JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.36.66

212.30.36.66 was found in our database!

This IP was reported 380 times. Confidence of Abuse is 100%: ?

100%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.36.66

Whois 212.30.36.66

IP Abuse Reports for 212.30.36.66:

This IP address has been reported a total of 380 times from 138 distinct sources. 212.30.36.66 was first reported on December 13th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-04-12 21:17:57 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 nyt	2026-04-11 16:12:21 (1 month ago)	Empty UA + POST	Web App Attack
🇱🇻 garmtech.com	2026-04-11 15:32:44 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-32.212.30.36.66.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-32.212.30.36.66.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-11 13:49:00 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-48.212.30.36.66.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-48.212.30.36.66.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-11 10:45:51 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-45.212.30.36.66.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-45.212.30.36.66.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-04 18:29:46 (1 month ago)	(mod_security) mod_security (id:234930) triggered by 212.30.36.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:234930) triggered by 212.30.36.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 04 14:29:37.784012 2026] [security2:error] [pid 21395:tid 21395] [client 212.30.36.66:26205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\/lib\\\\/php\\\\/connector\\\\.minimal\\\\.php$" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/27_Apps_WPPlugin.conf"] [line "6778"] [id "234930"] [rev "2"] [msg "COMODO WAF: File upload vulnerability in the file manager plugin before 6.9 for WordPress (CVE-2020-25213)\|\|www.voodooshop.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WPPlugin"] [hostname "www.voodooshop.com"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "adFYkW7DFWcS37Qi_twKRgAAAAc"], referer: http://nolavoodooevents.com/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lavnet.net	2026-04-02 19:02:19 (2 months ago)	212.30.36.66 - - [02/Apr/2026:19:02:15 +0000] "GET /user.php HTTP/2.0" 404 1920 "http://texascustomg ... show more 212.30.36.66 - - [02/Apr/2026:19:02:15 +0000] "GET /user.php HTTP/2.0" 404 1920 "http://texascustomguitars.com/user.php" "Go-http-client/2.0" 212.30.36.66 - - [02/Apr/2026:19:02:15 +0000] "GET /menu.php HTTP/2.0" 404 1855 "http://texascustomguitars.com/menu.php" "Go-http-client/2.0" 212.30.36.66 - - [02/Apr/2026:19:02:16 +0000] "GET /alfa.php HTTP/2.0" 404 1878 "http://texascustomguitars.com/alfa.php" "Go-http-client/2.0" 212.30.36.66 - - [02/Apr/2026:19:02:17 +0000] "GET /file.php HTTP/2.0" 404 1878 "http://texascustomguitars.com/file.php" "Go-http-client/2.0" 212.30.36.66 - - [02/Apr/2026:19:02:17 +0000] "GET /mini.php HTTP/2.0" 404 1855 "http://texascustomguitars.com/mini.php" "Go-http-client/2.0" 212.30.36.66 - - [02/Apr/2026:19:02:18 +0000] "GET /info.php HTTP/2.0" 404 1878 "http://texascustomguitars.com/info.php" "Go-http-client/2.0" ... show less	Brute-Force
🇷🇺 sms.ru	2026-03-24 16:13:30 (2 months ago)	/wp-admin/js/index.php	Web App Attack
🇫🇷 dynamix	2026-03-23 20:56:25 (2 months ago)	Multiple WAF Violations	Web App Attack
🇧🇪 cmbplf	2026-03-21 08:09:37 (2 months ago)	224 requests with url.path /.well-known/acme-challenge/.php	Brute-Force Bad Web Bot
🇳🇿 Antinson	2026-03-18 07:51:03 (2 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇳🇱 Site.eu	2026-03-10 20:37:31 (2 months ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-03-03 16:20:02 (3 months ago)	"GET //wp-json/wp/v2/posts?per_page=1&_fields=id,slug,comment_status HTTP/1.1"	Hacking Web App Attack
🇫🇷 Octopuce	2026-03-03 04:07:38 (3 months ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/erinyani/ /wp-content/uploads/2023/11 ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/erinyani/ /wp-content/uploads/2023/11/ /wp-content/plugins/ioxi/ioxi/ /wp-includ ... show less	Web App Attack
🇩🇪 mk-dizajn.hr	2026-03-03 03:57:51 (3 months ago)	$f2bV_matches	Brute-Force

Showing 61 to 75 of 380 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.245

🇨🇳 120.48.124.176

🇺🇸 91.230.168.255

🇺🇸 72.14.178.148

🇺🇸 45.33.98.247

🇬🇧 209.97.186.128

🇫🇷 194.163.172.43

🇺🇸 159.65.230.214

🇭🇰 154.83.14.94

🇨🇳 117.50.130.134

🇨🇳 112.132.158.219

🇺🇸 104.243.42.83

🇺🇸 100.23.59.135

🇧🇬 91.148.190.150

🇬🇧 80.1.51.168

🇳🇱 45.148.10.21

🇳🇬 41.242.115.83

🇺🇸 35.91.41.61

🇺🇸 20.15.163.139

🇩🇪 213.209.159.158