JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.215

212.30.36.215 was found in our database!

This IP was reported 349 times. Confidence of Abuse is 68%: ?

68%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.215

Whois 212.30.36.215

IP Abuse Reports for 212.30.36.215:

This IP address has been reported a total of 349 times from 144 distinct sources. 212.30.36.215 was first reported on February 24th 2023, and the most recent report was 2 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Mykola Spesivtsev	2026-06-21 23:22:06 (2 minutes ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/wsgi.py, Method:GET, UA:Mozilla/5.0 (X11; Lin ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/wsgi.py, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 22:37:24 (46 minutes ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.staging.yml, Method:GET, UA:Mozilla/5.0 ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/.env.staging.yml, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 19:56:07 (3 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.pprod, Method:GET, UA:Mozilla/5.0 (Wind ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/.env.pprod, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 nyt	2026-06-21 18:38:26 (4 hours ago)	Sensitive File Probe, Accessing settings.php may indicate probing for vulnerabilities.	Web App Attack
🇩🇪 Mykola Spesivtsev	2026-06-21 16:18:30 (7 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/debug.log, Method:GET, UA:Mozilla/5.0 (Windo ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/debug.log, Method:GET, UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/123.0.0.0 Safari/537.36 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 14:44:27 (8 hours ago)	HTTP Tarpit detected bot activity:TargetPort:80, Path:/api/.env, Method:GET, UA:Mozilla/5.0 (X11; Li ... show more HTTP Tarpit detected bot activity:TargetPort:80, Path:/api/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇩🇪 Mykola Spesivtsev	2026-06-21 11:27:09 (11 hours ago)	HTTP Tarpit detected bot activity:TargetPort:443, Path:/back/.env, Method:GET, UA:Mozilla/5.0 (X11; ... show more HTTP Tarpit detected bot activity:TargetPort:443, Path:/back/.env, Method:GET, UA:Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Port Scan Web App Attack Bad Web Bot
🇫🇷 masterguru	2026-06-21 10:48:42 (12 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-195)	Hacking Bad Web Bot
🇫🇷 Baking333	2026-06-21 04:13:02 (19 hours ago)	redacted:80 212.30.36.215 - - [21/Jun/2026:05:12:46 +0100] "GET /.env-prod HTTP/1.1" 200 166 0/43962 ... show more redacted:80 212.30.36.215 - - [21/Jun/2026:05:12:46 +0100] "GET /.env-prod HTTP/1.1" 200 166 0/43962 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15" redacted:80 212.30.36.215 - - [21/Jun/2026:05:13:00 +0100] "GET /.envlocal HTTP/1.1" 200 166 0/84654 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" show less	Bad Web Bot Web App Attack
🇺🇸 chronos	2026-06-21 03:13:16 (20 hours ago)	[AUTORAVALT][[21/06/2026 - 00:13:15 -03:00 UTC] Attack from [212.30.36.215] Action: BLocKed DDoS At ... show more [AUTORAVALT][[21/06/2026 - 00:13:15 -03:00 UTC] Attack from [212.30.36.215] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe for or exploit instal] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇬🇧 consul.to	2026-06-09 11:55:00 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-06-04 04:30:49 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 roxyapi	2026-06-04 00:25:48 (2 weeks ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /adminer.php	Web App Attack Bad Web Bot
🇮🇩 xveil	2026-06-03 20:44:23 (2 weeks ago)	2026-06-04T03:44:19.674100 mail-honeypot postfix/submission/smtpd[22279]: warning: unknown[212.30.36 ... show more 2026-06-04T03:44:19.674100 mail-honeypot postfix/submission/smtpd[22279]: warning: unknown[212.30.36.215]: SASL PLAIN authentication failed: authentication failure ... show less	Brute-Force
🇺🇸 nyt	2026-06-03 19:29:56 (2 weeks ago)	WP Author Enumeration, WP User Enumeration	Web App Attack

Showing 1 to 15 of 349 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.22.166.107

🇺🇸 206.81.6.36

🇦🇷 190.229.67.85

🇬🇧 188.240.59.37

🇲🇽 187.190.35.163

🇺🇸 141.11.88.14

🇷🇺 85.173.96.230

🇷🇴 80.94.92.187

🇧🇷 45.164.251.106

🇺🇸 44.198.118.210

🇹🇷 213.128.70.19

🇪🇨 181.199.54.63

🇧🇬 62.182.118.138

🇳🇱 45.148.10.121

🇺🇸 44.77.249.106

🇺🇸 44.18.141.138

🇸🇬 148.66.142.9

🇺🇸 136.109.178.40

🇮🇷 80.250.199.47

🇸🇬 68.178.172.205