JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 212.30.33.248

212.30.33.248 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 70%: ?

70%

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	mnets.net
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 212.30.33.248

Whois 212.30.33.248

IP Abuse Reports for 212.30.33.248:

This IP address has been reported a total of 54 times from 37 distinct sources. 212.30.33.248 was first reported on March 29th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-07-04 17:51:30 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-04 12:59:39 (2 days ago)	Banned by Fail2Ban on server	Web App Attack
Anonymous	2026-07-02 18:28:09 (4 days ago)	212.30.33.248 - - [02/Jul/2026:20:27:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 ... show more 212.30.33.248 - - [02/Jul/2026:20:27:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 212.30.33.248 - - [02/Jul/2026:20:27:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 212.30.33.248 - - [02/Jul/2026:20:28:02 +0200] "POST /xmlrpc.php HTTP/1.1" 200 368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 212.30.33.248 - - [02/Jul/2026:20:28:03 +0200] "POST /xmlrpc.php HTTP/1.1" 200 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51" 212.30.33.248 - - [02/Jul/2026:20:28:08 +0200] "POST /xmlrpc.php HTTP/1.1" 200 17271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ... show less	Brute-Force Web App Attack
Anonymous	2026-07-01 11:31:49 (5 days ago)	212.30.33.248 - - [01/Jul/2026:13:31:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 ... show more 212.30.33.248 - - [01/Jul/2026:13:31:37 +0200] "POST /xmlrpc.php HTTP/1.1" 200 3106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 212.30.33.248 - - [01/Jul/2026:13:31:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 2915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 212.30.33.248 - - [01/Jul/2026:13:31:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 368 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 212.30.33.248 - - [01/Jul/2026:13:31:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" 212.30.33.248 - - [01/Jul/2026:13:31:48 +0200] "POST /xmlrpc.php HTTP/1.1" 200 25631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ... show less	Brute-Force Web App Attack
🇬🇧 consul.to	2026-06-24 18:54:21 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Octopuce	2026-06-24 16:58:09 (1 week ago)	Aggressive web search of vulnerable pages: /chosen.php /bypass.php /config.php /themes.php /admin.ph ... show more Aggressive web search of vulnerable pages: /chosen.php /bypass.php /config.php /themes.php /admin.php /about.php /style.php /file2.php /jsonq.p ... show less	Web App Attack
🇳🇱 Cyber SOC	2026-06-23 15:10:20 (1 week ago)	Peaksys - 2026-06-23 16:09:57 UTC+01	Port Scan
🇳🇱 Site.eu	2026-06-16 08:32:17 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 todix	2026-06-15 05:25:31 (3 weeks ago)	Web App Attack Exploid from 212.30.33.248	Web App Attack
🇦🇺 paulshipley.com.au	2026-06-14 23:26:38 (3 weeks ago)	shotbysuzanne.com.au:443 212.30.33.248 - - [15/Jun/2026:09:26:35 +1000] "GET /wp-content/plugins/pwn ... show more shotbysuzanne.com.au:443 212.30.33.248 - - [15/Jun/2026:09:26:35 +1000] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 54330 "http://shotbysuzanne.com.au/wp-content/plugins/pwnd/pwnd.php" "Go-http-client/1.1" ... show less	Web App Attack
🇩🇪 Vegascosmetics	2026-06-14 21:51:26 (3 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	Hacking Web App Attack
Anonymous	2026-06-14 19:40:40 (3 weeks ago)	Multiple, malicious web requests detected	Port Scan Hacking
🇬🇧 consul.to	2026-06-14 15:22:09 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 Progetto1	2026-06-14 11:40:02 (3 weeks ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 bigscoots.com	2026-06-09 15:24:15 (3 weeks ago)	(smtpauth) Failed SMTP AUTH login from 212.30.33.248 (ES/Spain/-): 5 in the last 3600 secs; Ports: 2 ... show more (smtpauth) Failed SMTP AUTH login from 212.30.33.248 (ES/Spain/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-06-09 11:23:06 dovecot_login authenticator failed for H=(7XAIsl) [212.30.33.248]:43496: 535 Incorrect authentication data (set_id=heratya) 2026-06-09 11:23:15 dovecot_login authenticator failed for H=(HTgTDC6s) [212.30.33.248]:54278: 535 Incorrect authentication data ([email protected]) 2026-06-09 11:23:42 dovecot_login authenticator failed for H=(rIgEbv) [212.30.33.248]:22301: 535 Incorrect authentication data (set_id=heratya) 2026-06-09 11:23:47 dovecot_login authenticator failed for H=(YQ4rUHuX) [212.30.33.248]:21745: 535 Incorrect authentication data ([email protected]) 2026-06-09 11:24:13 dovecot_login authenticator failed for H=(wv3tFPFqmy) [212.30.33.248]:17903: 535 Incorrect authentication data (set_id=heratya) show less	Brute-Force SSH

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇳 213.154.80.51

🇧🇴 190.186.23.70

🇮🇩 157.10.182.14

🇱🇹 62.60.130.219

🇰🇷 58.229.253.119

🇺🇸 13.72.110.24

🇪🇸 217.154.106.153

🇱🇻 185.113.139.51

🇨🇳 111.42.132.19

🇫🇷 109.205.178.227

🇩🇪 51.89.21.211

🇨🇳 43.136.81.242

🇳🇱 195.93.244.97

🇨🇱 186.10.86.130

🇺🇸 181.41.206.224

🇺🇸 151.240.43.128

🇨🇳 111.59.206.224

🇺🇸 103.234.62.3

🇧🇷 192.178.95.21

🇹🇷 94.154.43.254