JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.29.102

65.111.29.102 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.29.102

Whois 65.111.29.102

IP Abuse Reports for 65.111.29.102:

This IP address has been reported a total of 36 times from 17 distinct sources. 65.111.29.102 was first reported on July 6th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 mrcrassi	2026-07-22 02:18:15 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/2 (POST method ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Sklurk	2026-07-08 01:21:45 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇮 inlink.ltd	2026-06-12 14:36:48 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇬🇧 PeravixGroup	2026-05-23 01:32:33 (2 months ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-22 11:35:46 (2 months ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-01 23:48:58 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.29.102 2026-05-01 15 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.29.102 2026-05-01 15:15:40 / 2026-05-01 15:35:43 / 2026-05-01 15:39:08 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-19 23:40:56 (4 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.29.102 2026-03-19 15 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.29.102 2026-03-19 15:14:18 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%201%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 2026-03-19 15:14:18 /index.php?s=member&c=api&m=checktitle&id=13&title=123&module=news,(SELECT(CASE%20WHEN%200%20THEN%20EXP(5000)%20ELSE%200%20END))%20as%20aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 03:46:29 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:46:23.875556 2026] [security2:error] [pid 3153776:tid 3153776] [client 65.111.29.102:35937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robcohn.com"] [uri "/config/.env"] [unique_id "aZU2D_o0twjLSDfq4qfX6QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 02:40:05 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:39:57.460912 2026] [security2:error] [pid 3743:tid 3743] [client 65.111.29.102:12799] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "representacionesthompson.com"] [uri "/.env"] [unique_id "aZUmfRLSlcgex-LsKtuBHwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-02-18 02:21:43 (5 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 01:05:11 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.102 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.102 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:05:03.533173 2026] [security2:error] [pid 25669:tid 25669] [client 65.111.29.102:61851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiointernational.net"] [uri "/api/.env"] [unique_id "aZUQPyIEXWycD6GOTGXpkgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 12:17:06 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-24 17:14:03 (6 months ago)	wordpress-trap	Web App Attack
🇨🇳 ThreatBook.io	2026-01-19 01:03:28 (6 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/65.111.29.102 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/65.111.29.102 2026-01-18 18:41:57 /photo/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-01-08 00:03:42 (6 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/65.111.29.102 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/65.111.29.102 2026-01-07 09:57:27 / show less	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::7f

🇺🇸 216.180.246.100

🇳🇱 195.178.110.232

🇩🇪 194.187.176.175

🇩🇪 185.242.3.195

🇵🇱 176.53.159.198

🇺🇸 161.35.3.45

🇫🇷 91.196.152.223

🇳🇱 80.74.24.227

🇺🇸 47.253.247.6

🇵🇰 39.34.186.182

🇻🇳 27.79.40.150

🇺🇸 20.124.91.101

🇺🇸 198.211.114.45

🇦🇷 190.111.243.148

🇺🇸 172.202.26.222

🇺🇸 165.154.182.174

🇦🇫 149.54.62.62

🇰🇷 118.32.101.175

🇭🇰 103.231.56.22