JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.189

212.30.36.189 was found in our database!

This IP was reported 364 times. Confidence of Abuse is 62%: ?

62%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.189

Whois 212.30.36.189

IP Abuse Reports for 212.30.36.189:

This IP address has been reported a total of 364 times from 153 distinct sources. 212.30.36.189 was first reported on January 14th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-06-22 06:58:46 (1 day ago)	[AUTORAVALT][[22/06/2026 - 03:58:46 -03:00 UTC] Attack from [212.30.36.189] Action: BLocKed Hacking ... show more [AUTORAVALT][[22/06/2026 - 03:58:46 -03:00 UTC] Attack from [212.30.36.189] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇺🇸 chronos	2026-06-22 06:20:36 (1 day ago)	[AUTORAVALT][[22/06/2026 - 03:20:35 -03:00 UTC] Attack from [212.30.36.189] Action: BLocKed DDoS At ... show more [AUTORAVALT][[22/06/2026 - 03:20:35 -03:00 UTC] Attack from [212.30.36.189] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe for or exploit instal] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-21 23:55:02 (1 day ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/admin/.env, Method:GET, UA:Mozilla/5.0 (Maci ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/admin/.env, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 21:53:59 (1 day ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env~, Method:GET, UA:Mozilla/5.0 (Windows NT ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env~, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 nyt	2026-06-21 18:37:22 (1 day ago)	Sensitive File Probe, Accessing non-existent WSGI file	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-21 16:23:27 (1 day ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/laravel/.env, Method:GET, UA:Mozilla/5.0 (Win ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/laravel/.env, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 12:06:34 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (Macintosh; Int ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇫🇷 masterguru	2026-06-21 10:46:56 (2 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇫🇷 Baking333	2026-06-21 04:13:07 (2 days ago)	redacted:80 212.30.36.189 - - [21/Jun/2026:05:12:57 +0100] "GET /.[redacted] HTTP/1.1" 200 166 0/353 ... show more redacted:80 212.30.36.189 - - [21/Jun/2026:05:12:57 +0100] "GET /.[redacted] HTTP/1.1" 200 166 0/35344 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" redacted:443 212.30.36.189 - - [21/Jun/2026:05:13:03 +0100] "GET /.[redacted] HTTP/1.1" 200 3869 0/30255 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-21 04:08:21 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.backup, Method:GET, UA:Mozilla/5.0 (Mac ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.backup, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 chronos	2026-06-21 03:14:14 (2 days ago)	[AUTORAVALT][[21/06/2026 - 00:14:14 -03:00 UTC] Attack from [212.30.36.189] Action: BLocKed Hacking ... show more [AUTORAVALT][[21/06/2026 - 00:14:14 -03:00 UTC] Attack from [212.30.36.189] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-21 03:04:36 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.prod, Method:GET, UA:Mozilla/5.0 (Macint ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.prod, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇬🇧 consul.to	2026-06-09 11:55:01 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 ambor	2026-06-04 19:23:48 (2 weeks ago)	Honeypot access: PHP file scan attempt: /adminer.php. Path: /adminer.php	Web App Attack
🇬🇧 Mendip_Defender	2026-06-04 01:49:09 (2 weeks ago)	212.30.36.189 - - [04/Jun/2026:02:49:01 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 ... show more 212.30.36.189 - - [04/Jun/2026:02:49:01 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 212.30.36.189 - - [04/Jun/2026:02:49:04 +0100] "GET /adminer.php HTTP/1.1" 404 51294 "https://ashwickparish.org/adminer.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 212.30.36.189 - - [04/Jun/2026:02:49:05 +0100] "GET /adminer.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0" ... show less	Hacking Web App Attack

Showing 1 to 15 of 364 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.92.87

🇺🇿 213.230.92.55

🇵🇰 175.107.1.96

🇨🇳 120.48.150.146

🇨🇳 111.26.6.111

🇷🇴 82.152.132.24

🇱🇻 81.30.98.144

🇷🇴 80.94.92.178

🇺🇿 213.230.92.30

🇺🇿 213.230.87.60

🇺🇿 213.230.87.56

🇺🇸 153.66.28.132

🇫🇮 147.185.133.59

🇬🇧 134.209.30.41

🇺🇸 107.175.183.134

🇩🇪 92.205.195.173

🇳🇱 91.92.40.14

🇺🇸 23.94.23.226

🇰🇷 20.214.174.141

🇺🇸 20.190.190.130