JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.74

212.30.36.74 was found in our database!

This IP was reported 318 times. Confidence of Abuse is 88%: ?

88%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.74

Whois 212.30.36.74

IP Abuse Reports for 212.30.36.74:

This IP address has been reported a total of 318 times from 137 distinct sources. 212.30.36.74 was first reported on March 21st 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-04-16 11:11:50 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 16 07:11:42.990953 2025] [security2:error] [pid 390002:tid 390002] [client 212.30.36.74:53723] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|olimpiacerda.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "olimpiacerda.com"] [uri "/restore/sql.sql"] [unique_id "Z_-QbkZENCx5qdnzuAa3OQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Not Fake	2025-04-15 15:41:25 (1 year ago)	$f2bV_matches	Web App Attack
🇦🇺 oncord	2025-04-13 15:26:37 (1 year ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2025-04-08 01:37:19 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 07 21:37:10.186699 2025] [security2:error] [pid 2436:tid 2454] [client 212.30.36.74:6505] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nobletitles.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nobletitles.org"] [uri "/backups/sql.sql"] [unique_id "Z_R9xrtkYzVJZfOehIsouwAAAEs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2025-03-25 10:38:59 (1 year ago)	Fail2Ban apache-tripwires	Web App Attack
🇮🇹 Progetto1	2025-03-14 20:06:03 (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-03-14 19:15:12 (1 year ago)	Excessive 404 Traffic Wordpress	Web App Attack
🇮🇩 Burayot	2025-03-13 10:06:52 (1 year ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.30.36.74 (DE/Germany/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 212.30.36.74 (DE/Germany/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-03-12 20:44:49 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 12 16:44:41.823371 2025] [security2:error] [pid 20454:tid 20454] [client 212.30.36.74:2901] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elhosting.us"] [uri "/.env"] [unique_id "Z9HyOQdtnFQypJzp3iUVpQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-28 18:06:40 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 212.30.36.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 28 13:06:32.797080 2025] [security2:error] [pid 26939:tid 26939] [client 212.30.36.74:50657] [client 212.30.36.74] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sailingcharterburma.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailingcharterburma.com"] [uri "/backups/www.sql"] [unique_id "Z8H7KAvTSWtp2hk5ZWBZVgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-12 23:40:52 (1 year ago)	Attempted brute force login to web vpn 19 time(s); last attempt for 2025.02.12 is noted in report ti ... show more Attempted brute force login to web vpn 19 time(s); last attempt for 2025.02.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-11 21:35:46 (1 year ago)	Attempted brute force login to web vpn 19 time(s); last attempt for 2025.02.11 is noted in report ti ... show more Attempted brute force login to web vpn 19 time(s); last attempt for 2025.02.11 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-10 23:33:51 (1 year ago)	Attempted brute force login to web vpn 28 time(s); last attempt for 2025.02.10 is noted in report ti ... show more Attempted brute force login to web vpn 28 time(s); last attempt for 2025.02.10 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-09 22:59:34 (1 year ago)	Attempted brute force login to web vpn 26 time(s); last attempt for 2025.02.09 is noted in report ti ... show more Attempted brute force login to web vpn 26 time(s); last attempt for 2025.02.09 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 insightdiabetes.com	2025-02-09 04:55:04 (1 year ago)	IP reported by Wordfence	Brute-Force SSH

Showing 151 to 165 of 318 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.223.107.86

🇭🇰 172.71.210.102

🇭🇰 162.158.114.72

🇨🇳 118.212.122.205

🇺🇸 45.156.129.73

🇺🇸 45.156.129.71

🇩🇪 45.135.194.83

🇲🇲 45.41.105.41

🇺🇸 43.173.69.147

🇺🇸 192.60.60.62

🇳🇱 185.223.235.16

🇺🇸 156.229.163.164

🇺🇸 109.105.210.77

🇺🇸 89.187.173.173

🇧🇬 78.128.114.162

🇺🇸 74.114.29.27

🇰🇷 58.224.62.29

🇲🇱 41.73.123.128

🇧🇪 198.235.24.209

🇺🇸 192.210.228.134