JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.212

212.30.36.212 was found in our database!

This IP was reported 320 times. Confidence of Abuse is 43%: ?

43%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.212

Whois 212.30.36.212

IP Abuse Reports for 212.30.36.212:

This IP address has been reported a total of 320 times from 134 distinct sources. 212.30.36.212 was first reported on February 24th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Apache	2026-07-10 16:15:20 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 212.30.36.212 (DE/Germany/-): 5 in the last 300 ... show more (mod_security) mod_security (id:210492) triggered by 212.30.36.212 (DE/Germany/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-10 16:06:21 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-06-23 20:15:16 (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 chronos	2026-06-22 06:59:13 (2 weeks ago)	[AUTORAVALT][[22/06/2026 - 03:59:13 -03:00 UTC] Attack from [212.30.36.212] Action: BLocKed Hacking ... show more [AUTORAVALT][[22/06/2026 - 03:59:13 -03:00 UTC] Attack from [212.30.36.212] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-22 00:01:45 (2 weeks ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/pm2.config.js, Method:GET, UA:Mozilla/5.0 (W ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/pm2.config.js, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 19:55:19 (3 weeks ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.pprod, Method:GET, UA:Mozilla/5.0 (Macin ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.pprod, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 17:30:09 (3 weeks ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.staging, Method:GET, UA:Mozilla/5.0 (Mac ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.staging, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 13:38:45 (3 weeks ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.dev, Method:GET, UA:Mozilla/5.0 (Windows ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.dev, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇫🇷 YF	2026-06-21 13:15:33 (3 weeks ago)	Environment file probe	Web App Attack
🇫🇷 masterguru	2026-06-21 10:48:37 (3 weeks ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇺🇸 chronos	2026-06-21 03:13:42 (3 weeks ago)	[AUTORAVALT][[21/06/2026 - 00:13:42 -03:00 UTC] Attack from [212.30.36.212] Action: BLocKed Hacking ... show more [AUTORAVALT][[21/06/2026 - 00:13:42 -03:00 UTC] Attack from [212.30.36.212] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other software plugins/solutions. ] ... show less	Hacking Web App Attack
🇬🇧 consul.to	2026-06-09 11:55:06 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Didier Lagaert	2026-06-03 18:31:12 (1 month ago)	lie-21 : Rogue PHP files=>/adminer.php	Hacking
🇦🇺 aranguren.org	2026-06-02 06:05:32 (1 month ago)	212.30.36.212 - - [02/Jun/2026:16:05:30 +1000] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 404 993 ... show more 212.30.36.212 - - [02/Jun/2026:16:05:30 +1000] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 212.30.36.212 - - [02/Jun/2026:16:05:30 +1000] "GET /modules/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 212.30.36.212 - - [02/Jun/2026:16:05:31 +1000] "GET /wp-includes/js/codemirror/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 212.30.36.212 - - [02/Jun/2026:16:05:31 +1000] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 212.30.36.212 - - [02/Jun/2026:16:05:31 +1000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit ... show less	Bad Web Bot
🇩🇪 Hazzard	2026-06-01 12:16:37 (1 month ago)	(wordpress) Failed wordpress login from 212.30.36.212 (DE/Germany/Bavaria/Nuremberg/-/[redacted]): ... show more (wordpress) Failed wordpress login from 212.30.36.212 (DE/Germany/Bavaria/Nuremberg/-/[redacted]): (CF_ENABLE) show less	Brute-Force

Showing 1 to 15 of 320 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 175.107.3.187

🇹🇼 110.25.107.172

🇺🇸 20.163.15.43

🇺🇸 192.18.133.61

🇨🇳 120.230.22.172

🇨🇳 14.103.55.226

🇲🇾 219.95.70.45

🇮🇳 103.58.117.21

🇫🇷 85.217.140.51

🇷🇺 83.171.89.209

🇺🇸 81.30.98.90

🇺🇸 66.132.224.19

🇺🇸 66.132.186.142

🇺🇸 52.167.144.140

🇺🇸 45.154.152.14

🇳🇱 45.148.10.147

🇺🇸 45.79.114.248

🇺🇸 15.204.172.200

🇨🇭 209.99.184.143

🇪🇸 185.134.43.100