JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.24.57

65.111.24.57 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.24.57

Whois 65.111.24.57

IP Abuse Reports for 65.111.24.57:

This IP address has been reported a total of 34 times from 21 distinct sources. 65.111.24.57 was first reported on July 10th 2024, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 paulshipley.com.au	2026-09-01 08:48:37 (21 hours ago)	2026-09-01T18:48:36.901248+10:00 ip-172-26-1-7 wordpress(stkildashule.org.au)[227896]: XML-RPC authe ... show more 2026-09-01T18:48:36.901248+10:00 ip-172-26-1-7 wordpress(stkildashule.org.au)[227896]: XML-RPC authentication attempt for unknown user XMC.PL-Master from 65.111.24.57 ... show less	Brute-Force Web App Attack
🇮🇹 VINA	2026-07-07 18:59:05 (1 month ago)	Banned by SPAMHAUS ASN-DROP list (ASN: 200373)	DDoS Attack Hacking Bad Web Bot Web App Attack
🇲🇹 Malta	2026-06-29 11:52:03 (2 months ago)	65.111.24.57 - - [29/Jun/2026:13:52:03 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 65.111.24.57 - - [29/Jun/2026:13:52:03 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Hacking Web App Attack VPN IP
🇦🇱 router.al	2026-05-01 15:33:32 (4 months ago)	05/01/2026-15:33:32.625957 65.111.24.57 Protocol: 6 GPL WEB_SERVER 403 Forbidden	Port Scan
Anonymous	2026-04-13 20:57:53 (4 months ago)	65.111.24.57 - - [13/Apr/2026:22:57:45 +0200] "GET http://:80/.env HTTP/1.1" 301 169 "-" "python-req ... show more 65.111.24.57 - - [13/Apr/2026:22:57:45 +0200] "GET http://:80/.env HTTP/1.1" 301 169 "-" "python-requests/2.32.3" show less	Bad Web Bot
🇦🇺 oncord	2026-03-01 20:03:45 (6 months ago)	Form spam	Web Spam
🇬🇧 oncord	2026-02-27 18:42:47 (6 months ago)	Form spam	Web Spam
🇳🇱 jjnxpct	2026-02-16 04:54:33 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /new/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:24:32 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:24:27.301647 2026] [security2:error] [pid 16232:tid 16232] [client 65.111.24.57:24127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owenbee.com"] [uri "/backup/.git/config"] [unique_id "aZGs60MB_J1xqg9FRDCJ6wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-02-15 11:01:45 (6 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 myagent.site	2026-02-15 04:47:33 (6 months ago)	Blocking for trying to access an exploit file: /new/.git/config	Hacking
🇺🇸 TPI-Abuse	2026-02-15 04:09:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 23:09:17.859974 2026] [security2:error] [pid 2453838:tid 2453838] [client 65.111.24.57:52935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlinemultimedia.net"] [uri "/.env"] [unique_id "aZFG7Z4gC2s0LY58XyoscQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-15 03:37:03 (6 months ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.env.local HTTP/1.1, GET /si ... show more Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET /.env.local HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /api/.git/config HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /config/.env HTTP/1.1, GET /.aws/credentials HTTP/1.1, GET /v2/.git/config HTTP/1.1, GET /.env.staging HTTP/1.1, GET /backup/.git/config HTTP/1.1, GET /new/.git/config HTTP/1.1, GET /wp/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 03:31:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.24.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.24.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 22:31:53.676396 2026] [security2:error] [pid 10659:tid 10659] [client 65.111.24.57:25233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nolaanimereviews.com"] [uri "/v2/.git/config"] [unique_id "aZE-KR2-mSvo4ka7hFv2CwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-15 03:05:36 (6 months ago)	Scanning/Probing (24)	Brute-Force Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.206.182

🇦🇷 201.182.191.49

🇺🇸 152.163.38.58

🇺🇸 146.70.84.25

🇨🇳 123.160.234.184

🇭🇰 103.73.162.33

🇭🇰 101.36.125.72

🇭🇰 101.36.124.127

🇫🇷 91.231.89.170

🇧🇬 79.124.49.90

🇺🇸 54.83.66.26

🇮🇩 36.79.217.3

🇯🇵 34.85.117.106

🇦🇷 201.180.208.130

🇦🇷 201.180.116.229

🇦🇱 185.38.195.228

🇬🇺 182.173.209.199

🇬🇾 181.41.73.238

🇧🇷 177.106.253.194

🇺🇸 162.216.149.72