JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.33.56

212.30.33.56 was found in our database!

This IP was reported 216 times. Confidence of Abuse is 62%: ?

62%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mnets.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.33.56

Whois 212.30.33.56

IP Abuse Reports for 212.30.33.56:

This IP address has been reported a total of 216 times from 96 distinct sources. 212.30.33.56 was first reported on August 11th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 dot.mg	2026-10-17 09:37:07 (2 hours ago)	Scan of vulnerable files	Web App Attack
Anonymous	2026-10-17 08:07:19 (4 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-10-16 10:07:43 (1 day ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-10-16 07:11:18 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ES, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇫🇷 solution.it	2026-10-13 17:05:06 (3 days ago)	[Tue Oct 13 19:05:05.601780 2026] [php7:error] [pid 3333038:tid 3333038] [client 212.30.33.56:45929] ... show more [Tue Oct 13 19:05:05.601780 2026] [php7:error] [pid 3333038:tid 3333038] [client 212.30.33.56:45929] script '/var/www/html/wp-trackback.php' not found or unable to stat show less	Web App Attack
Anonymous	2026-10-13 02:37:53 (4 days ago)	IP matched detection query many 3xx errors.	Brute-Force
🇮🇹 CoreTech srl	2026-10-13 02:08:57 (4 days ago)	cloudlinux2 fail2ban: 2026-10-13 04:04:02,211 fail2ban.filter [1878]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-10-13 04:04:02,211 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 170.64.163.177 - 2026-10-13 04:04:02cloudlinux2 fail2ban: 2026-10-13 04:04:02,220 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 170.64.163.177 - 2026-10-13 04:04:02cloudlinux2 fail2ban: 2026-10-13 04:04:09,850 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.64 - 2026-10-13 04:04:09cloudlinux2 fail2ban: 2026-10-13 04:04:22,325 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.52 - 2026-10-13 04:04:22cloudlinux2 fail2ban: 2026-10-13 04:04:51,218 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 212.30.33.86 - 2026-10-13 04:04:51cloudlinux2 fail2ban: 2026-10-13 04:05:14,515 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 94.254.95.43 - 2026-10-13 04:05:13cloudlinux2 fail2ban: 2026-10-13 04:05:05,276 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 45.146.55.87 - 2026-10-13 04:05:03cl show less	Web App Attack
🇳🇱 Alt255	2026-10-12 22:49:04 (4 days ago)	[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 212.30.33.56 - - [13/Oct/2026:00:49:04 +0200] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 301 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" ... show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-10-12 20:45:03 (4 days ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇫🇷 dynamix	2026-10-12 18:02:44 (4 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 03:36:15 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 212.30.33.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.30.33.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:36:11.473410 2026] [security2:error] [pid 11444:tid 11446] [client 212.30.33.56:37331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebigquestions.org"] [uri "/.env"] [unique_id "assEK9w8RsieC_7GzZjz4QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 01:36:09 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 212.30.33.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.30.33.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:36:00.655074 2026] [security2:error] [pid 21503:tid 21503] [client 212.30.33.56:42917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctoredwinalvarez.com"] [uri "/.env"] [unique_id "asroAH4__MGO-rTaWURSHAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 01:14:31 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 212.30.33.56 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 212.30.33.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:14:24.335063 2026] [security2:error] [pid 17026:tid 17026] [client 212.30.33.56:42929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tallersprats.com"] [uri "/.env"] [unique_id "asri8HtsOdpW4tpbOI2BDQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-10-01 12:35:04 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇪 filstal.org	2026-09-14 15:23:32 (1 month ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack

Showing 1 to 15 of 216 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.190.168.131

🇬🇧 185.91.69.248

🇨🇳 121.31.210.125

🇧🇩 103.134.226.150

🇺🇸 71.235.194.42

🇻🇪 38.74.254.169

🇧🇪 34.156.85.13

🇧🇾 178.126.228.90

🇹🇭 147.50.231.135

🇨🇳 120.221.233.41

🇮🇳 117.192.41.235

🇮🇳 103.170.92.3

🇺🇸 72.17.34.38

🇦🇷 200.55.246.162

🇺🇸 184.105.247.238

🇺🇸 165.227.84.14

🇨🇳 116.211.95.16

🇫🇷 54.38.241.200

🇺🇸 34.230.221.101

🇺🇸 20.118.227.202