:error] [pid 26281:tid 26281] [client 185.168.30.144:37361] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||firstunitedreserve.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "firstunitedreserve.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abf0Y28dsUEZlLTbVt8pbAAAABc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨π
backslash
2026-03-15 03:42:01
(5 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown π©
Recently Reported IPs: