JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.81.37.50

212.81.37.50 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 33%: ?

33%

ISP	JSC Selectel
Usage Type	Data Center/Web Hosting/Transit
ASN	AS49505
Domain Name	selectel.ru
Country	🇷🇺 Russian Federation
City	Saint Petersburg, St.-Petersburg

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.81.37.50

Whois 212.81.37.50

IP Abuse Reports for 212.81.37.50:

This IP address has been reported a total of 11 times from 8 distinct sources. 212.81.37.50 was first reported on June 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-08-30 22:47:33 (2 days ago)	[MonAug3100:47:29.9073992026][security2:error][pid1852235:tid1852393][client212.81.37.50:0]ModSecuri ... show more [MonAug3100:47:29.9073992026][security2:error][pid1852235:tid1852393][client212.81.37.50:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:user-agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"eimeko.ch\"][uri\"/.env.swp\"][unique_id\"apSzAY9hPuaouKnPwap-qAAAABE\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 LRob	2026-08-28 15:39:27 (4 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /.env.local \| 2026-08-28 15:39 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 10:27:43 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 212.81.37.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.81.37.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 06:27:39.842711 2026] [security2:error] [pid 9667:tid 9667] [client 212.81.37.50:43353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zaiqarva.com"] [uri "/.env.test"] [unique_id "aowcm1I-1vJSKgrADkxX4gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇱 spd.co.il	2026-08-14 06:01:54 (2 weeks ago)	Web application attack detected	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 12:58:20 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 212.81.37.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.81.37.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 08:58:14.327361 2026] [security2:error] [pid 407262:tid 407262] [client 212.81.37.50:53373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "royaleesthetics.net"] [uri "/.env.development"] [unique_id "am3tZjdeZa-E5hZjiDrHhgAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-07-31 12:05:11 (1 month ago)	Scanning/Probing (30)	Brute-Force Web App Attack
Anonymous	2026-07-08 21:11:09 (1 month ago)	212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.stage HTTP/1.1" 403 124 "-" "python-httpx/0 ... show more 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.stage HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.development.local HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.dev.local HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.production.local HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.test.local HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.testing HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.dist HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.development HTTP/1.1" 403 124 "-" "python-httpx/0.28.1" 212.81.37.50 - - [08/Jul/2026:23:11:08 +0200] "GET /.env.staging HTTP/1.1" 403 124 "-" "python-httpx/0.28 ... show less	Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-06-21 23:36:26 (2 months ago)	(modsecurity) srv103 ModSecurity 212.81.37.50 (RU/Russia/-): 10 in the last 3600 secs; Ports: ; Dir ... show more (modsecurity) srv103 ModSecurity 212.81.37.50 (RU/Russia/-): 10 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-20 21:59:31 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-19. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-06-07 21:59:21 (2 months ago)	Auto-ban: >3000 req/min op 2026-06-07	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-06 15:17:52 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 212.81.37.50 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.81.37.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 11:17:44.356294 2026] [security2:error] [pid 3007:tid 3007] [client 212.81.37.50:40997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "controlaltsuccess.com"] [uri "/.env"] [unique_id "aiQ6GCpekMFVVREfMEEkngAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 180.93.172.213

🇺🇸 172.110.223.73

🇮🇩 154.47.151.34

🇷🇺 147.45.48.189

🇺🇸 144.172.89.127

🇩🇪 139.59.133.58

🇰🇷 106.245.151.118

🇨🇳 106.13.167.239

🇨🇳 106.13.66.8

🇨🇳 106.13.36.108

🇮🇩 103.52.115.189

🇬🇧 35.203.210.196

🇮🇷 217.60.255.130

🇹🇼 198.235.24.98

🇰🇷 183.103.13.130

🇻🇳 171.226.126.15

🇨🇳 150.255.248.158

🇨🇳 110.249.201.10

🇨🇳 106.13.161.135

🇨🇳 106.13.114.161