JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.24.149

65.111.24.149 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.24.149

Whois 65.111.24.149

IP Abuse Reports for 65.111.24.149:

This IP address has been reported a total of 24 times from 15 distinct sources. 65.111.24.149 was first reported on June 28th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2026-04-02 18:35:26 (2 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /genshin-stella-mod \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 oralunal	2025-12-30 23:38:01 (5 months ago)	IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...	Bad Web Bot Web App Attack
🇺🇸 COMPLEX	2025-12-14 23:07:46 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protoc ... show more Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 200373 (DREI-K-TECH-GMBH) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇫🇮 Shaik Sai Meera	2025-11-27 22:25:10 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:32:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:31:52.329696 2025] [security2:error] [pid 19140:tid 19140] [client 65.111.24.149:21809] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.scr-publications.com"] [uri "/.svn/wc.db"] [unique_id "aSQmCJABxCBfTpuILQuLwgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:53:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:53:32.250999 2025] [security2:error] [pid 3757:tid 3757] [client 65.111.24.149:19405] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "akronpartybuses.com"] [uri "/.svn/wc.db"] [unique_id "aSPy3Ml7swi-UmxALHDZsAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:25:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:24:38.236092 2025] [security2:error] [pid 14321:tid 14321] [client 65.111.24.149:19905] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kellenbarger.com"] [uri "/.git/HEAD"] [unique_id "aSPP9ulGHkQar3nCfhewIwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 18:26:46 (6 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/13 12:23:53	Port Scan Brute-Force Exploited Host Web App Attack
🇺🇸 nowyouknow	2025-11-11 17:50:00 (6 months ago)	(From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models ... show more (From [email protected]) With Just 3 Clicks, You Will Be Able To Unlock All TOP AI Models with All Versions + All Upcoming Future Versions… Without Spending A Penny … https://bravo-333.site/MultiverseAI to UNSUBSCRIBE: https://bravo-333.site/unsubscribe?domain=greenrunchiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
Anonymous	2025-11-02 15:56:24 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:00:34	Port Scan Brute-Force Exploited Host Web App Attack
🇦🇺 oncord	2025-10-26 12:52:23 (7 months ago)	Form spam	Web Spam
Anonymous	2025-10-06 17:23:13 (8 months ago)	(sshd) Failed SSH login from 65.111.24.149 (DE/Germany/-)	Brute-Force SSH
🇨🇭 backslash	2025-03-15 00:10:07 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇿 lp	2024-12-20 19:21:27 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.24.149 2024-12-20T20:02:12+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 65.111.24.149 2024-12-20T20:02:12+01:00 vpn Access-Reject 'tros01' station: 65.111.24.149 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 185.242.3.113

🇨🇳 175.6.109.238

🇨🇳 113.249.101.168

🇸🇬 103.250.11.156

🇧🇪 34.34.159.36

🇺🇸 3.92.128.140

🇧🇷 205.210.31.219

🇨🇳 182.44.4.202

🇺🇸 71.12.42.216

🇩🇪 64.89.163.173

🇺🇸 64.62.156.84

🇩🇪 62.54.176.203

🇨🇳 14.103.64.177

🇷🇴 2.57.121.112

🇨🇦 178.93.200.142

🇺🇸 147.185.132.69

🇨🇳 124.235.130.141

🇺🇸 104.168.37.52

🇯🇪 87.244.93.27

🇫🇷 62.171.133.156