JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.22.72

65.111.22.72 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.22.72

Whois 65.111.22.72

IP Abuse Reports for 65.111.22.72:

This IP address has been reported a total of 40 times from 18 distinct sources. 65.111.22.72 was first reported on July 10th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-02-19 22:05:14 (3 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-02-19 04:06:01 (3 months ago)	(mod_security) mod_security (id:949110) triggered by 65.111.22.72 (GB/United Kingdom/-): N in the la ... show more (mod_security) mod_security (id:949110) triggered by 65.111.22.72 (GB/United Kingdom/-): N in the last X secs show less	Web App Attack
🇩🇪 Mario Silber	2026-02-19 03:49:45 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 65.111.22.72 (GB/United Kingdom/-)	SQL Injection
🇺🇸 TPI-Abuse	2026-02-19 03:14:05 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:14:00.299675 2026] [security2:error] [pid 16642:tid 16660] [client 65.111.22.72:11099] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/backup/.git/config"] [unique_id "aZZ_-HacsSfoPZBQxAMIJgAAAE0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 02:10:52 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:10:46.172157 2026] [security2:error] [pid 2746139:tid 2746139] [client 65.111.22.72:17499] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathiekate.com"] [uri "/api/.env"] [unique_id "aZZxJmK0YUCdH2uo_RVHUwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 BlueWire Hosting	2026-02-19 01:55:37 (3 months ago)	Probing websites for vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:19:39 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:19:32.020219 2026] [security2:error] [pid 15233:tid 15233] [client 65.111.22.72:27701] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vmmailing.com"] [uri "/backup/.git/config"] [unique_id "aZZXFCXjDIAy2tq_1UOmnAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-18 21:05:24 (3 months ago)	Too many Status 40X (12) Scanning/Probing (14)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 20:05:31 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:05:23.955746 2026] [security2:error] [pid 28342:tid 28342] [client 65.111.22.72:40631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tractiondrive.com"] [uri "/app/.git/config"] [unique_id "aZYbgwLC_ddwbI8ZfIjhNAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:46:57 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:46:49.424318 2026] [security2:error] [pid 28077:tid 28077] [client 65.111.22.72:32319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thommesen.net"] [uri "/backend/.env"] [unique_id "aZYJGXcKzDtE_9GgkQ6a1gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:20:51 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:20:47.669747 2026] [security2:error] [pid 8923:tid 8923] [client 65.111.22.72:25667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weavergroup.us"] [uri "/api/.env"] [unique_id "aZWun1wq-bFm4vcdIw_JnwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 12:00:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.22.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 07:00:52.848775 2026] [security2:error] [pid 19259:tid 19259] [client 65.111.22.72:26145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wastetrack.io"] [uri "/config/.env"] [unique_id "aZWp9MAEWseOAkFS_1jDFQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-02-18 11:47:32 (3 months ago)	Try to access /admin/.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-10 23:00:11 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-10	Hacking Web App Attack SSH
🇺🇸 ambor	2026-02-10 05:25:02 (3 months ago)	Honeypot triggered: /backup/.git/config on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; ... show more Honeypot triggered: /backup/.git/config on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. Method: GET show less	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇾 200.58.134.172

🇨🇳 180.76.119.95

🇯🇵 172.253.235.27

🇺🇸 162.216.149.233

🇺🇸 138.197.200.106

🇨🇳 119.29.252.115

🇳🇱 91.92.42.170

🇺🇸 71.6.134.233

🇺🇸 68.193.167.32

🇨🇳 43.138.11.248

🇺🇸 43.135.141.116

🇸🇳 41.82.50.218

🇺🇸 35.252.102.15

🇳🇱 34.178.7.245

🇧🇪 2600:1900:0:4301::501

🇩🇪 217.154.173.63

🇩🇪 196.242.141.22

🇩🇪 193.124.20.232

🇵🇱 87.251.64.145

🇺🇸 74.125.80.89