JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 73.212.38.74

73.212.38.74 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 45%: ?

45%

ISP	Comcast IP Services, L.L.C.
Usage Type	Fixed Line ISP
ASN	AS7922
Hostname(s)	c-73-212-38-74.hsd1.md.comcast.net
Domain Name	comcast.net
Country	🇺🇸 United States of America
City	Baltimore, Maryland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 73.212.38.74

Whois 73.212.38.74

IP Abuse Reports for 73.212.38.74:

This IP address has been reported a total of 13 times from 8 distinct sources. 73.212.38.74 was first reported on September 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-10-22 06:54:07 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 18:15:00 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.ne ... show more (mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 14:14:57.048547 2026] [security2:error] [pid 4968:tid 4968] [client 73.212.38.74:55574] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|maprada92.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "maprada92.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atkBIbs7K0BYJtOZOsObeQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 10:42:48 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.ne ... show more (mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:42:44.322774 2026] [security2:error] [pid 19034:tid 19034] [client 73.212.38.74:36160] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.benkatkin.passy.us\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.benkatkin.passy.us"] [uri "/wp-json/wp/v2/users"] [unique_id "atNRJM6tU15S_MafVYl8ZwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-10-17 08:31:19 (6 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-17 04:46:38 (6 days ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 73.212.38.74 (US/United States/c-73-212-38-74 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 73.212.38.74 (US/United States/c-73-212-38-74.hsd1.md.comcast.net): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-10-15 05:57:58 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.ne ... show more (mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 01:57:52.186094 2026] [security2:error] [pid 25884:tid 25884] [client 73.212.38.74:34634] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sutherlandyogastudio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sutherlandyogastudio.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atBrYODl-UOpkjVPxY_A2QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-14 19:32:19 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.ne ... show more (mod_security) mod_security (id:225170) triggered by 73.212.38.74 (c-73-212-38-74.hsd1.md.comcast.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:32:15.050624 2026] [security2:error] [pid 13965:tid 13965] [client 73.212.38.74:55260] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|prcomputersolutions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prcomputersolutions.com"] [uri "/wp-json/wp/v2/users"] [unique_id "as_Yv1MK91gDhW-FxwgAOQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-10-14 15:22:07 (1 week ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-13 00:33:44 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇨🇿 Countryman	2026-09-30 00:10:01 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 mnsf	2026-09-29 05:06:12 (3 weeks ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-09-23 12:15:33 (4 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1257	Exploited Host Web App Attack
🇮🇹 CoreTech srl	2026-09-20 22:33:56 (1 month ago)	cloudlinux2 fail2ban: 2026-09-21 00:29:11,379 fail2ban.filter [1597]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-21 00:29:11,379 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 35.229.148.30 - 2026-09-21 00:29:10cloudlinux2 fail2ban: 2026-09-21 00:29:11,754 fail2ban.filter [1597]: INFO [recidive] Found 35.229.148.30 - 2026-09-21 00:29:11cloudlinux2 fail2ban: 2026-09-21 00:29:11,470 fail2ban.actions [1597]: NOTICE [plesk-modsecurity] Ban 35.229.148.30cloudlinux2 fail2ban: 2026-09-21 00:29:11,397 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 35.229.148.30 - 2026-09-21 00:29:11cloudlinux2 fail2ban: 2026-09-21 00:29:11,387 fail2ban.filter [1597]: INFO [plesk-modsecurity] Found 35.229.148.30 - 2026-09-21 00:29:10cloudlinux2 fail2ban: 2026-09-21 00:29:34,232 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 73.212.38.74 - 2026-09-21 00:29:33cloudlinux2 fail2ban: 2026-09-21 00:29:47,499 fail2ban.filter [1597]: INFO [plesk-wordpress] Found 136.144.33.174 - 2026-09-21 00:29:47cloudlinux2 fail2ban: 2026-09-21 show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 183.82.56.120

🇻🇳 116.118.44.131

🇸🇬 47.82.11.41

🇳🇱 45.148.10.119

🇩🇪 45.115.26.149

🇻🇳 116.96.43.252

🇩🇪 91.92.41.82

🇩🇪 85.155.15.14

🇺🇸 54.225.144.82

🇩🇪 51.89.71.95

🇳🇱 45.148.10.157

🇨🇳 42.81.84.219

🇷🇺 31.129.147.102

🇷🇺 195.2.71.225

🇳🇱 193.47.62.69

🇮🇳 182.69.176.245

🇯🇵 133.167.93.179

🇮🇳 117.231.166.224

🇨🇮 102.138.0.45

🇧🇬 91.92.199.36