JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.24.48

65.111.24.48 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.24.48

Whois 65.111.24.48

IP Abuse Reports for 65.111.24.48:

This IP address has been reported a total of 42 times from 17 distinct sources. 65.111.24.48 was first reported on July 9th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-07-19 04:40:08 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 04:54:13 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-09 00:52:26 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-07 23:59:27 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 04:46:34 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-16 02:27:51 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-02-15 07:06:01 (6 months ago)	Scanning/Probing (25)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:58:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:58:30.276540 2026] [security2:error] [pid 24923:tid 24923] [client 65.111.24.48:50557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "omnitractors.com"] [uri "/admin/.git/config"] [unique_id "aZFghiufubTCCNKyf5_g5AAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:20:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:20:36.556689 2026] [security2:error] [pid 184120:tid 184167] [client 65.111.24.48:50195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "officialseniorworldgolfranking.com"] [uri "/.env"] [unique_id "aZFXpEzIfPaCyFBPJIlLgQAAAYo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-15 05:17:59 (6 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:01:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:01:52.192792 2026] [security2:error] [pid 29563:tid 29563] [client 65.111.24.48:16545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarawagnergrants.com"] [uri "/backup/.git/config"] [unique_id "aZFTQPXnRxVLUT7_GXrkgAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:26:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:26:43.152388 2026] [security2:error] [pid 13271:tid 13271] [client 65.111.24.48:53637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "numbulary.com"] [uri "/.env.staging"] [unique_id "aZFLA0hS-lPpifpFctMWEgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 04:10:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:10:28.286097 2026] [security2:error] [pid 2462038:tid 2462038] [client 65.111.24.48:14305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlinemultimedia.net"] [uri "/test/.git/config"] [unique_id "aZFHNIgQXgvqbY_Ctc3cCwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:42:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:41:58.363250 2026] [security2:error] [pid 805828:tid 805828] [client 65.111.24.48:44665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nordicbuilders.net"] [uri "/.git/config"] [unique_id "aZFAhhCOyvuMTHAcEBMZ3wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:13:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:13:51.352368 2026] [security2:error] [pid 23661:tid 23661] [client 65.111.24.48:60345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nlc-calumet.org"] [uri "/.env"] [unique_id "aZE57ykhS9hQLzkCShbBdAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.217.36.88

🇳🇱 77.91.71.12

🇨🇳 223.221.38.226

🇱🇹 213.176.26.133

🇧🇷 205.210.31.221

🇸🇪 158.174.210.161

🇺🇸 147.185.132.187

🇬🇧 81.19.219.235

🇸🇬 34.124.225.147

🇩🇪 31.70.85.152

🇳🇱 195.178.110.218

🇩🇪 194.124.158.16

🇮🇩 163.7.1.218

🇮🇹 151.82.55.125

🇨🇳 114.246.241.87

🇳🇱 45.148.10.166

🇬🇧 45.133.173.83

🇬🇧 35.203.210.21

🇺🇸 20.12.41.6

🇳🇱 193.176.31.247