JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

172.245.30.252

Neutral Activity

Abuse confidence score ?

0% Low Risk

22 reports

18 reporters · latest 11 months ago

ISP	RackNerd LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	172-245-30-252-host.colocrossing.com
Domain Name	racknerd.com
Country	🇺🇸 United States of America
City	Buffalo, New York

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

172.245.30.252 has been reported 22 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 172.245.30.252

Export CSV

This IP address has been reported a total of 22 times from 18 distinct sources. 172.245.30.252 was first reported on October 22nd 2025, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Herrminator	2025-11-08 22:36:04 (11 months ago)	85.215.157.225 172.245.30.252 - - [08/Nov/2025:23:35:58 +0100] "GET /sql/webadmin/index.php?lang=en ... show more 85.215.157.225 172.245.30.252 - - [08/Nov/2025:23:35:58 +0100] "GET /sql/webadmin/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" 85.215.157.225 172.245.30.252 - - [08/Nov/2025:23:35:59 +0100] "GET /sql/myadmin/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" 85.215.157.225 172.245.30.252 - - [08/Nov/2025:23:35:59 +0100] "GET /administrator/PMA/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" 85.215.157.225 172.245.30.252 - - [08/Nov/2025:23:35:59 +0100] "GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1" 503 592 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" 85.215.157.225 172.245.30.252 - ... show less	Brute-Force Web App Attack
🇦🇺 Block Rockin' Beats	2025-11-08 20:09:03 (11 months ago)	Attempted phpMyAdmin exploit	Hacking Web App Attack
🇫🇮 JimArchon72	2025-11-08 16:35:01 (11 months ago)	2025/11/08 16:31:25 "GET /phpmyadmin/index.php?lang=en HTTP/1.1"	Web App Attack
🇺🇸 mw	2025-11-07 23:49:37 (11 months ago)	172.245.30.252 - - [07/Nov/2025:17:49:36 -0600] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 146 ... show more 172.245.30.252 - - [07/Nov/2025:17:49:36 -0600] "GET /phpMyAdmin/index.php?lang=en HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.245.30.252 - - [07/Nov/2025:17:49:36 -0600] "GET /phpmyadmin3/index.php?lang=en HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.245.30.252 - - [07/Nov/2025:17:49:36 -0600] "GET /phpMyAdmin-latest-english/index.php?lang=en HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.245.30.252 - - [07/Nov/2025:17:49:36 -0600] "GET /phpMyAdmin-5.1.1/index.php?lang=en HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 172.245.30.252 - - [07/Nov/2025:17:49:37 -0600] "GET /phpmyadmin5/index.php?lang=en HTTP/1.1" 404 146 ... show less	Bad Web Bot Web App Attack
🇪🇸 robotstxt	2025-11-07 13:02:18 (11 months ago)	172.245.30.252 - - [07/Nov/2025:13:02:03 +0000] "GET /phpmyadmin_/index.php?lang=en HTTP/1.1" 404 31 ... show more 172.245.30.252 - - [07/Nov/2025:13:02:03 +0000] "GET /phpmyadmin_/index.php?lang=en HTTP/1.1" 404 31 "http://82.152.2.202/phpmyadmin_/index.php?lang=en" rt="0.262" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" h="gastro.noudiari.es" sn="gastro.noudiari.es" ru="/phpmyadmin_/index.php?lang=en" u="/index.php" ucs="-" ua="unix:/var/run/php/gastro82.sock" us="301" uct="0.000" urt="0.262" 172.245.30.252 - - [07/Nov/2025:13:02:05 +0000] "GET /phpMyAdmin5.1/index.php?lang=en HTTP/1.1" 404 31 "http://82.152.2.202/phpMyAdmin5.1/index.php?lang=en" rt="0.228" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-" h="gastro.noudiari.es" sn="gastro.noudiari.es" ru="/phpMyAdmin5.1/index.php?lang=en" u="/index.php" ucs="-" ua="unix:/var/run/php/gastro82.sock" us="301" uct="0.000" urt="0.228" 172.245.30.252 - - [07/Nov/2025:13:02:06 +0000] "GET /phpMyAdmin5/index.php?la ... show less	Bad Web Bot
🇳🇱 Savvii	2025-11-06 19:52:57 (11 months ago)	15 attempts against mh-modsecurity-ban on sonic	Brute-Force Web App Attack
🇺🇸 MPL	2025-11-04 14:05:54 (11 months ago)	tcp/80 (4 or more attempts)	Port Scan
🇧🇪 sid3windr	2025-11-04 12:48:54 (11 months ago)	GET /db/phpmyadmin/index.php?lang=en (Tarpitted for 1d15h8m25s, wasted 8.06MB)	Web App Attack
🇩🇪 Mr-Money	2025-11-04 08:34:42 (11 months ago)	172.245.30.252 - - [04/Nov/2025:09:34:42 +0100] "GET /phpMyAdmin_/index.php?lang=en HTTP/1.1" 404 40 ... show more 172.245.30.252 - - [04/Nov/2025:09:34:42 +0100] "GET /phpMyAdmin_/index.php?lang=en HTTP/1.1" 404 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" ... show less	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇫🇷 service Informatique	2025-11-04 04:00:37 (11 months ago)	index.php	Web App Attack
🇬🇧 NotCool	2025-11-03 18:36:08 (11 months ago)	(directadmin) Failed DirectAdmin phpMyAdmin login from 172.245.30.252 (US/United States/172-245-30-2 ... show more (directadmin) Failed DirectAdmin phpMyAdmin login from 172.245.30.252 (US/United States/172-245-30-252-host.colocrossing.com): 10 in the last 3600 secs show less	Brute-Force
🇩🇪 R.G.	2025-11-03 09:06:56 (11 months ago)	(directadmin) Failed DirectAdmin phpMyAdmin login from 172.245.30.252 (US/United States/172-245-30-2 ... show more (directadmin) Failed DirectAdmin phpMyAdmin login from 172.245.30.252 (US/United States/172-245-30-252-host.colocrossing.com): 5 in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_DIRECTADMIN; Logs: Nov 03 10:06:51 user denied: wordpress (mysql-denied) from 172.245.30.252 show less	Web App Attack
🇪🇸 ofimare	2025-11-02 19:40:03 (11 months ago)	Brute-force ...	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2025-11-01 04:52:29 (11 months ago)	Web App Attack	Web App Attack
🇳🇱 Savvii	2025-10-31 20:53:41 (11 months ago)	15 attempts against mh-modsecurity-ban on chico	Brute-Force Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 220.135.56.200

🇺🇸 205.210.31.105

🇩🇪 172.71.160.174

🇬🇧 172.70.85.167

🇺🇸 162.216.149.48

🇹🇼 125.229.194.81

🇩🇪 109.160.32.166

🇩🇪 109.160.32.162

🇸🇪 93.158.90.151

🇬🇧 91.230.225.163

🇬🇧 78.153.140.43

🇺🇸 64.62.195.158

🇨🇦 45.198.224.125

🇺🇸 45.156.129.170

🇺🇸 34.138.150.17

🇧🇪 34.79.70.140

🇩🇪 2.26.60.228

🇨🇦 217.181.82.236

🇺🇸 205.210.31.68

🇺🇸 195.184.76.139