JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

212.30.37.228

Neutral Activity

Abuse confidence score ?

0% Low Risk

159 reports

64 reporters · latest 10 months ago

ISP	M Nets SAL
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	mnets.net
Country	🇳🇱 Netherlands
City	Rotterdam, South Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

212.30.37.228 has been reported 159 times. The most recent report is from 10 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 212.30.37.228

Export CSV

This IP address has been reported a total of 159 times from 64 distinct sources. 212.30.37.228 was first reported on September 28th 2022, and the most recent report was 10 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-12-22 14:24:43 (10 months ago)	apache vulnerability scan	Web App Attack
🇩🇪 marzzzello	2025-12-02 04:39:56 (10 months ago)	Ports: 25x 9246	Port Scan
🇺🇸 xmission.com	2025-09-21 19:31:24 (1 year ago)	Blocked by UFW (TCP on 1) Source port: 29932 TTL: 111 Packet length: 52 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 1) Source port: 29932 TTL: 111 Packet length: 52 TOS: 0x08 This report (for 212.30.37.228) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2025-08-17 02:10:14 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
Anonymous	2025-08-14 02:05:14 (1 year ago)	Unauthorized connection attempt detected in the last 24 hours	Hacking
🇺🇸 octageeks.com	2025-08-04 04:07:29 (1 year ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇧🇪 cmbplf	2025-08-02 14:25:00 (1 year ago)	4.000 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇫🇷 Sklurk	2025-07-30 06:09:55 (1 year ago)	Web App Attack	Web App Attack
Anonymous	2025-07-29 06:43:53 (1 year ago)	(wordpress) Failed wordpress login from 212.30.37.228 (NL/The Netherlands/-)	Brute-Force
🇺🇸 Penny Packer	2025-07-29 00:14:10 (1 year ago)	Fail2Ban apache-tripwires	Web App Attack
🇧🇪 cmbplf	2025-07-28 15:29:42 (1 year ago)	9.506 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2025-07-28 13:20:24 (1 year ago)	[redacted] 212.30.37.228 - - [28/Jul/2025:15:19:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" " ... show more [redacted] 212.30.37.228 - - [28/Jul/2025:15:19:27 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 212.30.37.228 - - [28/Jul/2025:15:19:30 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 212.30.37.228 - - [28/Jul/2025:15:19:31 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 212.30.37.228 - - [28/Jul/2025:15:19:37 +0200] "POST //xmlrpc.php HTTP/1.1" 200 416 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" [redacted] 212.30.37.228 - - [28/Jul/2025:15:19:42 +0200] "POST //xmlrpc ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-07-28 13:08:23 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 212.30.37.228 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 212.30.37.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 28 09:08:18.300760 2025] [security2:error] [pid 21601:tid 21601] [client 212.30.37.228:21797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "missevelyn.com"] [uri "/bak/sftp-config.json"] [unique_id "aId2QsnxIPt2ZutU9WpqQAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-25 09:49:21 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 212.30.37.228 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.30.37.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 25 05:49:13.037892 2025] [security2:error] [pid 12651:tid 12729] [client 212.30.37.228:52981] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.clearwaterpumpservices.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.clearwaterpumpservices.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aINTGZk9UklSx5I1kIA7KAAAARA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-07-25 08:44:17 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 212.30.37.228 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 212.30.37.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 25 04:44:09.665387 2025] [security2:error] [pid 9608:tid 9608] [client 212.30.37.228:40703] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.clcmillvale.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.clcmillvale.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aIND2dPCQXpp1v4MlkTGRgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 159 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.144.221.177

🇻🇳 103.237.144.204

🇧🇷 205.210.31.181

🇩🇪 194.187.176.30

🇦🇷 186.158.183.66

🇫🇷 185.194.178.21

🇨🇭 179.43.153.2

🇭🇰 148.66.49.226

🇮🇳 103.240.235.34

🇳🇬 102.88.137.80

🇵🇱 80.238.127.111

🇲🇾 49.124.149.205

🇨🇦 45.194.92.15

🇫🇷 34.163.33.70

🇺🇸 2600:1700:9bfd:9c10:49f3:6b24:1fdd:6d78

🇲🇽 187.216.224.85

🇳🇱 185.136.15.111

🇭🇰 123.58.215.190

🇺🇸 104.34.197.31

🇸🇮 102.220.161.85