JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.33.57

212.30.33.57 was found in our database!

This IP was reported 205 times. Confidence of Abuse is 42%: ?

42%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mnets.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.33.57

Whois 212.30.33.57

IP Abuse Reports for 212.30.33.57:

This IP address has been reported a total of 205 times from 92 distinct sources. 212.30.33.57 was first reported on May 20th 2022, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 paneologist	2026-07-25 01:56:10 (17 hours ago)	2026-07-25T00:28:29+02:00 theta asterisk\[1594\]: NOTICE\[20037\]: res_pjsip_session.c:3967 in new_i ... show more 2026-07-25T00:28:29+02:00 theta asterisk\[1594\]: NOTICE\[20037\]: res_pjsip_session.c:3967 in new_invite: anonymous: Call $TCP:212.30.33.57:32409$ to extension \'+4687835300\' rejected because extension not found in context \'public\'. 2026-07-25T00:28:29+02:00 theta asterisk\[1594\]: WARNING\[23732\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' $212.30.33.57:32409$ 2026-07-25T00:28:51+02:00 theta asterisk\[1594\]: WARNING\[23732\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' $212.30.33.57:49846$ 2026-07-25T00:28:51+02:00 theta asterisk\[1594\]: NOTICE\[12208\]: res_pjsip_session.c:3967 in new_invite: anonymous: Call $TCP:212.30.33.57:49846$ to extension \'+4687835300\' rejected because extension not found in context \'public\'. 2026-07-25T00:30:39+02:00 theta asterisk\[1594\]: WARNING\[23732\]: res_pjsip_registrar.c:1166 in find_registrar_aor: AOR \'\' not found for endpoint \'anonymous\' \(212. show less	Fraud VoIP Brute-Force
🇳🇱 ipoac.nl	2026-07-25 00:18:34 (19 hours ago)	[2026-07-25 02:18:32] NOTICE- res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:77777ipo ... show more [2026-07-25 02:18:32] NOTICE- res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:77777ipoac.nl>' failed for '212.30.33.57:17047' (callid: eeH1pyo8cJMpndaIIjXREg..) - No matching endpoint found show less	Fraud VoIP Brute-Force
🇺🇸 BirdCo Telecom	2026-07-25 00:11:10 (19 hours ago)		Brute-Force Fraud VoIP
🇳🇱 ipoac.nl	2026-07-24 23:10:14 (20 hours ago)	[2026-07-25 01:10:13] NOTICE- res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:77777ipoac ... show more [2026-07-25 01:10:13] NOTICE- res_pjsip/pjsip_distributor.c: Request 'INVITE' from '<sip:77777ipoac.nl>' failed for '212.30.33.57:61638' (callid: 5Ix-80Uj_OSEWoBmf6cQBA..) - No matching endpoint found show less	Fraud VoIP Brute-Force
🇩🇪 defkev	2026-07-24 23:08:54 (20 hours ago)		Fraud VoIP
🇨🇿 unhfree.net	2026-06-29 14:38:06 (3 weeks ago)	Jun 29 16:37:11 canopus postfix/smtpd[4007671]: NOQUEUE: reject: RCPT from unknown[212.30.33.57]: 55 ... show more Jun 29 16:37:11 canopus postfix/smtpd[4007671]: NOQUEUE: reject: RCPT from unknown[212.30.33.57]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.68.109]> Jun 29 16:37:12 canopus postfix/smtpd[4007671]: NOQUEUE: reject: RCPT from unknown[212.30.33.57]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.68.109]> Jun 29 16:37:34 canopus postfix/smtpd[4007671]: NOQUEUE: reject: RCPT from unknown[212.30.33.57]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[192.168.68.109]> Jun 29 16:37:35 canopus postfix/smtpd[4007671]: NOQUEUE: reject: RCPT from unknown[212.30.33.57]: 554 5.7.1 <[email protected]>: Sender address rejected: Access denied; from=<[email protected]> to=<usse ... show less	Brute-Force Exploited Host
🇩🇪 Ba-Yu	2026-06-14 05:30:44 (1 month ago)	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇬🇧 consul.to	2026-06-14 00:38:27 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-10 01:56:41 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 03:35:40 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 212.30.33.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240000) triggered by 212.30.33.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:35:35.091288 2026] [security2:error] [pid 23794:tid 23794] [client 212.30.33.57:51079] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.chezlubacov.xyz\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.chezlubacov.xyz"] [uri "/images/stories/themes.php"] [unique_id "aieKB8y2BlrtIk7vzsfNvAAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-06-09 02:29:19 (1 month ago)	212.30.33.57 - - [09/Jun/2026:05:29:18 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP ... show more 212.30.33.57 - - [09/Jun/2026:05:29:18 +0300] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 212.30.33.57 - - [09/Jun/2026:05:29:19 +0300] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" ... show less	Web App Attack
🇷🇺 sms.ru	2026-06-08 23:32:03 (1 month ago)	/wp-admin/maint/cong.php	Web App Attack
🇫🇷 Octopuce	2026-06-08 21:41:37 (1 month ago)	Aggressive web search of vulnerable pages: /.bod/.ll/ /wp-content/themes/twentytwentytwo/ /wp-conten ... show more Aggressive web search of vulnerable pages: /.bod/.ll/ /wp-content/themes/twentytwentytwo/ /wp-content/plugins/fix/ /wp-includes/bk/ /wp-content ... show less	Web App Attack
🇫🇷 Octopuce	2026-05-06 12:53:37 (2 months ago)	Aggressive web search of vulnerable pages: /wp-content/themes/twentytwenty/assets/fonts/inter/index. ... show more Aggressive web search of vulnerable pages: /wp-content/themes/twentytwenty/assets/fonts/inter/index.php /wp-content/themes/twentytwentytwo/part ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-05 00:09:20 (2 months ago)	(mod_security) mod_security (id:234930) triggered by 212.30.33.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:234930) triggered by 212.30.33.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 04 20:09:13.746800 2026] [security2:error] [pid 20989:tid 21044] [client 212.30.33.57:33515] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|atdotorg.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "atdotorg.org"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "afk1KdyenY6V7mA3zo5IwAAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 205 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 202.92.6.73

🇳🇴 2a03:94e0:ffff:185:181:61:0:203

🇫🇷 212.83.140.25

🇮🇩 210.79.142.201

🇨🇴 201.184.50.251

🇭🇰 199.45.154.138

🇹🇼 198.235.24.122

🇵🇱 176.53.159.196

🇺🇸 162.217.100.36

🇺🇸 159.223.97.218

🇷🇺 85.159.227.240

🇦🇺 46.250.247.118

🇰🇿 31.132.90.3

🇸🇮 31.57.184.232

🇱🇻 31.56.206.49

🇮🇳 4.247.209.15

🇳🇱 195.178.110.31

🇩🇪 167.94.146.40

🇪🇨 157.100.203.225

🇺🇸 109.122.18.102