JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.23.141

65.111.23.141 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.23.141

Whois 65.111.23.141

IP Abuse Reports for 65.111.23.141:

This IP address has been reported a total of 20 times from 16 distinct sources. 65.111.23.141 was first reported on July 13th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-07-04 01:57:41 (1 hour ago)	Wordpress login attempts	Brute-Force
🇩🇪 F242	2026-06-30 05:03:24 (3 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇫🇷 ELYAZ	2026-06-26 02:41:55 (1 week ago)	(y4) Failed scan -byebye- from 65.111.23.141 (GB/United Kingdom/-): (CF_ENABLE)	Hacking
🇺🇸 mnsf	2026-06-09 00:19:12 (3 weeks ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇨🇭 backslash	2026-06-03 07:42:00 (1 month ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 raymarron.com	2026-05-30 18:58:37 (1 month ago)	http://raymarron.com:80/sito/wp-includes/wlwmanifest.xml http://raymarron.com:80/cms/wp-includes/wl ... show more http://raymarron.com:80/sito/wp-includes/wlwmanifest.xml http://raymarron.com:80/cms/wp-includes/wlwmanifest.xml http://raymarron.com:80/wp2/wp-includes/wlwmanifest.xml http://raymarron.com:80/test/wp-includes/wlwmanifest.xml http://raymarron.com:80/news/wp-includes/wlwmanifest.xml http://raymarron.com:80/website/wp-includes/wlwmanifest.xml http://raymarron.com:80/wordpress/wp-includes/wlwmanifest.xml http://raymarron.com:80/web/wp-includes/wlwmanifest.xml http://raymarron.com:80/blog/wp-includes/wlwmanifest.xml http://raymarron.com:80/xmlrpc.php?rsd http://raymarron.com:80/wp-includes/wlwmanifest.xml show less	Web App Attack
🇮🇹 VHosting	2026-02-20 14:00:09 (4 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 12:12:27 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-03 13:44:17 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.03 is noted in report timestamp show less	Hacking Brute-Force
🇦🇺 MAGIC	2025-12-19 00:06:04 (6 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (6 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
Anonymous	2025-11-24 09:45:02 (7 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:38:04 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:37:52.506710 2025] [security2:error] [pid 14776:tid 14776] [client 65.111.23.141:25575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.joyfulservice.com"] [uri "/.git/HEAD"] [unique_id "aSQncO0_lN6FIxcBPVirFwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:18:42 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:18:27.821404 2025] [security2:error] [pid 25508:tid 25508] [client 65.111.23.141:57189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.fedeoliva.cl"] [uri "/.git/HEAD"] [unique_id "aSQGw4K0aXHedM_L8FJs6wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:48:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:48:06.777187 2025] [security2:error] [pid 23317:tid 23317] [client 65.111.23.141:28095] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.balirealestateadvertiser.com"] [uri "/.svn/wc.db"] [unique_id "aSP_ppaHZ2-SwgGZwGBusQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.6.224.50

🇰🇿 217.196.22.78

🇬🇧 217.154.38.181

🇧🇷 177.221.76.181

🇺🇸 167.99.54.222

🇺🇸 157.230.150.187

🇹🇭 122.154.74.205

🇫🇷 89.117.57.170

🇬🇧 81.19.219.202

🇯🇵 60.154.189.234

🇺🇸 50.90.21.235

🇷🇺 46.8.246.27

🇬🇧 37.10.113.220

🇬🇧 31.14.254.31

🇺🇸 20.15.201.64

🇺🇿 213.230.111.14

🇩🇪 213.209.159.175

🇷🇺 212.164.179.117

🇦🇱 185.226.91.15

🇨🇳 180.76.236.71