JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.24.136

65.111.24.136 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 46%: ?

46%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.24.136

Whois 65.111.24.136

IP Abuse Reports for 65.111.24.136:

This IP address has been reported a total of 37 times from 18 distinct sources. 65.111.24.136 was first reported on July 3rd 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-19 04:08:01 (5 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 tecnicorioja	2026-07-15 22:00:43 (1 week ago)	POST /xmlrpc.php [15/Jul/2026:19:45:02	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-07-14 20:10:39 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇲🇽 octageeks.com	2026-07-14 04:09:10 (1 week ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 conseilgouz	2026-07-13 13:08:35 (1 week ago)	coe-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
Anonymous	2026-07-11 20:19:10 (1 week ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 lostswordfish.com	2026-07-11 06:30:06 (1 week ago)	Wordfence waf block on tranquilfrogs	Web App Attack
Anonymous	2026-07-09 20:34:25 (2 weeks ago)	[ns31.kdns.gr] httpd-login-spray-site: sites=www.myrofores.gr; logs=/var/log/httpd/domains/myrofores ... show more [ns31.kdns.gr] httpd-login-spray-site: sites=www.myrofores.gr; logs=/var/log/httpd/domains/myrofores.gr.log; samples=site_wide=true \| distinct_ips=16 \| /wp-login.php show less	Hacking Web App Attack
🇲🇹 Malta	2026-07-08 20:20:06 (2 weeks ago)	65.111.24.136 - - [08/Jul/2026:22:20:06 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 65.111.24.136 - - [08/Jul/2026:22:20:06 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:119.0) Gecko/20100101 Firefox/119.0" show less	Hacking Web App Attack VPN IP
🇧🇪 Saec	2026-06-12 02:15:04 (1 month ago)	Jarvis auto-ban: CF honeypot path /xmlrpc.php (3× on saec.me)	Port Scan Web App Attack
🇫🇮 inlink.ltd	2026-05-15 06:26:54 (2 months ago)	Known malicious PHP file or CMS probe	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:44:37 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:44:27.944004 2026] [security2:error] [pid 8177:tid 8177] [client 65.111.24.136:33093] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibiocat.com"] [uri "/config/.env"] [unique_id "aYqpm2rg3pr84uVC8V2ldwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 01:39:15 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:39:06.250659 2026] [security2:error] [pid 18084:tid 18084] [client 65.111.24.136:23785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "macryder.com"] [uri "/wp/.git/config"] [unique_id "aYqMOvOy1fJSQMCrmDAUwQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:56:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:56:25.538555 2026] [security2:error] [pid 1570:tid 1602] [client 65.111.24.136:19279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howiek.com"] [uri "/api/.git/config"] [unique_id "aYpmGXeVpx3S5SN-NSqeTQAAANU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 21:45:14 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:45:09.493986 2026] [security2:error] [pid 31657:tid 31657] [client 65.111.24.136:13181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotdamnsam.com"] [uri "/admin/.env"] [unique_id "aYpVZb2So4GI3YUhRCJd4AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.245.225

🇮🇷 193.141.65.199

🇲🇽 187.171.142.136

🇧🇷 177.156.19.156

🇩🇪 172.71.164.46

🇺🇸 162.216.150.5

🇳🇵 160.250.255.131

🇩🇿 154.242.169.183

🇨🇳 121.29.84.217

🇫🇮 74.125.74.149

🇭🇰 46.247.61.47

🇧🇷 45.174.238.104

🇳🇱 45.156.87.204

🇳🇱 45.148.10.157

🇺🇸 38.60.162.238

🇺🇸 2604:a940:300:5b6:0:23::

🇺🇸 216.25.89.145

🇪🇸 188.114.111.31

🇪🇸 188.114.111.30

🇩🇪 172.71.164.36