AbuseIPDB » 65.111.24.105
65.111.24.105
This IP was reported 10 times. Confidence of
Abuse
is 4% : ?
ISP
3xK Tech GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS200373
Domain Name
3xktech.cloud
Country
🇩🇪
Germany
City
Berlin, State of Berlin
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 65.111.24.105 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
65.111.24.105 was first reported on
July 3rd 2024 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
Sklurk
2026-07-09 00:59:43
(1 day ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-07-08 00:45:09
(2 days ago)
Web App Attack
Web App Attack
🇩🇪
Lino Project
2026-05-04 18:40:03
(2 months ago)
65.111.24.105 - - [04/May/2026:20:40:01 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https ...
show more
65.111.24.105 - - [04/May/2026:20:40:01 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-21 02:59:44
(7 months ago)
Forum/form spam
Web Spam
🇫🇮
as211431.net
2025-10-16 04:46:54
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2025-10-14 19:29:53
(8 months ago)
attempts to hack passwords
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-01-14 09:59:12
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 65.111.24.105 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 65.111.24.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 14 04:59:05.798085 2025] [security2:error] [pid 3048673:tid 3048673] [client 65.111.24.105:6153] [client 65.111.24.105] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||polarisbenefits.us|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "polarisbenefits.us"] [uri "/wp-json/wp/v2/users"] [unique_id "Z4Y1aYcZJ1ia3VY8HtIzdQAAAAI"], referer: https://polarisbenefits.us
show less
Brute-Force
Bad Web Bot
Web App Attack
2024-07-18 00:05:25
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-07-13 03:45:35
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2024-07-03 00:02:43
(2 years ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: