JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.33.242

212.30.33.242 was found in our database!

This IP was reported 164 times. Confidence of Abuse is 90%: ?

90%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mnets.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.33.242

Whois 212.30.33.242

IP Abuse Reports for 212.30.33.242:

This IP address has been reported a total of 164 times from 78 distinct sources. 212.30.33.242 was first reported on May 16th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 F242	2026-07-15 19:22:37 (1 day ago)	Wordpress soft lock	Web App Attack
🇬🇧 iss-security-operations	2026-07-15 16:01:02 (1 day ago)	Seen attempting a bruteforce against SMTP services	Brute-Force
🇮🇹 Inartis	2026-07-14 19:10:22 (2 days ago)	2026-07-14T21:10:21.019471mail1.inartis.it postfix/smtpd[1237002]: warning: unknown[212.30.33.242]: ... show more 2026-07-14T21:10:21.019471mail1.inartis.it postfix/smtpd[1237002]: warning: unknown[212.30.33.242]: SASL LOGIN authentication failed: authentication failure, sasl_username=gabriel.muntianu ... show less	Port Scan Brute-Force
🇮🇹 Progetto1	2026-07-14 18:38:02 (2 days ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇺🇸 bigscoots.com	2026-07-14 07:56:53 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 212.30.33.242 (ES/Spain/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.30.33.242 (ES/Spain/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-14 03:41:16 dovecot_login authenticator failed for H=(xWcCrjg) [212.30.33.242]:4621: 535 Incorrect authentication data (set_id=support) 2026-07-14 03:41:25 dovecot_login authenticator failed for H=(mKmthen) [212.30.33.242]:27835: 535 Incorrect authentication data ([email protected]) 2026-07-14 03:41:50 dovecot_login authenticator failed for H=(mPLKedLV) [212.30.33.242]:46293: 535 Incorrect authentication data 2026-07-14 03:56:43 dovecot_login authenticator failed for H=(lwmEx8R) [212.30.33.242]:3189: 535 Incorrect authentication data (set_id=tracee) 2026-07-14 03:56:52 dovecot_login authenticator failed for H=(GjcH1Tli) [212.30.33.242]:11346: 535 Incorrect authentication data ([email protected]) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-14 07:39:01 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 212.30.33.242 (ES/Spain/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.30.33.242 (ES/Spain/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-14 03:31:46 dovecot_login authenticator failed for H=(fGah0R5b) [212.30.33.242]:22418: 535 Incorrect authentication data (set_id=tracee) 2026-07-14 03:31:55 dovecot_login authenticator failed for H=(IUkzojuGt) [212.30.33.242]:61754: 535 Incorrect authentication data ([email protected]) 2026-07-14 03:32:22 dovecot_login authenticator failed for H=(ibSpVJJ) [212.30.33.242]:13473: 535 Incorrect authentication data (set_id=tracee) 2026-07-14 03:32:27 dovecot_login authenticator failed for H=(i89C2kTAoH) [212.30.33.242]:55589: 535 Incorrect authentication data ([email protected]) 2026-07-14 03:38:58 dovecot_login authenticator failed for H=(SK4ccr) [212.30.33.242]:29948: 535 Incorrect authentication data (set_id=support) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-14 07:18:04 (3 days ago)	(smtpauth) Failed SMTP AUTH login from 212.30.33.242 (ES/Spain/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.30.33.242 (ES/Spain/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-14 03:16:52 dovecot_login authenticator failed for H=(epSqNS) [212.30.33.242]:56184: 535 Incorrect authentication data (set_id=eric) 2026-07-14 03:17:01 dovecot_login authenticator failed for H=(s4dXJId3VO) [212.30.33.242]:19028: 535 Incorrect authentication data ([email protected]) 2026-07-14 03:17:27 dovecot_login authenticator failed for H=(KRN7HNDH) [212.30.33.242]:53202: 535 Incorrect authentication data (set_id=eric) 2026-07-14 03:17:32 dovecot_login authenticator failed for H=(oZpOtL) [212.30.33.242]:19164: 535 Incorrect authentication data ([email protected]) 2026-07-14 03:17:59 dovecot_login authenticator failed for H=(MzOuXKza6) [212.30.33.242]:44712: 535 Incorrect authentication data (set_id=eric) show less	Brute-Force SSH
🇮🇩 xveil	2026-07-14 03:05:08 (3 days ago)	2026-07-14T10:05:06.318581 mail-honeypot postfix/submission/smtpd[20458]: warning: unknown[212.30.33 ... show more 2026-07-14T10:05:06.318581 mail-honeypot postfix/submission/smtpd[20458]: warning: unknown[212.30.33.242]: SASL LOGIN authentication failed: authentication failure ... show less	Brute-Force
🇨🇿 unhfree.net	2026-07-14 01:35:07 (3 days ago)	Jul 14 03:34:09 canopus postfix/smtpd[557351]: NOQUEUE: reject: RCPT from unknown[212.30.33.242]: 55 ... show more Jul 14 03:34:09 canopus postfix/smtpd[557351]: NOQUEUE: reject: RCPT from unknown[212.30.33.242]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<AgWLxE> Jul 14 03:34:12 canopus postfix/smtpd[557351]: NOQUEUE: reject: RCPT from unknown[212.30.33.242]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<H1thbdL3UD> Jul 14 03:34:38 canopus postfix/smtpd[557351]: NOQUEUE: reject: RCPT from unknown[212.30.33.242]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<Z2s75leB53> Jul 14 03:34:41 canopus postfix/smtpd[557351]: NOQUEUE: reject: RCPT from unknown[212.30.33.242]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<G0pluM56 ... show less	Brute-Force Exploited Host
Anonymous	2026-07-14 00:09:36 (3 days ago)	Authentication failure	Brute-Force
🇺🇸 TPI-Abuse	2026-07-10 16:52:22 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 212.30.33.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 212.30.33.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 12:52:14.547308 2026] [security2:error] [pid 24435:tid 24435] [client 212.30.33.242:36785] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 212.30.33.242 (+1 hits since last alert)\|donnrowe.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "donnrowe.com"] [uri "/xmlrpc.php"] [unique_id "alEjPp3rHWZPO5v8KtERbwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-10 15:42:52 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 212.30.33.242 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 212.30.33.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 11:42:44.926047 2026] [security2:error] [pid 4616:tid 4616] [client 212.30.33.242:42089] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 212.30.33.242 (+1 hits since last alert)\|saltcityprint.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "saltcityprint.com"] [uri "/xmlrpc.php"] [unique_id "alES9Foj6qpJ_eyXIZpKLgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-04 18:54:07 (1 week ago)	Aggressive web search of vulnerable pages: /modules/ets_whatsapp/security.php /templates/cassiopeia/ ... show more Aggressive web search of vulnerable pages: /modules/ets_whatsapp/security.php /templates/cassiopeia/error.php /templates/ja_purity/index.php /t ... show less	Web App Attack
🇬🇧 consul.to	2026-07-04 17:51:14 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-04 13:04:48 (1 week ago)	Banned by Fail2Ban on server	Web App Attack

Showing 1 to 15 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.9.233.250

🇩🇪 167.94.145.17

🇮🇳 59.180.147.31

🇬🇧 185.247.137.80

🇻🇳 171.231.194.183

🇻🇳 171.231.181.87

🇨🇳 123.157.192.28

🇮🇳 122.187.226.71

🇻🇳 103.186.101.231

🇮🇳 103.112.10.109

🇫🇷 62.210.142.39

🇱🇻 213.232.204.130

🇩🇪 209.50.180.36

🇵🇱 176.53.159.198

🇩🇪 167.94.146.75

🇺🇸 162.216.149.138

🇨🇳 106.13.144.200

🇷🇴 80.94.92.152

🇨🇳 1.25.64.189

🇺🇸 2606:c700:1:69:7294:1cc9:cde0:f387