JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.25.147

65.111.25.147 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.25.147

Whois 65.111.25.147

IP Abuse Reports for 65.111.25.147:

This IP address has been reported a total of 33 times from 17 distinct sources. 65.111.25.147 was first reported on June 28th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-07-15 10:47:39 (14 hours ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 MatStef132	2026-07-10 09:08:27 (5 days ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 Sklurk	2026-07-08 01:32:54 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 MatStef132	2026-07-01 22:35:07 (2 weeks ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇫🇷 Sklurk	2026-06-20 02:18:12 (3 weeks ago)	Web App Attack	Web App Attack
🇨🇦 leithzz	2026-05-30 19:07:28 (1 month ago)	Report by Cloudflare.Time: 2026-05-30T19:06:52Z	DDoS Attack
🇫🇷 MatStef132	2026-05-19 21:11:03 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:21:31 (1 month ago)	MatShield L7: blocked on chat.justchat.icu (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-14 21:32:38 (2 months ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇪🇸 el-brujo	2026-04-28 15:44:20 (2 months ago)	Cloudflare WAF: Request Path: /123456 Request Query: ?utm_medium=uKt0qeDB Host: elhacker.net userAge ... show more Cloudflare WAF: Request Path: /123456 Request Query: ?utm_medium=uKt0qeDB Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.129 Safari/537.36 Action: block Source: ratelimit ASN Description: 3xK Tech GmbH Country: DE Method: GET Timestamp: 2026-04-28T15:44:20Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
Anonymous	2026-01-05 20:13:58 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-28 00:59:53 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.147 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 19:59:48.250203 2025] [security2:error] [pid 16069:tid 16069] [client 65.111.25.147:56537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circle-h-growers.com"] [uri "/.svn/wc.db"] [unique_id "aVCBBAtZFqZvBRYPqd2lOAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 20:19:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.147 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 15:19:37.514503 2025] [security2:error] [pid 21075:tid 21075] [client 65.111.25.147:11247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customhumanrobots.com"] [uri "/.svn/wc.db"] [unique_id "aVA_WXV4Z9JdJR0jPpYaIQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-12-27 19:03:51 (6 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 18:17:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.147 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.147 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:17:21.244156 2025] [security2:error] [pid 31701:tid 31701] [client 65.111.25.147:56477] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rooksfamily.com"] [uri "/.env"] [unique_id "aVAiscziqx0h9-DnUS8HNAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.17.133.138

🇭🇰 199.45.154.190

🇧🇪 198.235.24.181

🇨🇳 183.201.208.25

🇫🇷 85.217.140.47

🇲🇾 47.254.240.14

🇧🇷 45.205.1.242

🇿🇦 41.25.43.88

🇨🇳 218.90.118.123

🇺🇸 205.210.31.44

🇧🇪 198.235.24.221

🇺🇸 195.184.76.173

🇺🇸 192.190.221.37

🇺🇸 172.202.117.125

🇺🇸 162.216.150.4

🇺🇸 147.185.132.188

🇺🇸 128.203.204.32

🇻🇳 103.200.23.154

🇻🇳 103.82.22.113

🇺🇸 91.230.168.29