JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 142.248.80.30

142.248.80.30 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 79%: ?

79%

ISP	Advin Services LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22295
Domain Name	advinservers.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 142.248.80.30

Whois 142.248.80.30

IP Abuse Reports for 142.248.80.30:

This IP address has been reported a total of 22 times from 13 distinct sources. 142.248.80.30 was first reported on June 4th 2026, and the most recent report was 6 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-06-04 19:47:59 (6 minutes ago)	Restricted File Access Attempt. Matched phrase ".yarnrc" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 19:46:04 (8 minutes ago)	(mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 15:45:57.097720 2026] [security2:error] [pid 1177:tid 1199] [client 142.248.80.30:29112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gqsi.org"] [uri "/.git/refs/heads/main"] [unique_id "aiHV9RR9o5eaV9VyNuZi4AAAAVM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 0x44	2026-06-04 19:22:20 (32 minutes ago)	TCP SYN Discovery * Flooding	DDoS Attack
🇺🇸 mnsf	2026-06-04 19:09:37 (44 minutes ago)	Scanning/Probing (21)	Brute-Force Web App Attack
Anonymous	2026-06-04 18:56:02 (58 minutes ago)	Bot / scanning and/or hacking attempts: GET /.git/refs/heads/main HTTP/1.1, GET /.env.local.copy HTT ... show more Bot / scanning and/or hacking attempts: GET /.git/refs/heads/main HTTP/1.1, GET /.env.local.copy HTTP/1.1, GET / HTTP/1.1, GET /.env.backup HTTP/1.1, GET /server/.env HTTP/1.1, GET /sa-private-key.json HTTP/1.1, GET /.gcp/credentials.json HTTP/1.1, GET /.env.development HTTP/1.1, GET /gcp.json HTTP/1.1, GET /config.json HTTP/1.1, GET /.env.bak HTTP/1.1, GET /gcp_key.json HTTP/1.1, GET /.openclaw/openclaw.json HTTP/1.1, GET /service-account.json HTTP/1.1, GET /.env.test HTTP/1.1, GET /keyfile.json HTTP/1.1, GET /.kube/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /.anthropic/config.json HTTP/1.1, GET /secrets.json HTTP/1.1, GET /api/client_secret.json HTTP/1.1, GET /config/gcp.json HTTP/1.1, GET /gcp-service-account.json HTTP/1.1, GET /.env.staging HTTP/1.1, GET /firebase.json HTTP/1.1, GET /.git/refs/heads/master HTTP/1.1, GET /.env.orig HTTP/1.1, GET /.env.copy HTTP/1.1, GET /.git/logs/HEAD HTTP/1.1, GET /client/js/vendor/jquery-1.11.0.min.js HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 valornode	2026-06-04 18:40:32 (1 hour ago)	Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-crawl-non_statics ... show more Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-crawl-non_statics \| ASN: 22295 (ADVIN) \| Country: US \| Range: 142.248.80.0/24 show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-04 18:33:43 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:33:37.014930 2026] [security2:error] [pid 5562:tid 5562] [client 142.248.80.30:34232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cheaptrafficschool247.com"] [uri "/.env.production.copy"] [unique_id "aiHFAYaHzxGsXNE_5N9JkgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 18:06:41 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:06:35.179286 2026] [security2:error] [pid 29263:tid 29263] [client 142.248.80.30:9412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lobibilisim.com"] [uri "/.env.orig"] [unique_id "aiG-qx2G4VPE0HS_RilUgAAAAFU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-04 17:56:15 (1 hour ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 17:37:59 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 13:37:53.406124 2026] [security2:error] [pid 18629:tid 18629] [client 142.248.80.30:37540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.sendalawyerletter.com"] [uri "/web/.env"] [unique_id "aiG38auL_cVwsL_-ovz7bgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-06-04 17:17:21 (2 hours ago)	http-sensitive-files - IP: 142.248.80.30 - time="2026-06-04T19:17:20+02:00" level=info msg="(555f66 ... show more http-sensitive-files - IP: 142.248.80.30 - time="2026-06-04T19:17:20+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 142.248.80.30 (US/22295) : 4h ban on Ip 142.248.80.30" module=db show less	Web App Attack
🇺🇸 conrad10781	2026-06-04 17:09:27 (2 hours ago)	nginx-4xx	Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 17:09:08 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 13:09:05.126250 2026] [security2:error] [pid 28060:tid 28060] [client 142.248.80.30:33806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bvidisplay.com"] [uri "/.env.production.backup"] [unique_id "aiGxMddDFxa1su6VcxSscwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-04 16:12:51 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 142.248.80.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:12:44.044128 2026] [security2:error] [pid 1559:tid 1559] [client 142.248.80.30:63422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.effectivefirearms.com"] [uri "/.env.local.bak"] [unique_id "aiGj_Cwf5YyXbu5jojN0zAAAADs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 16:06:56 (3 hours ago)	142.248.80.30 pi.patrz.eu - [04/Jun/2026:18:06:52 +0200] "GET /admin/ HTTP/1.1" 401 164 "http://pi.p ... show more 142.248.80.30 pi.patrz.eu - [04/Jun/2026:18:06:52 +0200] "GET /admin/ HTTP/1.1" 401 164 "http://pi.patrz.eu/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" ... show less	Hacking Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.224

🇳🇱 185.223.235.26

🇩🇪 141.11.187.248

🇩🇪 130.12.181.100

🇬🇷 83.235.16.111

🇵🇱 83.29.30.66

🇹🇿 41.59.153.33

🇷🇴 2.57.121.112

🇳🇱 89.21.67.157

🇳🇱 89.21.67.150

🇸🇪 81.170.248.221

🇺🇸 47.251.185.187

🇭🇰 43.155.40.91

🇲🇽 201.144.47.34

🇺🇸 162.216.150.40

🇺🇸 159.89.185.127

🇵🇰 139.135.41.170

🇺🇸 104.168.118.62

🇺🇸 72.17.34.38

🇮🇩 210.87.86.94