JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.23.180

65.111.23.180 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.23.180

Whois 65.111.23.180

IP Abuse Reports for 65.111.23.180:

This IP address has been reported a total of 33 times from 14 distinct sources. 65.111.23.180 was first reported on June 28th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 01:28:48 (1 day ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-08 20:12:24 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:55:12 (2 days ago)	Web App Attack	Web App Attack
🇳🇴 jad-abuse	2026-07-07 04:46:15 (3 days ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: wp_login. Observed by 1 sensor(s); 1 hits. show less	Brute-Force Web App Attack
Anonymous	2026-04-03 14:49:07 (3 months ago)	VELIEDE WEBFORM SPAM 65.111.23.180 (65.111.23.180)	Web Spam
🇳🇱 homeshowdomain.nl	2026-02-15 22:59:29 (4 months ago)	Auto-ban: >3000 req/min op 2026-02-15	Hacking Web App Attack SSH
Anonymous	2026-02-15 13:05:52 (4 months ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:01:05 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:00:57.403780 2026] [security2:error] [pid 5228:tid 5228] [client 65.111.23.180:17547] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamfilyataban.com"] [uri "/.env.staging"] [unique_id "aZG1eQPBlkX3GOvNEEFo5gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:35:53 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:35:48.932088 2026] [security2:error] [pid 31948:tid 31948] [client 65.111.23.180:31063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pa-ksa.com"] [uri "/admin/.env"] [unique_id "aZGvlMD6DBZiyLtTouM_hAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-02-15 11:15:29 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:08:12 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:08:06.749352 2026] [security2:error] [pid 17293:tid 17293] [client 65.111.23.180:54989] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sekel.org"] [uri "/.env.local"] [unique_id "aZGpFswyYXOyZDUCUvyDaAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:58:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:58:11.593176 2026] [security2:error] [pid 6811:tid 6811] [client 65.111.23.180:38979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seapens.org"] [uri "/.git/config"] [unique_id "aZFugyi_DrnMAnjoa0P9oQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.yc3a.com	2026-02-15 06:42:24 (4 months ago)	65.111.23.180 - - [15/Feb/2026:06:42:23 +0000] "GET /api/.git/config HTTP/1.1" 404 146 "-" "Mozilla/ ... show more 65.111.23.180 - - [15/Feb/2026:06:42:23 +0000] "GET /api/.git/config HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:38:19 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:38:11.924549 2026] [security2:error] [pid 26841:tid 26841] [client 65.111.23.180:54623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "operationsresearch-management.science"] [uri "/frontend/.env"] [unique_id "aZFp00xZQQPuODJqKvswMgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:08:05 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:08:00.974883 2026] [security2:error] [pid 31725:tid 31725] [client 65.111.23.180:35155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noviasaltovacio.com"] [uri "/wp/.git/config"] [unique_id "aZFGoOnKq91XXY_YtoB1aAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.223

🇳🇱 185.242.226.90

🇨🇳 180.138.194.82

🇨🇳 111.26.95.254

🇧🇼 168.167.72.132

🇩🇪 167.94.146.59

🇫🇮 147.185.133.188

🇨🇳 118.183.111.136

🇺🇸 104.238.36.1

🇸🇮 102.220.160.29

🇫🇷 91.196.152.121

🇮🇪 86.41.191.243

🇺🇸 66.132.172.148

🇨🇳 36.129.135.67

🇬🇧 35.203.211.25

🇺🇸 34.24.155.100

🇺🇸 2a04:4e40:4440:0:190:ae67:907f:755c

🇮🇳 2400:8904::2000:d9ff:fec5:4ec0

🇨🇳 183.200.96.181

🇻🇳 103.200.25.79