JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.29.54

65.111.29.54 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.29.54

Whois 65.111.29.54

IP Abuse Reports for 65.111.29.54:

This IP address has been reported a total of 33 times from 20 distinct sources. 65.111.29.54 was first reported on July 13th 2024, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 OnTheEdge	2026-09-02 12:12:53 (15 hours ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇫🇷 tecnicorioja	2026-08-24 22:01:58 (1 week ago)	POST /xmlrpc.php [24/Aug/2026:06:09:17	Web App Attack Brute-Force
🇮🇹 CoreTech srl	2026-08-24 09:48:57 (1 week ago)	cloudlinux2 fail2ban: 2026-08-24 11:44:35,174 fail2ban.actions [1464]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-24 11:44:35,174 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Unban 194.85.88.120cloudlinux2 fail2ban: 2026-08-24 11:45:06,508 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 110.226.230.72 - 2026-08-24 11:45:06cloudlinux2 fail2ban: 2026-08-24 11:45:17,091 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 180.153.236.44 - 2026-08-24 11:45:17cloudlinux2 fail2ban: 2026-08-24 11:46:45,462 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 110.226.230.72 - 2026-08-24 11:46:45cloudlinux2 fail2ban: 2026-08-24 11:46:56,570 fail2ban.actions [1464]: NOTICE [plesk-modsecurity] Ban 110.226.230.72cloudlinux2 fail2ban: 2026-08-24 11:46:56,572 fail2ban.filter [1464]: INFO [recidive] Found 110.226.230.72 - 2026-08-24 11:46:56cloudlinux2 fail2ban: 2026-08-24 11:46:56,213 fail2ban.filter [1464]: INFO [plesk-modsecurity] Found 110.226.230.72 - 2026-08-24 11:46:56cloudlinux2 fail2ban: 2026-08-24 11:47:15,46 show less	Web App Attack
🇮🇹 VHosting	2026-08-24 05:50:08 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇮🇹 CoreTech srl	2026-08-23 21:13:57 (1 week ago)	cloudlinux2 fail2ban: 2026-08-23 23:08:50,323 fail2ban.filter [1496]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-23 23:08:50,323 fail2ban.filter [1496]: INFO [plesk-wordpress] Found 65.111.29.54 - 2026-08-23 23:08:50cloudlinux2 fail2ban: 2026-08-23 23:08:49,092 fail2ban.filter [1496]: INFO [plesk-wordpress] Found 104.207.62.45 - 2026-08-23 23:08:49cloudlinux2 fail2ban: 2026-08-23 23:09:29,377 fail2ban.filter [1496]: INFO [plesk-wordpress] Found 151.123.178.22 - 2026-08-23 23:09:29cloudlinux2 fail2ban: 2026-08-23 23:09:30,792 fail2ban.actions [1496]: NOTICE [plesk-modsecurity] Unban 168.144.161.21cloudlinux2 fail2ban: 2026-08-23 23:09:40,116 fail2ban.filter [1496]: INFO [plesk-wordpress] Found 104.207.62.69 - 2026-08-23 23:09:40cloudlinux2 fail2ban: 2026-08-23 23:10:01,506 fail2ban.filter [1496]: INFO [plesk-wordpress] Found 104.207.63.44 - 2026-08-23 23:10:01cloudlinux2 fail2ban: 2026-08-23 23:10:00,261 fail2ban.filter [1496]: INFO [plesk-wordpress] Found 65.111.30.70 - 2026-08-23 23:10:00cloudlinux2 fail2ban: 2026-08 show less	Web App Attack
🇩🇪 FeG Deutschland	2026-08-23 18:23:07 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 Sklurk	2026-08-05 02:26:26 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-04 02:08:46 (4 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=16; exact paths: /xmlrpc.php	Web App Attack
🇮🇹 VHosting	2026-07-13 10:55:03 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 04:28:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 23:28:13.646748 2026] [security2:error] [pid 465667:tid 465667] [client 65.111.29.54:31491] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthuregau.com"] [uri "/api/.env"] [unique_id "aY1W3YhjbzPqQNKVGl89pgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-10 22:59:14 (6 months ago)	Auto-ban: >3000 req/min op 2026-02-10	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-10 05:49:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:49:46.971833 2026] [security2:error] [pid 30739:tid 30739] [client 65.111.29.54:11787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koeckeritz.com"] [uri "/.git/config"] [unique_id "aYrG-sYU48hQKZGP_ziudwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 05:06:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:06:33.958851 2026] [security2:error] [pid 2355470:tid 2355470] [client 65.111.29.54:63797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idonthaveawebpage.com"] [uri "/config/.env"] [unique_id "aYq82QrfV-o2KI-H2_eb1AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 04:36:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:36:48.454153 2026] [security2:error] [pid 13143:tid 13143] [client 65.111.29.54:56863] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kletzer.com"] [uri "/.git/config"] [unique_id "aYq14KM5VmdwfiFzP1iGhAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 223.181.78.237

🇲🇳 202.179.4.68

🇺🇸 195.184.76.239

🇺🇸 162.216.150.230

🇺🇸 155.116.38.206

🇭🇰 152.32.129.154

🇺🇸 147.185.132.100

🇸🇪 104.23.221.61

🇧🇩 103.31.10.122

🇸🇬 94.231.206.5

🇫🇷 91.231.89.190

🇳🇱 45.148.10.42

🇺🇸 20.118.249.228

🇸🇬 13.76.181.239

🇬🇧 216.226.76.10

🇺🇸 216.163.1.10

🇺🇸 205.210.31.59

🇧🇷 200.202.99.166

🇪🇸 194.39.253.121

🇨🇳 183.238.10.198