JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.116.244.129

212.116.244.129 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 45%: ?

45%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	netutils.io
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.116.244.129

Whois 212.116.244.129

IP Abuse Reports for 212.116.244.129:

This IP address has been reported a total of 13 times from 13 distinct sources. 212.116.244.129 was first reported on March 27th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-11 04:43:39 (1 day ago)	Blocked by UFW (TCP on 51413) Source port: 59778 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 51413) Source port: 59778 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 212.116.244.129) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2026-07-08 10:55:06 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 212.116.244.129 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 212.116.244.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 06:55:00.595142 2026] [security2:error] [pid 7744:tid 7744] [client 212.116.244.129:59434] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 212.116.244.129 (+1 hits since last alert)\|atidysort.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "atidysort.com"] [uri "/xmlrpc.php"] [unique_id "ak4shNqobEUGuzayq-xLpQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-06-22 23:54:58 (2 weeks ago)	2026-06-23T01:54:57.072832mail1.inartis.it postfix/smtpd[2348430]: warning: unknown[212.116.244.129] ... show more 2026-06-23T01:54:57.072832mail1.inartis.it postfix/smtpd[2348430]: warning: unknown[212.116.244.129]: SASL PLAIN authentication failed: authentication failure, [email protected] ... show less	Port Scan Brute-Force
🇺🇸 mnsf	2026-06-21 17:05:12 (3 weeks ago)	Abuse Detected (1)	Brute-Force Web App Attack
Anonymous	2026-06-21 05:00:22 (3 weeks ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇨🇿 lp	2026-06-19 01:52:09 (3 weeks ago)	Email account brute force: 1 attempts were recorded from 212.116.244.129 2026-06-19T02:18:14+02:00 w ... show more Email account brute force: 1 attempts were recorded from 212.116.244.129 2026-06-19T02:18:14+02:00 warning: unknown[212.116.244.129]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇩🇪 R.G.	2026-06-18 16:31:33 (3 weeks ago)	212.116.244.129 (KZ/Kazakhstan/-), 13 distributed smtpauth attacks on account [cloacked] in the last ... show more 212.116.244.129 (KZ/Kazakhstan/-), 13 distributed smtpauth attacks on account [cloacked] in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: show less	Brute-Force
🇫🇷 Duggy_Tuxy🧱	2026-06-17 12:28:42 (3 weeks ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇷🇴 Fn4ticHz	2026-06-05 17:53:30 (1 month ago)	DDoS blocked via ZeroGuard.ID	DDoS Attack Exploited Host
🇩🇪 updown.io	2026-05-27 12:59:00 (1 month ago)	{"level":"info","ts":1779886730.7183805,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1779886730.7183805,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"212.116.244.129","remote_port":"40962","client_ip":"212.116.244.129","proto":"HTTP/2.0","method":"GET","host":"Status.bots.business","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua-Platform":["\\\"Android\\\""],"Sec-Fetch-User":["?1"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; Pixel 6a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Mobile Safari/537.36"],"Sec-Ch-Ua":["\\\"Chromium\\\";v=\\\"104\\\", \\\"Google Chrome\\\";v=\\\"104\\\", \\\"Not.A/Brand\\\";v=\\\"99\\\""],"Sec-Ch-Ua-Mobile":["?1"],"Sec-Fetch-Site":["none"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["hi-IN,hi;q=0.9,en-US;q=0.8,en;q=0.7"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Dest":["document"]},"tls":{ ... show less	DDoS Attack Web App Attack
🇫🇮 percocet	2026-05-13 10:05:07 (1 month ago)	Cloudflare blocked 13 requests (HTTP 403) in 1h. Country: DE	DDoS Attack Web App Attack
🇺🇸 bitblockit	2026-04-19 11:09:38 (2 months ago)	Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. D ... show more Reconnaissance or port-scan activity observed on a honeypot sensor. Honeypot decoy type: Suricata. Decoy listen port: 33900/tcp. Observed event time: 2026-04-19 11:09:38 UTC. Report from passive honeypot only; no payload or credentials included. show less	Port Scan
🇺🇸 TTWebhosting	2026-03-27 18:32:42 (3 months ago)	(imapd) Failed IMAP login from 212.116.244.129 (KZ/Kazakhstan/-/-/-/[AS212238 Datacamp Limited]): 1 ... show more (imapd) Failed IMAP login from 212.116.244.129 (KZ/Kazakhstan/-/-/-/[AS212238 Datacamp Limited]): 1 in the last 3600 secs show less	Brute-Force Port Scan Hacking

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 101.32.145.199

🇨🇳 223.155.58.109

🇷🇺 195.69.218.68

🇺🇸 165.154.134.138

🇺🇸 147.185.132.240

🇺🇸 147.185.132.109

🇺🇸 135.237.126.100

🇭🇰 103.30.40.129

🇸🇬 94.231.206.5

🇮🇳 68.233.116.124

🇺🇸 45.194.67.120

🇺🇸 34.150.170.159

🇺🇸 20.168.0.132

🇬🇧 18.170.210.32

🇺🇸 198.11.183.234

🇵🇱 176.53.159.198

🇺🇸 150.107.38.186

🇨🇳 117.187.180.20

🇱🇰 112.134.188.42

🇿🇦 102.64.46.45