JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.30.175

65.111.30.175 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.30.175

Whois 65.111.30.175

IP Abuse Reports for 65.111.30.175:

This IP address has been reported a total of 14 times from 9 distinct sources. 65.111.30.175 was first reported on July 13th 2024, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-16 00:26:47 (19 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:38:05 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:37:57.947889 2026] [security2:error] [pid 1491557:tid 1491557] [client 65.111.30.175:10287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garon.us"] [uri "/.env"] [unique_id "aYpTtVv-x9371z4zT7jbvwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 20:34:51 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:34:46.750008 2026] [security2:error] [pid 19341:tid 19437] [client 65.111.30.175:50639] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gamecrazy.us"] [uri "/api/.git/config"] [unique_id "aYpE5kYsChRAU7ugYZ3N3QAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 05:22:22 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 00:22:12.660948 2026] [security2:error] [pid 1236:tid 1236] [client 65.111.30.175:33863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingworkingcapital.com"] [uri "/.env.staging"] [unique_id "aYlvBLxNxdiRYvSiI_jk6AAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 04:18:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 23:18:36.619072 2026] [security2:error] [pid 21261:tid 21261] [client 65.111.30.175:37449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fullbladderclub.com"] [uri "/.env.save"] [unique_id "aYlgHHkVCsvLq1hc7N9pxQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 03:49:55 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 22:49:49.408553 2026] [security2:error] [pid 29749:tid 29749] [client 65.111.30.175:53817] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuegolounge813.com"] [uri "/new/.git/config"] [unique_id "aYlZXXW83i0YA7F7ww7MYAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 03:25:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 22:25:48.642643 2026] [security2:error] [pid 25103:tid 25103] [client 65.111.30.175:21767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuentevictoria.com"] [uri "/backend/.env"] [unique_id "aYlTvBhOCIIfzEhf5cKT1QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-12-28 17:31:26 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 RLDD	2025-10-12 22:22:11 (9 months ago)	WP login attempts -exo	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-10-07 17:14:09 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇧🇪 cmbplf	2025-10-04 09:24:32 (9 months ago)	1.661 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
🇳🇱 EGP Abuse Dept	2024-10-09 01:50:04 (1 year ago)	Unauthorized connection to RDP port 3389	Port Scan Hacking
Anonymous	2024-08-18 16:55:34 (1 year ago)	BruteForce IMAP/POP3	Brute-Force
Anonymous	2024-07-13 00:41:43 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 23.234.86.106

🇺🇸 216.25.89.152

🇧🇷 205.210.31.181

🇳🇱 195.178.110.228

🇧🇦 185.38.146.163

🇹🇭 159.192.144.206

🇷🇺 91.214.76.74

🇫🇷 90.101.169.47

🇭🇺 77.221.42.205

🇧🇷 45.168.170.235

🇸🇬 13.229.123.149

🇸🇪 194.99.27.220

🇺🇸 191.102.163.195

🇭🇰 152.32.189.59

🇦🇫 149.54.51.42

🇮🇳 123.176.38.70

🇰🇷 119.192.249.195

🇰🇷 112.172.249.41

🇬🇧 94.177.22.135

🇩🇪 87.106.47.28