JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.30.48

65.111.30.48 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 34%: ?

34%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.30.48

Whois 65.111.30.48

IP Abuse Reports for 65.111.30.48:

This IP address has been reported a total of 26 times from 15 distinct sources. 65.111.30.48 was first reported on July 3rd 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 dzpk	2026-09-01 13:33:07 (1 hour ago)	65.111.30.48 - - [01/Sep/2026:15:33:07 +0200] "GET /news-sitemap.xml HTTP/1.1" 404 260 "-" "Mozilla/ ... show more 65.111.30.48 - - [01/Sep/2026:15:33:07 +0200] "GET /news-sitemap.xml HTTP/1.1" 404 260 "-" "Mozilla/5.0" show less	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-31 11:03:57 (1 day ago)	cloudlinux2 fail2ban: 2026-08-31 12:58:42,501 fail2ban.actions [1605]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-31 12:58:42,501 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Unban 35.204.220.151cloudlinux2 fail2ban: 2026-08-31 12:59:39,647 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 85.243.96.97 - 2026-08-31 12:59:39cloudlinux2 fail2ban: 2026-08-31 12:59:48,713 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 151.123.176.204 - 2026-08-31 12:59:48cloudlinux2 fail2ban: 2026-08-31 12:59:59,430 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 104.207.39.120 - 2026-08-31 12:59:58cloudlinux2 fail2ban: 2026-08-31 13:00:00,264 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 104.207.62.193 - 2026-08-31 12:59:59cloudlinux2 fail2ban: 2026-08-31 13:00:21,977 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 45.3.36.86 - 2026-08-31 13:00:19cloudlinux2 fail2ban: 2026-08-31 13:00:23,981 fail2ban.filter [1605]: INFO [plesk-wordpress] Found 65.111.30.48 - 2026-08-31 13:00:23cloudlinux2 fail2ban: 2026- show less	Web App Attack
🇲🇽 octageeks.com	2026-08-31 04:24:38 (1 day ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇮🇹 VHosting	2026-08-29 03:05:04 (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-08-10 05:26:03 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-09 02:52:00 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 01:36:17 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 georgengelmann	2026-05-22 04:34:31 (3 months ago)	Failed login attempt for mainhack	Brute-Force Web App Attack
Anonymous	2025-12-29 00:47:57 (8 months ago)	2025-12-29T02:47:56.811581+02:00 zanati wp(www.sahpa.co.za)[398020]: Blocked authentication attempt ... show more 2025-12-29T02:47:56.811581+02:00 zanati wp(www.sahpa.co.za)[398020]: Blocked authentication attempt for [email protected] from 65.111.30.48 ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2025-11-25 23:02:18 (9 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 03:28:17 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:28:09.545284 2025] [security2:error] [pid 30084:tid 30084] [client 65.111.30.48:52811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "despojosocial.com"] [uri "/.env"] [unique_id "aSUiSVmFFBeWZI-oWlH8BgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:55:58 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:55:51.391230 2025] [security2:error] [pid 5027:tid 5027] [client 65.111.30.48:36803] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avienhowell.com"] [uri "/.env"] [unique_id "aSQPh5x2V_xhT3tfHJ0ItQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:06:24 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:06:11.162476 2025] [security2:error] [pid 29097:tid 29097] [client 65.111.30.48:35957] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mispar.consulting"] [uri "/.env"] [unique_id "aSQD4zrjbeMQsKyo3pe6DAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:35:24 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:35:19.980241 2025] [security2:error] [pid 11946:tid 11946] [client 65.111.30.48:41779] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.angelaridgwaydressage.com"] [uri "/.git/HEAD"] [unique_id "aSPgh8rftxrJYwABIlmYlwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:09:56 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.30.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:09:34.278964 2025] [security2:error] [pid 12797:tid 12797] [client 65.111.30.48:24421] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.abq4you.com"] [uri "/.env"] [unique_id "aSPafusg_cjPsUNDaZQR-QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 195.15.244.188

🇧🇬 193.24.211.52

🇺🇸 189.81.70.10

🇯🇵 177.3.88.33

🇭🇰 118.193.33.216

🇨🇳 106.38.195.164

🇹🇼 104.199.236.79

🇺🇸 189.81.5.210

🇮🇷 185.60.136.87

🇦🇷 181.24.43.34

🇻🇳 171.244.201.80

🇮🇳 113.193.128.226

🇲🇺 102.163.58.254

🇹🇷 85.100.101.164

🇸🇬 84.75.150.181

🇬🇧 31.14.254.77

🇺🇸 3.219.81.66

🇷🇴 2.57.122.209

🇺🇸 167.172.129.109

🇺🇸 162.241.194.11