JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.25.129

65.111.25.129 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.25.129

Whois 65.111.25.129

IP Abuse Reports for 65.111.25.129:

This IP address has been reported a total of 18 times from 8 distinct sources. 65.111.25.129 was first reported on July 15th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 retrokitty.net	2026-03-05 19:46:24 (3 months ago)	65.111.25.129 - - [05/Mar/2026:19:46:23 +0000] "GET /.git/HEAD HTTP/1.1" 503 22098 "http://retrokitt ... show more 65.111.25.129 - - [05/Mar/2026:19:46:23 +0000] "GET /.git/HEAD HTTP/1.1" 503 22098 "http://retrokitty.net/.git/HEAD" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-05 08:08:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:08:15.249246 2026] [security2:error] [pid 2915:tid 2932] [client 65.111.25.129:23597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/30/313b871ddb76755ddbec31df04e2c55f0f5647"] [unique_id "aak572bdh7c6FWT9QFVMEwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-01-01 14:40:29 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-12-29 05:05:57 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 23:12:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:12:03.462748 2025] [security2:error] [pid 6128:tid 6128] [client 65.111.25.129:21121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "youthriskbehavior.com"] [uri "/.git/HEAD"] [unique_id "aS9yQyw_RubNSCCoX8YX8gAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:33:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:33:45.134191 2025] [security2:error] [pid 15340:tid 15357] [client 65.111.25.129:43353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kcscomputer.com"] [uri "/.git/HEAD"] [unique_id "aS8G2WfVV3te9jwc25s2mwAAAMM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:05:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:05:41.648705 2025] [security2:error] [pid 6548:tid 6548] [client 65.111.25.129:60931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandfacets.com"] [uri "/.env"] [unique_id "aS8ARSNEdSNQ7o4y7YD0DQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 07:33:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 02:33:06.476970 2025] [security2:error] [pid 16570:tid 16570] [client 65.111.25.129:19329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "listitwithsteve.com"] [uri "/.git/HEAD"] [unique_id "aS6WMk-E1CBD3XgAaI-tJAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:39:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:39:37.083593 2025] [security2:error] [pid 1036:tid 1036] [client 65.111.25.129:24283] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rogerg.com"] [uri "/.svn/wc.db"] [unique_id "aSa8ydbYCiNwYGME9TXe-wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 07:18:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:18:35.073100 2025] [security2:error] [pid 30659:tid 30659] [client 65.111.25.129:54409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mark.rawlings.name"] [uri "/.env"] [unique_id "aSapy7vjE6zzvcuI1bxfwwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-26 06:50:34 (6 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:36:36 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:36:29.821322 2025] [security2:error] [pid 16934:tid 16981] [client 65.111.25.129:53187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.asrtrax.robertbellamy.com"] [uri "/.git/HEAD"] [unique_id "aSaf7RKESCEx-WKRVnsrqgAAAZE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:58:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:58:19.976902 2025] [security2:error] [pid 31576:tid 31576] [client 65.111.25.129:56433] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idmadventures.com"] [uri "/.env"] [unique_id "aSZeu5iVDal3BCKH1Gi-fwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-03 09:07:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 03 04:07:25.156681 2025] [security2:error] [pid 7083:tid 7083] [client 65.111.25.129:24865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.garyrankin.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aQhwzcNPC_3yMT6OQsGb4gAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-02-10 02:40:09 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.71.54.24

🇻🇳 157.66.80.97

🇫🇮 147.185.133.54

🇺🇸 147.185.132.235

🇨🇳 111.26.63.89

🇮🇹 88.147.30.59

🇫🇷 85.217.140.53

🇨🇳 47.104.241.152

🇶🇦 2600:1900:4260:40e::a7

🇰🇷 222.97.195.179

🇨🇳 120.236.196.93

🇳🇱 91.92.40.204

🇨🇳 60.205.191.58

🇧🇿 45.227.254.152

🇺🇸 44.215.231.15

🇷🇴 2.57.121.25

🇬🇧 141.170.2.52

🇭🇰 103.49.62.60

🇧🇬 79.124.62.178

🇱🇹 62.60.130.59