JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.22.216

65.111.22.216 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 34%: ?

34%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.22.216

Whois 65.111.22.216

IP Abuse Reports for 65.111.22.216:

This IP address has been reported a total of 25 times from 21 distinct sources. 65.111.22.216 was first reported on July 9th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 etu brutus	2026-07-18 16:45:55 (1 day ago)	65.111.22.216 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇩🇪 Jochen Pretli	2026-07-18 09:14:53 (1 day ago)	connection to honeypot	Email Spam Port Scan
🇫🇷 Sklurk	2026-07-09 00:00:10 (1 week ago)	Web App Attack	Web App Attack
Anonymous	2026-06-24 08:19:01 (3 weeks ago)	[ns65.kdns.gr] httpd-login-spray-site: sites=andromedaln.space; logs=/var/log/httpd/domains/andromed ... show more [ns65.kdns.gr] httpd-login-spray-site: sites=andromedaln.space; logs=/var/log/httpd/domains/andromedaln.space.log; samples=site_wide=true \| distinct_ips=24 \| /wp-login.php show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-23 03:08:35 (3 weeks ago)	(y4) Failed scan -byebye- from 65.111.22.216 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
Anonymous	2026-06-20 13:49:02 (4 weeks ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspri ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspriftis.gr.log; samples=site_wide=true \| distinct_ips=15 \| /wp-login.php show less	Hacking Web App Attack
🇬🇷 setupgr	2026-06-19 10:03:01 (1 month ago)	(mod_security) mod_security (id:900001) triggered by 65.111.22.216 (GB/United Kingdom/England/London ... show more (mod_security) mod_security (id:900001) triggered by 65.111.22.216 (GB/United Kingdom/England/London/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 13:02:56.710265 2026] [security2:error] [pid 2278:tid 2458] [client 65.111.22.216:63631] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: cpanagiotou.gr"] [severity "CRITICAL"] [tag "security"] [hostname "cpanagiotou.gr"] [uri "/wp-login.php"] [unique_id "ajUT0AuYeXI6iTUJgvu2OwAAAI4"], referer: https://cpanagiotou.gr/wp-login.php show less	Port Scan
🇳🇿 billyborsht	2026-06-19 00:37:30 (1 month ago)	2026-06-19T12:37:29.973736+12:00 southern wordpress(kate.frykberg.co.nz)[1049761]: Authentication at ... show more 2026-06-19T12:37:29.973736+12:00 southern wordpress(kate.frykberg.co.nz)[1049761]: Authentication attempt for unknown user [email protected] from 65.111.22.216 ... show less	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-05-20 16:19:12 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇳🇱 ParaBug	2026-04-20 15:29:42 (2 months ago)	65.111.22.216 - - [20/Apr/2026:17:29:42 +0200] "GET http://51-15-23-24.rev.poneytelecom.eu/.git/HEAD ... show more 65.111.22.216 - - [20/Apr/2026:17:29:42 +0200] "GET http://51-15-23-24.rev.poneytelecom.eu/.git/HEAD HTTP/1.1" 403 440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" ... show less	Phishing Brute-Force Web App Attack
🇺🇸 Psycho Solutions LLC	2026-03-14 09:32:17 (4 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/14/2026 9:32 am (UTC-6) show less	Web App Attack Bad Web Bot Web Spam Hacking
🇺🇸 nationaleventpros.com	2026-02-17 22:03:51 (5 months ago)	WordPress login attempt	Brute-Force
Anonymous	2026-02-17 20:46:44 (5 months ago)	Failed Wordpress login	Hacking Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2025-12-10 06:55:10 (7 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-11-26 12:33:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.216 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:33:36.519099 2025] [security2:error] [pid 29657:tid 29657] [client 65.111.22.216:42829] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tiffanyshouses.com"] [uri "/.svn/wc.db"] [unique_id "aSbzoHJFKtP21NnuVM-kdAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.167.168.208

🇷🇺 185.147.27.103

🇵🇱 83.168.110.23

🇷🇺 80.73.203.185

🇨🇳 175.10.38.108

🇬🇧 167.71.130.14

🇨🇦 147.182.154.58

🇳🇱 134.209.82.217

🇧🇪 130.211.88.11

🇨🇳 123.163.114.9

🇭🇰 123.58.209.123

🇨🇳 116.181.16.234

🇺🇸 91.193.232.174

🇨🇦 85.217.149.34

🇧🇬 79.124.56.250

🇩🇪 69.5.169.207

🇩🇪 46.101.216.224

🇻🇳 14.241.244.18

🇻🇳 14.225.206.171

🇬🇧 193.163.125.71