AbuseIPDB » 222.252.30.199
222.252.30.199
This IP was reported 9 times. Confidence of
Abuse
is 4% : ?
ISP
Hanoi Post and Telecom Company
Usage Type
Fixed Line ISP
ASN
AS45899
Domain Name
vnpt-hanoi.com.vn
Country
🇻🇳
Viet Nam
City
Hanoi, Hanoi
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 222.252.30.199 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
222.252.30.199 was first reported on
November 25th 2020 , and the most recent report was
2 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
bigorre.org
2026-06-13 14:49:27
(2 hours ago)
Unidentified crawling: not a self-announced bot in user-agent
Bad Web Bot
🇺🇸
kosada.com
2026-02-03 16:29:32
(4 months ago)
Web bot: DDoS
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-03 15:13:45
(4 months ago)
(mod_security) mod_security (id:210580) triggered by 222.252.30.199 (static.vnpt-hanoi.com.vn): 1 in ...
show more
(mod_security) mod_security (id:210580) triggered by 222.252.30.199 (static.vnpt-hanoi.com.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 03 10:13:19.467622 2026] [security2:error] [pid 31294:tid 31294] [client 222.252.30.199:33035] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "etc/passwd" at ARGS:catid. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.easternimport.com|F|2"] [data "Matched Data: etc/passwd found within ARGS:catid: ../../../../../../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.easternimport.com"] [uri "/products.php"] [unique_id "aYIQj7CJwqWcWEEyAA4kDwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
sglorch.de
2021-09-20 06:48:59
(4 years ago)
222.252.30.199 triggered Icarus honeypot on port 20445. Check us out on github.
Port Scan
Hacking
🇬🇧
pccs.uk
2021-09-20 00:18:47
(4 years ago)
222.252.30.199 IP detected, Autoreporting now..
Port Scan
Hacking
🇩🇪
www.blocklist.de
2021-07-17 02:42:36
(4 years ago)
Jul 17 08:22:48 vdcadm1 sshd[11433]: Did not receive identification string from 222.252.30.199
Jul 1 ...
show more
Jul 17 08:22:48 vdcadm1 sshd[11433]: Did not receive identification string from 222.252.30.199
Jul 17 08:22:52 vdcadm1 sshd[11435]: reveeclipse mapping checking getaddrinfo for static.vnpt-hanoi.com.vn [222.252.30.199] failed - POSSIBLE BREAK-IN ATTEMPT!
Jul 17 08:22:52 vdcadm1 sshd[11435]: Invalid user admin from 222.252.30.199
Jul 17 08:22:53 vdcadm1 sshd[11436]: Connection closed by 222.252.30.199
Jul 17 08:22:57 vdcadm1 sshd[11556]: reveeclipse mapping checking getaddrinfo for static.vnpt-hanoi.com.vn [222.252.30.199] failed - POSSIBLE BREAK-IN ATTEMPT!
Jul 17 08:22:57 vdcadm1 sshd[11556]: Invalid user admin from 222.252.30.199
Jul 17 08:22:57 vdcadm1 sshd[11561]: Connection closed by 222.252.30.199
Jul 17 08:23:02 vdcadm1 sshd[11568]: reveeclipse mapping checking getaddrinfo for static.vnpt-hanoi.com.vn [222.252.30.199] failed - POSSIBLE BREAK-IN ATTEMPT!
Jul 17 08:23:02 vdcadm1 sshd[11568]: Invalid user admin from 222.252.30.199
Jul 17 08:23:02 vdcadm1 sshd[11569]........
-------------------------------
show less
FTP Brute-Force
Hacking
🇩🇪
jannga.de
2021-07-13 04:14:47
(4 years ago)
$f2bV_matches
Brute-Force
SSH
🇺🇸
lost_troll
2021-06-16 23:00:09
(4 years ago)
Brute force against SSH Honeypot - 300 attempts
Brute-Force
SSH
🇺🇸
IrisFlower
2020-11-25 06:34:45
(5 years ago)
Unauthorized connection attempt detected from IP address 222.252.30.199 to port 445
Hacking
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: