JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.25.34

65.111.25.34 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.25.34

Whois 65.111.25.34

IP Abuse Reports for 65.111.25.34:

This IP address has been reported a total of 28 times from 15 distinct sources. 65.111.25.34 was first reported on July 6th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-11 01:16:58 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-29 03:16:25 (1 month ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-07-03 10:02:23 (1 month ago)	(wplogin_block) Blocked WP-Login Access Attempt 65.111.25.34 (DE/Germany/State of Berlin/Berlin/-/[A ... show more (wplogin_block) Blocked WP-Login Access Attempt 65.111.25.34 (DE/Germany/State of Berlin/Berlin/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 65.111.25.34 - - [03/Jul/2026:13:00:11 +0300] "POST /wp-login.php HTTP/1.1" 200 3177 "https://asteriassantorini.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Port Scan
🇫🇷 ELYAZ	2026-07-03 09:25:26 (1 month ago)	(y4) Failed scan -byebye- from 65.111.25.34 (DE/Germany/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-06-26 09:27:20 (2 months ago)	(y4) Failed scan -byebye- from 65.111.25.34 (DE/Germany/-): (CF_ENABLE)	Hacking
🇫🇷 Sklurk	2026-06-20 02:20:01 (2 months ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-06-06 18:05:22 (2 months ago)	Scanning/Probing (34)	Brute-Force Web App Attack
🇨🇴 directorioeducativo.com	2026-01-13 12:55:26 (7 months ago)	GET URL: "/.svn/wc.db"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l ... show more GET URL: "/.svn/wc.db"Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" show less	Web App Attack
🇩🇪 Didier Lagaert	2026-01-12 23:55:16 (7 months ago)	lie-17 : Block hidden directories=>/.svn/wc.db(/)	Hacking
Anonymous	2026-01-05 20:32:31 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-12-08 04:10:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 23:10:32.611154 2025] [security2:error] [pid 5303:tid 5303] [client 65.111.25.34:60323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ostasarim.com"] [uri "/.svn/wc.db"] [unique_id "aTZPuJEjz5TiZBjem_7-sgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 02:05:27 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 21:05:17.253123 2025] [security2:error] [pid 6758:tid 6758] [client 65.111.25.34:26993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citrineartstudio.com"] [uri "/.env"] [unique_id "aTYyXbjrjfhS3AGQcSzZSAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-08 01:27:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:27:28.248267 2025] [security2:error] [pid 902:tid 905] [client 65.111.25.34:15133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iamfluff.com"] [uri "/.env"] [unique_id "aTYpgL71iYNayHGevDZtwgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 23:23:31 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.25.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 18:23:27.194306 2025] [security2:error] [pid 12599:tid 12599] [client 65.111.25.34:58825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "queenspridegrapes.nyc"] [uri "/.svn/wc.db"] [unique_id "aTS678qTcFsHRf79S2MYCQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2025-12-06 23:02:07 (8 months ago)	Auto-ban: >3000 req/min op 2025-12-06	Hacking Web App Attack SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 209.38.35.35

🇩🇪 194.88.98.112

🇳🇱 94.154.43.82

🇲🇽 66.9.176.146

🇺🇸 192.178.115.211

🇳🇱 188.166.54.11

🇩🇪 167.94.145.21

🇫🇮 147.185.133.191

🇰🇷 119.198.96.190

🇳🇱 92.112.126.183

🇳🇱 45.148.10.157

🇨🇦 20.104.49.130

🇨🇳 111.9.47.89

🇹🇼 110.24.36.36

🇫🇷 91.231.89.7

🇧🇷 45.179.169.193

🇬🇧 45.133.173.8

🇩🇪 35.242.249.105

🇧🇷 189.44.74.18

🇫🇷 164.132.2.2