JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.175

212.30.36.175 was found in our database!

This IP was reported 332 times. Confidence of Abuse is 72%: ?

72%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.175

Whois 212.30.36.175

IP Abuse Reports for 212.30.36.175:

This IP address has been reported a total of 332 times from 139 distinct sources. 212.30.36.175 was first reported on March 15th 2023, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Mykola Spesivtsev	2026-06-22 00:02:00 (5 hours ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/config/secrets.js, Method:GET, UA:Mozilla/5.0 ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/config/secrets.js, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 23:09:13 (6 hours ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/manage.py, Method:GET, UA:Mozilla/5.0 (X11; L ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/manage.py, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 17:29:58 (12 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.sample.env, Method:GET, UA:Mozilla/5.0 (X11 ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.sample.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 16:18:36 (13 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env_1, Method:GET, UA:Mozilla/5.0 (Macintos ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env_1, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇫🇷 YF	2026-06-21 13:15:23 (16 hours ago)	Environment file probe	Web App Attack
🇫🇷 Baking333	2026-06-21 04:12:10 (1 day ago)	redacted:443 212.30.36.175 - - [21/Jun/2026:05:11:47 +0100] "GET /.[redacted] HTTP/1.1" 200 3869 0/2 ... show more redacted:443 212.30.36.175 - - [21/Jun/2026:05:11:47 +0100] "GET /.[redacted] HTTP/1.1" 200 3869 0/27687 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" redacted:443 212.30.36.175 - - [21/Jun/2026:05:12:05 +0100] "GET /cms/.env HTTP/1.1" 200 3869 0/15030 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15" show less	Bad Web Bot Web App Attack
🇺🇸 chronos	2026-06-21 03:15:32 (1 day ago)	[AUTORAVALT][[21/06/2026 - 00:15:31 -03:00 UTC] Attack from [212.30.36.175] Action: BLocKed DDoS At ... show more [AUTORAVALT][[21/06/2026 - 00:15:31 -03:00 UTC] Attack from [212.30.36.175] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe for or exploit instal] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇵🇱 sefinek.net	2026-06-04 22:59:34 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /adminer.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 zynex	2026-06-04 22:58:14 (2 weeks ago)	URL Probing: /adminer.php	Web App Attack
🇺🇸 interbiznw.com	2026-06-04 20:15:41 (2 weeks ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 ambor	2026-06-04 18:30:55 (2 weeks ago)	Attack type: wordpress_attack_attempt \| Target: /adminer.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win ... show more Attack type: wordpress_attack_attempt \| Target: /adminer.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb \| Country: DE show less	Web App Attack Brute-Force
Anonymous	2026-06-03 20:34:36 (2 weeks ago)	COPSLICOM WEBEXPLOIT 212.30.36.175 (212.30.36.175)	Web App Attack
🇩🇪 nyt	2026-06-03 16:53:17 (2 weeks ago)	DB Admin Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-06-02 08:52:42 (2 weeks ago)	(mod_security) mod_security (id:240000) triggered by 212.30.36.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 212.30.36.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 04:52:37.611268 2026] [security2:error] [pid 24683:tid 24699] [client 212.30.36.175:43917] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|track.ahsdistance.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "track.ahsdistance.org"] [uri "/images/stories/themes.php"] [unique_id "ah6Z1eXsNhWskNLNQJc06AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-06-02 08:02:25 (2 weeks ago)	(mod_security) mod_security (id:900191) triggered by 212.30.36.175 (DE/Germany/-): 5 in the last 900 ... show more (mod_security) mod_security (id:900191) triggered by 212.30.36.175 (DE/Germany/-): 5 in the last 900 secs show less	Web App Attack Hacking

Showing 1 to 15 of 332 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.249.224.235

🇨🇳 101.35.248.174

🇲🇽 187.188.220.70

🇸🇪 185.246.128.170

🇩🇪 148.153.166.219

🇨🇳 120.237.131.219

🇩🇪 2001:41d0:701:1100::abb3

🇸🇬 116.89.50.183

🇮🇳 103.19.136.6

🇫🇷 85.217.140.8

🇧🇬 79.124.60.146

🇱🇹 45.227.254.170

🇨🇳 42.121.161.198

🇺🇸 40.76.139.157

🇺🇸 23.92.27.206

🇮🇳 2405:201:3011:50fc:1956:2970:8216:4076

🇧🇷 192.141.107.7

🇺🇸 184.105.247.215

🇷🇺 178.178.194.192

🇸🇪 80.78.28.84