JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.30.42

65.111.30.42 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇫🇷 France
City	Paris, Ile-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.30.42

Whois 65.111.30.42

IP Abuse Reports for 65.111.30.42:

This IP address has been reported a total of 19 times from 14 distinct sources. 65.111.30.42 was first reported on July 10th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-13 13:12:24 (1 week ago)	WordPress probing \| req: /wp-login.php?action=register \| UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64 ... show more WordPress probing \| req: /wp-login.php?action=register \| UA: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 show less	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-07-16 03:16:26 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 01:32:24 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 05:44:39 (1 month ago)	Web App Attack	Web App Attack
🇳🇱 e.fierstra	2026-03-27 01:41:50 (4 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-03-27 00:16:57 (4 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.30.42 (FR/France/-): 1 in th ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.30.42 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
🇵🇱 sefinek.net	2026-01-24 22:53:55 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 VHosting	2026-01-20 10:40:06 (7 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇵🇱 sefinek.net	2026-01-15 13:51:24 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 nowyouknow	2026-01-01 20:30:46 (7 months ago)	(From [email protected]) Hi, You can offload your digital marketing workload to a trained ... show more (From [email protected]) Hi, You can offload your digital marketing workload to a trained full-time assistant for $250/month. They work daily on SEO, ads, email campaigns, social media, and administrative tasks. Your first month is free. Use the form below to start the onboarding process. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (8 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-11-27 22:53:23 (8 months ago)	(mod_security) mod_security (id:210740) triggered by 65.111.30.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210740) triggered by 65.111.30.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 17:53:18.014061 2025] [security2:error] [pid 709833:tid 709833] [client 65.111.30.42:14823] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|www.neff.family.name\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.neff.family.name"] [uri "/yybbs.cgi"] [unique_id "aSjWXnd_isknA4FedwbNDwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2025-11-17 22:49:35 (9 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2025-11-02 21:20:21 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:10:15	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 TheMadBeaker	2025-01-15 08:32:21 (1 year ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 117.50.51.119

🇫🇷 54.38.109.115

🇰🇷 218.51.148.194

🇻🇳 171.231.177.117

🇺🇸 20.64.105.74

🇺🇸 13.86.106.3

🇷🇺 176.195.90.247

🇺🇸 162.216.149.31

🇬🇧 45.82.76.109

🇨🇦 4.204.200.136

🇺🇸 2606:cc0:10:83f::1

🇺🇸 216.25.89.93

🇮🇷 194.62.43.62

🇫🇷 169.58.156.150

🇷🇴 92.118.39.233

🇫🇷 81.249.252.233

🇷🇴 80.94.92.179

🇵🇱 64.176.70.123

🇺🇸 205.210.31.45

🇳🇱 193.176.31.221