212.30.37.140
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- M Nets SAL
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS137409
- Domain Name
- mnets.net
- Country
- 🇳🇱 Netherlands
- City
- Rotterdam, South Holland
Abuse Reports
Total reports
216 from
85 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Dentax |
212.30.37.140 - - [13/Nov/2026:10:59:38 +0100] "GET /wp-admin/fmadmin.php HTTP/1.1" 404 381 "http://rhmw.de/wp-admin/fmadmin.php" "Go-http-client/2.0"
...
|
Web App Attack | |
| 🇳🇴 jad-abuse |
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_admin. Observed by 1 sensor(s); 22 hits.
|
Brute-Force Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇩🇪 Digital Engine |
Automated scraping of e-commerce product pages via rotating VPN exit IPs: forged Safari 18.4 / Chrome 136 user-agents, no referer, HTML only. 2 request(s) from this IP.
|
Bad Web Bot | |
| Anonymous |
(mod_security) mod_security triggered on hostname [redacted] 212.30.37.140 (-)
|
SQL Injection | |
| 🇩🇪 raph |
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
|
Bad Web Bot Web App Attack | |
| 🇺🇦 URAN Publishing Service |
[10/Sep/2026:08:12:56 +0300] -- 212.30.37.140 Ban reason: User-Agent Go-http-client
|
Bad Web Bot Web App Attack | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: proto8 (4 total hits)
|
Brute-Force | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: HTTP (4 total hits)
|
Web App Attack | |
| 🇺🇸 Neosmith20 |
Knock-Knock honeypot brute-force: proto8 (3 total hits)
|
Brute-Force | |
| 🇮🇹 VHosting |
Detected WordPress attack from 4 different servers
|
Brute-Force Web App Attack | |
| 🇳🇱 WeCloudit-Anti-Abuse |
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
|
Web App Attack Hacking | |
| Anonymous |
Multiple, malicious web requests detected
|
Port Scan Hacking | |
| 🇺🇸 OceanTreasure |
tcp/80; WordPress core fingerprinting: "GET /wp-includes/woocommerce-call.php" @ 2026-07-20T08:04:10Z [proxy]
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown