JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.22.1

65.111.22.1 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.22.1

Whois 65.111.22.1

IP Abuse Reports for 65.111.22.1:

This IP address has been reported a total of 34 times from 19 distinct sources. 65.111.22.1 was first reported on July 11th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 BirdCo Telecom	2026-07-06 13:10:26 (7 hours ago)		Brute-Force Fraud VoIP
🇮🇹 Francesco Ippoliti	2026-07-05 03:36:14 (1 day ago)	[Jul 5 05:36:13] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:555@154 ... show more [Jul 5 05:36:13] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.22.1:33674' (callid: 4262e19da2d80c17dd5e7cb4d85324ec) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 20:52:44 (2 days ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 20:32:54 (3 days ago)	[Jul 3 22:32:53] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:333@154 ... show more [Jul 3 22:32:53] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.22.1:9143' (callid: d20172110f9b5119e2f2462a4e669cf3) - No matching endpoint found [Jul 3 22:32:53] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.22.1:9143' (callid: d20172110f9b5119e2f2462a4e669cf3) - No matching endpoint found ... show less	Brute-Force Port Scan
🇺🇸 mnsf	2026-06-04 20:05:58 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-03-05 08:07:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:07:27.174295 2026] [security2:error] [pid 5953:tid 6038] [client 65.111.22.1:64781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/ad/ec832f6abaa4c2b3108a1209296b590c8e52de"] [unique_id "aak5v-9_LUubsM0EwzyM8gAAAc4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 05:27:44 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:27:39.821549 2026] [security2:error] [pid 20217:tid 20217] [client 65.111.22.1:36669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kruizekontrhl.com"] [uri "/backup/.git/config"] [unique_id "aZafS2FpRJ4L1nqvMnHKkwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2026-02-19 04:50:28 (4 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /api/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-02-19 02:38:19 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:38:11.868323 2026] [security2:error] [pid 21150:tid 21150] [client 65.111.22.1:57271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keaborner.com"] [uri "/admin/.git/config"] [unique_id "aZZ3k609wSD0KQXzKU1CGgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 19:54:59 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:54:54.823305 2026] [security2:error] [pid 1288110:tid 1288127] [client 65.111.22.1:37943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalbodycare753.com"] [uri "/.env.local"] [unique_id "aZYZDu9F_c7x5Ag_cn9XdgAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:51:04 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:50:52.331747 2026] [security2:error] [pid 7110:tid 7110] [client 65.111.22.1:14333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "threewild.com"] [uri "/wp/.git/config"] [unique_id "aZYKDAsxzq4w_6M5RNrvlQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 16:19:35 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 11:19:29.735724 2026] [security2:error] [pid 24039:tid 24039] [client 65.111.22.1:44747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yogitunes.com"] [uri "/test/.git/config"] [unique_id "aZXmkfuoQp1cEC4ure2nywAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-18 14:54:39 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 mnsf	2026-02-18 14:05:58 (4 months ago)	Too many Status 40X (11) Scanning/Probing (11)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 13:07:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:07:27.498507 2026] [security2:error] [pid 14207:tid 14207] [client 65.111.22.1:46797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitelabelcasinoportal.net"] [uri "/backup/.git/config"] [unique_id "aZW5jwXkbgXwF_P4oOUTvAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 222.252.5.167

🇺🇸 162.216.149.12

🇷🇺 154.90.70.254

🇭🇰 152.32.171.184

🇫🇮 147.185.133.48

🇺🇸 107.150.97.52

🇯🇵 160.248.75.84

🇨🇳 106.75.25.139

🇧🇬 78.128.114.58

🇺🇸 66.132.195.62

🇳🇱 45.148.10.141

🇨🇳 14.103.118.121

🇺🇸 205.210.31.85

🇸🇬 172.217.97.23

🇷🇴 92.118.39.71

🇰🇷 59.24.133.197

🇨🇳 36.32.3.41

🇺🇸 216.180.246.101

🇳🇱 91.92.40.11

🇨🇦 85.217.149.18