JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.33.230

212.30.33.230 was found in our database!

This IP was reported 247 times. Confidence of Abuse is 55%: ?

55%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mnets.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.33.230

Whois 212.30.33.230

IP Abuse Reports for 212.30.33.230:

This IP address has been reported a total of 247 times from 100 distinct sources. 212.30.33.230 was first reported on May 16th 2023, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-07-18 20:06:23 (5 hours ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 ger-stg-sifi1	2026-07-18 20:04:22 (6 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-07-17 11:54:31 (1 day ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇨🇦 KIsmay	2026-07-17 11:18:38 (1 day ago)	Jul 17 07:11:36 www4 WPAudit[943403]: 212.30.33.230 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; ... show more Jul 17 07:11:36 www4 WPAudit[943403]: 212.30.33.230 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" backupsystems:@KPEOr1dfghh54gh5fg$@ FAIL Jul 17 07:16:43 www4 WPAudit[943403]: 212.30.33.230 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" www.xmc.pl:klubowicz FAIL Jul 17 07:17:06 www4 WPAudit[943058]: 212.30.33.230 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" xtw18387d697:DH!bYsRn6573$3uk FAIL Jul 17 07:18:13 www4 WPAudit[943058]: 212.30.33.230 imaginesalmon.com "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" adminuser:r007p4S5w0rd FAIL Jul 17 07:18:37 www4 WPAudit[943403]: 212.30.33.230 imaginesalmon.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT ... show less	Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-17 06:39:21 (1 day ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN LB/Lebanon/-	Web App Attack
🇩🇪 Marc	2026-07-14 00:15:15 (5 days ago)	212.30.33.230 - - [14/Jul/2026:02:07:51 +0200] "POST /wp-login.php HTTP/1.1" 200 8099 "https://www.b ... show more 212.30.33.230 - - [14/Jul/2026:02:07:51 +0200] "POST /wp-login.php HTTP/1.1" 200 8099 "https://www.bente-personaldienstleistung.de/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.54 Safari/537.36" 212.30.33.230 - - [14/Jul/2026:02:10:21 +0200] "POST /wp-login.php HTTP/1.1" 200 8097 "https://www.bente-personaldienstleistung.de/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0" 212.30.33.230 - - [14/Jul/2026:02:12:59 +0200] "POST /wp-login.php HTTP/1.1" 200 8139 "https://www.bente-personaldienstleistung.de/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 212.30.33.230 - - [14/Jul/2026:02:14:57 +0200] "POST /wp-login.php HTTP/1.1" 200 8140 "https://www.bente-personaldienstleistung.de/wp-admin/" "Mozilla/5.0 (iPhone; CPU iPhone OS 14_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Mobile/15E148 Safari/604.1" 21 show less	Brute-Force Web App Attack
🇫🇷 dynamix	2026-07-13 08:18:50 (5 days ago)	WordPress wp-login.php Brute Force Attack	Brute-Force Web App Attack
🇩🇪 BlueWire Hosting	2026-07-07 18:38:27 (1 week ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-29 11:42:54 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 212.30.33.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.30.33.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 07:42:47.464575 2026] [security2:error] [pid 29966:tid 29966] [client 212.30.33.230:56809] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|prostar.industries\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "prostar.industries"] [uri "/wp-json/wp/v2/users"] [unique_id "akJaN4hpBrGHIaUll7TcMwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-06-26 19:20:45 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 07:02:17 (1 month ago)	(mod_security) mod_security (id:240000) triggered by 212.30.33.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240000) triggered by 212.30.33.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:02:09.514960 2026] [security2:error] [pid 29728:tid 29728] [client 212.30.33.230:39809] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|muzenique.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "muzenique.com"] [uri "/images/stories/themes.php"] [unique_id "aie6cQG06TooWqzF_bDhvQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-06-08 20:28:56 (1 month ago)	Aggressive web search of vulnerable pages: /fm.php /wp-admin/js/widgets/cloud.php /adminfuns.php7 /w ... show more Aggressive web search of vulnerable pages: /fm.php /wp-admin/js/widgets/cloud.php /adminfuns.php7 /wp-admin/images/about.php /ini.php /wp-admin ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:42:00 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 212.30.33.230 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.30.33.230 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:41:56.946908 2026] [security2:error] [pid 6782:tid 6782] [client 212.30.33.230:40387] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.bikiniadvice.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.bikiniadvice.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ag4qpBqIMSs_YtBsQuNOBQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-15 04:30:35 (2 months ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇩🇪 swehosting.se	2026-05-13 20:15:50 (2 months ago)	(smtpauth) Failed SMTP AUTH login from 212.30.33.230 (ES/Spain/-): 5 in the last 3600 secs; Ports: * ... show more (smtpauth) Failed SMTP AUTH login from 212.30.33.230 (ES/Spain/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: May 13 22:14:44 webb postfix/smtpd[19034]: warning: unknown[212.30.33.230]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 13 22:14:52 webb postfix/smtpd[19034]: warning: unknown[212.30.33.230]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 13 22:15:17 webb postfix/smtpd[19034]: warning: unknown[212.30.33.230]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 13 22:15:21 webb postfix/smtpd[19034]: warning: unknown[212.30.33.230]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 13 22:15:46 webb postfix/smtpd[19034]: warning: unknown[212.30.33.230]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 show less	Port Scan

Showing 1 to 15 of 247 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 156.230.182.18

🇺🇸 146.88.240.189

🇷🇺 83.239.108.218

🇧🇷 45.205.1.246

🇸🇬 217.216.35.235

🇳🇱 195.178.110.26

🇩🇪 178.27.90.142

🇳🇱 176.65.149.64

🇺🇸 173.247.226.62

🇺🇸 172.59.209.216

🇺🇸 162.216.150.223

🇨🇮 154.0.30.137

🇺🇸 109.105.210.74

🇺🇸 109.105.210.73

🇺🇸 109.105.210.72

🇪🇸 104.250.219.118

🇷🇴 92.118.39.78

🇨🇦 85.217.149.69

🇫🇷 85.217.140.22

🇺🇸 47.149.9.233