JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.23.85

65.111.23.85 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.23.85

Whois 65.111.23.85

IP Abuse Reports for 65.111.23.85:

This IP address has been reported a total of 12 times from 9 distinct sources. 65.111.23.85 was first reported on July 9th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇫🇷 LRob.fr	2026-01-12 13:15:05 (4 months ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 COMPLEX	2025-12-14 23:07:46 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
Anonymous	2025-11-07 08:46:44 (6 months ago)	[redacted] 65.111.23.85 - - [07/Nov/2025:09:46:30 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mo ... show more [redacted] 65.111.23.85 - - [07/Nov/2025:09:46:30 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0" [redacted] 65.111.23.85 - - [07/Nov/2025:09:46:32 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-J500M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.80 Mobile Safari/537.36" [redacted] 65.111.23.85 - - [07/Nov/2025:09:46:33 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko" [redacted] 65.111.23.85 - - [07/Nov/2025:09:46:34 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:61.0) Gecko/20100101 Firefox/61.0" [redacted] 65.111.23.85 - - [07/Nov/2025:09:46:36 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/604.1.34 (KHTML, like Gecko) GSA/56.0.208290612 Mobile/15G ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2025-10-29 13:00:25 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 65.111.23.85 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 65.111.23.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 29 09:00:17.840618 2025] [security2:error] [pid 9494:tid 9494] [client 65.111.23.85:20849] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|heavymetalnutrition.blog\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "heavymetalnutrition.blog"] [uri "/wp-json/wp/v2/users"] [unique_id "aQIP4QUp5F3QnRCmgyulYwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-10-16 19:35:53 (7 months ago)	Form spam	Web Spam
🇺🇸 oncord	2025-10-15 03:37:39 (7 months ago)	Form spam	Web Spam
Anonymous	2025-01-23 18:12:24 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.23 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.23 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-01-14 10:17:12 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.14 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.14 is noted in report timestamp show less	Hacking Brute-Force
🇹🇷 rtbh.com.tr	2024-12-10 20:52:49 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2024-07-10 00:04:48 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-09 00:01:41 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇪 128.251.36.118

🇰🇷 121.165.84.80

🇮🇳 103.133.196.146

🇫🇷 91.231.89.106

🇨🇦 85.217.149.6

🇱🇹 45.227.254.170

🇳🇱 45.140.222.119

🇮🇩 36.93.154.207

🇺🇸 34.138.135.178

🇳🇱 5.61.209.33

🇧🇪 198.235.24.245

🇺🇸 194.5.52.5

🇮🇳 182.95.228.22

🇵🇹 161.230.217.176

🇸🇰 88.212.19.153

🇦🇲 176.32.193.16

🇳🇱 172.211.56.214

🇺🇸 104.152.52.208

🇱🇹 81.30.98.158

🇺🇸 64.62.197.82