JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.27.149

65.111.27.149 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.27.149

Whois 65.111.27.149

IP Abuse Reports for 65.111.27.149:

This IP address has been reported a total of 23 times from 13 distinct sources. 65.111.27.149 was first reported on July 9th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-10 06:03:46 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-02 03:21:42 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-01 02:25:36 (4 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=18; exact paths: /xmlrpc.php	Web App Attack
🇩🇪 stinpriza	2026-07-25 18:03:21 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-23 11:43:52 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 geot	2026-05-16 14:48:07 (3 months ago)	GET http://<<removed>>.com/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1	Port Scan
🇺🇸 TPI-Abuse	2025-11-26 08:50:24 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:50:20.933858 2025] [security2:error] [pid 3486:tid 3486] [client 65.111.27.149:49237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ola.jbaydeliveries.com"] [uri "/.svn/wc.db"] [unique_id "aSa_TMOmVJ2YUYfqLvP5ywAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2025-11-26 00:45:30 (9 months ago)	GET /.env (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
Anonymous	2025-11-26 00:15:02 (9 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:11:25 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:11:22.541736 2025] [security2:error] [pid 21166:tid 21166] [client 65.111.27.149:28741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.4ehardware.4ehardware.com"] [uri "/.env"] [unique_id "aSVIis7uWf7TQFt035tKNwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:42:26 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:42:22.751959 2025] [security2:error] [pid 32735:tid 309] [client 65.111.27.149:44929] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dreammile.info"] [uri "/.git/HEAD"] [unique_id "aSUzruyRrmvyed2G3rXM8AAAAEg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:53:55 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:49.343454 2025] [security2:error] [pid 10068:tid 10068] [client 65.111.27.149:31279] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davedoeswater.com"] [uri "/.git/HEAD"] [unique_id "aSUaPR7aHfu5l4cAcDSwvwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:34:37 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:34:26.167469 2025] [security2:error] [pid 243932:tid 243971] [client 65.111.27.149:24349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.acornway.com"] [uri "/.svn/wc.db"] [unique_id "aSQmolc8EtVRkmyAMev0RQAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:51:30 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.149 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:51:23.386912 2025] [security2:error] [pid 12864:tid 12864] [client 65.111.27.149:51381] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.therustedtree.com"] [uri "/.env"] [unique_id "aSQci0E5ANObw9F3cJZbjwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.37

🇧🇪 198.235.24.195

🇸🇬 84.75.155.120

🇺🇸 66.132.186.219

🇺🇸 66.132.172.248

🇨🇳 47.107.107.24

🇳🇱 45.148.10.157

🇬🇧 35.203.210.40

🇩🇪 2a01:4f8:c012:9ff9::1

🇫🇷 217.182.253.249

🇺🇸 172.71.166.81

🇳🇱 167.71.4.141

🇻🇳 103.161.22.203

🇺🇸 70.39.234.52

🇿🇦 41.168.10.139

🇧🇪 34.78.172.92

🇨🇳 27.220.33.220

🇩🇪 213.209.159.21

🇩🇪 213.209.159.20

🇨🇭 209.99.190.200