JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.22.66

65.111.22.66 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.22.66

Whois 65.111.22.66

IP Abuse Reports for 65.111.22.66:

This IP address has been reported a total of 20 times from 11 distinct sources. 65.111.22.66 was first reported on July 11th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇪🇸 10dencehispahard SL	2026-01-26 12:12:15 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 hchristo	2026-01-04 10:47:51 (5 months ago)	[Sun Jan 04 11:47:49.759764 2026] [proxy_fcgi:error] [pid 34491:tid 34741] [client 65.111.22.66:3114 ... show more [Sun Jan 04 11:47:49.759764 2026] [proxy_fcgi:error] [pid 34491:tid 34741] [client 65.111.22.66:31147] AH01071: Got error 'Primary script unknown' [Sun Jan 04 11:47:49.978194 2026] [proxy_fcgi:error] [pid 34491:tid 34782] [client 65.111.22.66:12747] AH01071: Got error 'Primary script unknown' [Sun Jan 04 11:47:50.238428 2026] [proxy_fcgi:error] [pid 34491:tid 34667] [client 65.111.22.66:31847] AH01071: Got error 'Primary script unknown' [Sun Jan 04 11:47:50.465098 2026] [proxy_fcgi:error] [pid 34491:tid 34691] [client 65.111.22.66:12997] AH01071: Got error 'Primary script unknown' [Sun Jan 04 11:47:50.713980 2026] [proxy_fcgi:error] [pid 34491:tid 34721] [client 65.111.22.66:53491] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:12:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:11:32.545413 2025] [security2:error] [pid 30919:tid 30919] [client 65.111.22.66:55831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.getlawforms.com"] [uri "/.svn/wc.db"] [unique_id "aSQTNIKumsaKwgY5w3C_cAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:49:37 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:48:47.448902 2025] [security2:error] [pid 13942:tid 14037] [client 65.111.22.66:40673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.conservativedemocrat.com"] [uri "/.env"] [unique_id "aSQN3w9TCbHXOd9uq_fLmgAAAdM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:42:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:42:40.841156 2025] [security2:error] [pid 9060:tid 9060] [client 65.111.22.66:56559] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.harrygant.com"] [uri "/.git/HEAD"] [unique_id "aSP-YJQYoZJzkbx5RSWxkAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:14:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:14:42.634039 2025] [security2:error] [pid 10695:tid 10809] [client 65.111.22.66:60885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.cynthiawilson.net"] [uri "/.git/HEAD"] [unique_id "aSPpwiFZz-lT68YT4kO_8AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:49:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:49:08.413516 2025] [security2:error] [pid 13189:tid 13189] [client 65.111.22.66:27927] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.h-mod.com"] [uri "/.env"] [unique_id "aSPjxB63lDVqGhYAoGgfygAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2025-11-14 11:33:56 (6 months ago)	Web App Attack	Web App Attack
🇺🇸 nowyouknow	2025-11-12 17:51:02 (6 months ago)	(From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models wit ... show more (From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models with All Versions + All Upcoming Future Versions… Without Spending A Penny … https://bravo-333.site/MultiverseAI to UNSUBSCRIBE: https://bravo-333.site/unsubscribe?domain=bompchiro.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
Anonymous	2025-10-27 07:33:52 (7 months ago)	2025-10-27T08:33:50.169312 localhost.localdomain sshd[1031837]: pam_unix(sshd:auth): authentication ... show more 2025-10-27T08:33:50.169312 localhost.localdomain sshd[1031837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.22.66 2025-10-27T08:33:51.862466 localhost.localdomain sshd[1031837]: Failed password for invalid user [email protected] from 65.111.22.66 port 33123 ssh2 ... show less	Brute-Force SSH
🇵🇱 mscode.pl	2025-10-14 21:11:38 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 show less	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-10-07 17:13:55 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-01-14 14:29:03 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 65.111.22.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 09:28:59.142587 2025] [security2:error] [pid 25979:tid 25979] [client 65.111.22.66:17961] [client 65.111.22.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|williambarfoot.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "williambarfoot.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z4Z0qyycSBkWU7JCTgDpMQAAAAE"], referer: https://williambarfoot.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-14 10:17:59 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.14 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 129.227.75.98

🇺🇸 20.80.83.148

🇻🇳 14.232.222.111

🇧🇴 181.188.176.242

🇳🇱 176.65.139.233

🇪🇬 156.196.174.21

🇺🇸 138.68.228.4

🇷🇴 92.118.39.236

🇩🇪 78.47.214.40

🇸🇦 46.152.120.209

🇸🇪 46.59.97.98

🇺🇸 18.144.7.106

🇺🇸 5.78.205.169

🇷🇺 213.180.203.2

🇩🇪 193.124.20.243

🇳🇱 176.65.139.231

🇩🇪 139.59.208.49

🇮🇳 103.214.232.198

🇺🇸 66.132.186.209

🇯🇵 52.194.236.59