JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.23.68

65.111.23.68 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 37%: ?

37%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.23.68

Whois 65.111.23.68

IP Abuse Reports for 65.111.23.68:

This IP address has been reported a total of 38 times from 19 distinct sources. 65.111.23.68 was first reported on July 9th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-15 02:33:38 (3 days ago)	[15/Sep/2026:05:33:37 +0300] -- 65.111.23.68 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /s ... show more [15/Sep/2026:05:33:37 +0300] -- 65.111.23.68 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /sitemap.xml.gz HTTP/1.1 show less	Bad Web Bot Web App Attack
🇩🇪 raph	2026-09-13 17:42:22 (4 days ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇬🇧 spamverify.com	2026-08-24 01:34:45 (3 weeks ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-22 17:48:43 (3 weeks ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇬🇷 setupgr	2026-08-17 07:45:36 (1 month ago)	(wplogin_block) Blocked WP-Login Access Attempt 65.111.23.68 (GB/United Kingdom/England/London/-/[AS ... show more (wplogin_block) Blocked WP-Login Access Attempt 65.111.23.68 (GB/United Kingdom/England/London/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 65.111.23.68 - - [17/Aug/2026:10:44:23 +0300] "POST /wp-login.php HTTP/1.1" 301 286 "https://mail.doityourself.gr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" show less	Port Scan
🇮🇹 CoreTech srl	2026-08-16 15:48:56 (1 month ago)	cloudlinux2 fail2ban: 2026-08-16 17:45:18,069 fail2ban.filter [1791]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-16 17:45:18,069 fail2ban.filter [1791]: INFO [plesk-modsecurity] Found 182.8.161.15 - 2026-08-16 17:45:18cloudlinux2 fail2ban: 2026-08-16 17:47:12,996 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 65.111.23.68 - 2026-08-16 17:47:12cloudlinux2 fail2ban: 2026-08-16 17:47:15,029 fail2ban.filter [1791]: INFO [plesk-modsecurity] Found 182.8.161.15 - 2026-08-16 17:47:14cloudlinux2 fail2ban: 2026-08-16 17:47:16,547 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 65.111.23.78 - 2026-08-16 17:47:16cloudlinux2 fail2ban: 2026-08-16 17:47:17,722 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 45.3.42.39 - 2026-08-16 17:47:17cloudlinux2 fail2ban: 2026-08-16 17:47:14,114 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 65.111.22.97 - 2026-08-16 17:47:13cloudlinux2 fail2ban: 2026-08-16 17:47:15,293 fail2ban.filter [1791]: INFO [plesk-wordpress] Found 65.111.22.33 - 2026-08-16 17:47:15cloudlinux2 fa show less	Web App Attack
🇫🇷 ELYAZ	2026-08-15 22:38:30 (1 month ago)	(wordpress) Failed wordpress login from 65.111.23.68 (GB/United Kingdom/-): (CF_ENABLE)	Brute-Force
🇫🇷 ✨	2026-08-14 23:43:16 (1 month ago)	Rule : WORDPRESS BOT [2026-08-14 23:41:08] Unauthorized login attempt to shaanminhas.org wordpress f ... show more Rule : WORDPRESS BOT [2026-08-14 23:41:08] Unauthorized login attempt to shaanminhas.org wordpress from IP 65.111.23.68 with username root show less	Port Scan
🇮🇹 VHosting	2026-08-04 01:05:02 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇦🇹 neo72	2026-08-03 17:36:26 (1 month ago)	Detected malicious activity - bulk block	Brute-Force Web App Attack
🇺🇸 mnsf	2026-02-15 23:06:19 (7 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇧🇾 lns.bz	2026-02-15 12:21:22 (7 months ago)	.env scanning [BY]	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:06:24 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.68 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:06:18.107400 2026] [security2:error] [pid 404:tid 404] [client 65.111.23.68:45405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tijuanabible.org"] [uri "/config/.env"] [unique_id "aZG2ulz_oorLiG1WvuDxrgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:16:18 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.68 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:16:14.255358 2026] [security2:error] [pid 4551:tid 4551] [client 65.111.23.68:37869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "systemcapacityoptimization.com"] [uri "/backup/.git/config"] [unique_id "aZFkrqo8UVjH9KdDl2x8xgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:48:19 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.23.68 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.23.68 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:48:16.128991 2026] [security2:error] [pid 916249:tid 916249] [client 65.111.23.68:23375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sweak.com"] [uri "/v2/.git/config"] [unique_id "aZFeIONmzA4xmlH9ZaFp_AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.6.252.10

🇵🇾 190.113.94.150

🇭🇰 123.58.220.54

🇨🇳 113.218.158.90

🇮🇳 106.51.22.217

🇪🇸 88.26.104.155

🇰🇷 59.14.170.169

🇵🇪 190.119.63.81

🇫🇷 185.177.72.45

🇺🇸 158.94.187.132

🇺🇸 147.185.132.118

🇫🇷 146.70.253.254

🇨🇳 114.223.55.198

🇧🇩 103.77.16.143

🇺🇸 64.62.197.176

🇱🇹 62.60.130.242

🇫🇷 54.38.234.224

🇩🇪 54.38.153.181

🇬🇧 51.195.130.70

🇮🇩 36.92.246.14