JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.102

212.30.36.102 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 90%: ?

90%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.102

Whois 212.30.36.102

IP Abuse Reports for 212.30.36.102:

This IP address has been reported a total of 362 times from 157 distinct sources. 212.30.36.102 was first reported on November 3rd 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-04-08 01:08:10 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 21:08:01.863129 2025] [security2:error] [pid 18406:tid 18406] [client 212.30.36.102:64551] [client 212.30.36.102] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pellman-world.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pellman-world.com"] [uri "/backups/sql.sql"] [unique_id "Z_R28ZzNb_a2o_uk_YR_LAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2025-04-01 23:12:06 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 Penny Packer	2025-03-25 10:21:43 (1 year ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2025-03-21 23:21:58 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 19:21:50.913843 2025] [security2:error] [pid 28832:tid 28832] [client 212.30.36.102:37579] [client 212.30.36.102] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sptzr.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sptzr.net"] [uri "/old/sql.sql"] [unique_id "Z930jrr04A78x8UXSPquYwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-12 20:59:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 12 16:59:08.401073 2025] [security2:error] [pid 28397:tid 28397] [client 212.30.36.102:20739] [client 212.30.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eliteelectricalservices.us"] [uri "/.env"] [unique_id "Z9H1nFDEVLhWxAUZfX8biwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-03-12 20:35:19 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 212.30.36.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 12 16:35:11.769985 2025] [security2:error] [pid 25483:tid 25483] [client 212.30.36.102:38133] [client 212.30.36.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "democratorrepublican.us"] [uri "/.env"] [unique_id "Z9Hv_0YzwpBB5ZxBnK_fVgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 mgarofano80	2025-03-11 10:58:44 (1 year ago)		Brute-Force Web App Attack
🇺🇸 Penny Packer	2025-03-04 14:49:27 (1 year ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2025-02-12 15:24:29 (1 year ago)	Attempted brute force login to web vpn 19 time(s); last attempt for 2025.02.12 is noted in report ti ... show more Attempted brute force login to web vpn 19 time(s); last attempt for 2025.02.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-11 23:14:27 (1 year ago)	Attempted brute force login to web vpn 34 time(s); last attempt for 2025.02.11 is noted in report ti ... show more Attempted brute force login to web vpn 34 time(s); last attempt for 2025.02.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-10 21:51:26 (1 year ago)	Attempted brute force login to web vpn 26 time(s); last attempt for 2025.02.10 is noted in report ti ... show more Attempted brute force login to web vpn 26 time(s); last attempt for 2025.02.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-09 22:57:25 (1 year ago)	Attempted brute force login to web vpn 17 time(s); last attempt for 2025.02.09 is noted in report ti ... show more Attempted brute force login to web vpn 17 time(s); last attempt for 2025.02.09 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 insightdiabetes.com	2025-02-09 04:55:13 (1 year ago)	IP reported by Wordfence	Brute-Force SSH
Anonymous	2025-02-08 23:56:29 (1 year ago)	Attempted brute force login to web vpn 18 time(s); last attempt for 2025.02.08 is noted in report ti ... show more Attempted brute force login to web vpn 18 time(s); last attempt for 2025.02.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-07 23:46:53 (1 year ago)	Attempted brute force login to web vpn 22 time(s); last attempt for 2025.02.07 is noted in report ti ... show more Attempted brute force login to web vpn 22 time(s); last attempt for 2025.02.07 is noted in report timestamp show less	Hacking Brute-Force

Showing 166 to 180 of 362 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.56.0.19

🇺🇸 172.217.107.149

🇺🇸 162.216.150.96

🇺🇸 162.216.150.35

🇸🇪 155.4.244.179

🇺🇸 154.197.57.161

🇨🇳 123.191.137.138

🇺🇸 64.62.197.211

🇱🇹 45.227.254.170

🇨🇳 223.199.165.30

🇮🇳 210.212.28.141

🇺🇸 208.84.101.231

🇬🇧 195.206.182.206

🇬🇧 185.216.145.174

🇬🇧 185.216.145.170

🇺🇸 165.154.173.104

🇮🇳 152.32.158.74

🇷🇴 80.94.92.182

🇨🇳 42.51.32.228

🇬🇭 41.139.37.49