JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.201

212.30.36.201 was found in our database!

This IP was reported 334 times. Confidence of Abuse is 63%: ?

63%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.201

Whois 212.30.36.201

IP Abuse Reports for 212.30.36.201:

This IP address has been reported a total of 334 times from 141 distinct sources. 212.30.36.201 was first reported on March 15th 2023, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-06-23 20:15:18 (7 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 chronos	2026-06-22 06:58:58 (1 day ago)	[AUTORAVALT][[22/06/2026 - 03:58:58 -03:00 UTC] Attack from [212.30.36.201] Action: BLocKed Hacking ... show more [AUTORAVALT][[22/06/2026 - 03:58:58 -03:00 UTC] Attack from [212.30.36.201] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇺🇸 chronos	2026-06-22 06:16:48 (1 day ago)	[AUTORAVALT][[22/06/2026 - 03:16:47 -03:00 UTC] Attack from [212.30.36.201] Action: BLocKed Hacking ... show more [AUTORAVALT][[22/06/2026 - 03:16:47 -03:00 UTC] Attack from [212.30.36.201] Action: BLocKed Hacking... Unauthorized attempts to access the server. Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc. ] ... show less	Hacking Brute-Force
🇩🇪 Mykola Spesivtsev	2026-06-21 23:59:19 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/config.php, Method:GET, UA:Mozilla/5.0 (X11; ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/config.php, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 23:09:23 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.envdev, Method:GET, UA:Mozilla/5.0 (Windows ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.envdev, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 22:02:11 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 nyt	2026-06-21 18:37:56 (2 days ago)	Sensitive File Probe, Accessing sensitive Kubernetes config file	Web App Attack
🇫🇷 zulzeen	2026-06-21 15:48:32 (2 days ago)	[distribamap-0] Blocked by SysWarden Firewall [DOCKER] (Web Attack)	Hacking Web App Attack
🇫🇷 masterguru	2026-06-21 10:46:56 (2 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇫🇷 Baking333	2026-06-21 04:13:15 (2 days ago)	redacted:443 212.30.36.201 - - [21/Jun/2026:05:13:05 +0100] "GET /.[redacted] HTTP/1.1" 200 3869 0/2 ... show more redacted:443 212.30.36.201 - - [21/Jun/2026:05:13:05 +0100] "GET /.[redacted] HTTP/1.1" 200 3869 0/23375 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15" redacted:443 212.30.36.201 - - [21/Jun/2026:05:13:14 +0100] "GET /api/.env HTTP/1.1" 200 3869 0/30149 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15" show less	Bad Web Bot Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-21 03:35:07 (2 days ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.bak, Method:GET, UA:Mozilla/5.0 (Macinto ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.bak, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 chronos	2026-06-21 03:14:47 (3 days ago)	[AUTORAVALT][[21/06/2026 - 00:14:46 -03:00 UTC] Attack from [212.30.36.201] Action: BLocKed Hacking ... show more [AUTORAVALT][[21/06/2026 - 00:14:46 -03:00 UTC] Attack from [212.30.36.201] Action: BLocKed Hacking... Unauthorized attempts to access the server. Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc. ] ... show less	Hacking Brute-Force
🇬🇧 consul.to	2026-06-09 11:55:04 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 ambor	2026-06-03 16:01:25 (2 weeks ago)	Honeypot access: PHP file scan attempt: /adminer.php. Path: /adminer.php	Web App Attack
🇦🇺 aranguren.org	2026-06-02 06:03:17 (3 weeks ago)	212.30.36.201 - - [02/Jun/2026:16:03:14 +1000] "GET /mini.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11 ... show more 212.30.36.201 - - [02/Jun/2026:16:03:14 +1000] "GET /mini.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 212.30.36.201 - - [02/Jun/2026:16:03:15 +1000] "GET /goods.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 212.30.36.201 - - [02/Jun/2026:16:03:15 +1000] "GET /file5.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 212.30.36.201 - - [02/Jun/2026:16:03:16 +1000] "GET /ahax.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 212.30.36.201 - - [02/Jun/2026:16:03:16 +1000] "GET /f35.php HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 212.30.36.201 - - [02/Jun/2026:16:03:16 +1000] " ... show less	Bad Web Bot

Showing 1 to 15 of 334 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇸 196.196.150.124

🇷🇴 141.98.83.240

🇺🇸 104.243.35.45

🇺🇸 64.207.225.55

🇺🇸 2a03:2880:11ff:54::

🇮🇳 209.38.120.71

🇺🇸 141.11.88.8

🇺🇸 104.207.39.192

🇩🇪 87.106.204.59

🇺🇸 64.62.197.70

🇺🇸 2a03:2880:11ff:52::

🇺🇸 216.26.230.123

🇺🇸 195.184.76.13

🇬🇧 193.163.125.226

🇩🇪 193.124.20.231

🇨🇳 117.50.195.240

🇮🇷 109.162.200.166

🇺🇸 65.111.11.109

🇷🇴 62.133.45.2

🇮🇳 49.200.43.206