JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.28.11

65.111.28.11 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.28.11

Whois 65.111.28.11

IP Abuse Reports for 65.111.28.11:

This IP address has been reported a total of 21 times from 14 distinct sources. 65.111.28.11 was first reported on July 9th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-04-29 20:03:37 (1 month ago)	Forum/form spam	Web Spam
🇦🇺 MAGIC	2026-01-19 03:07:30 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2026-01-05 20:33:56 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:18 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-12-28 03:05:49 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2025-12-07 00:05:01 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 HandyTreff.de	2025-12-06 17:49:18 (5 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.486 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -28.486 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Xbox; Xbox One) AppleWebKit/537.36 (KHTML, like Gecko) Chr show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 04:56:56 (6 months ago)	(mod_security) mod_security (id:210831) triggered by 65.111.28.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210831) triggered by 65.111.28.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 03 23:56:50.891692 2025] [security2:error] [pid 20705:tid 20705] [client 65.111.28.11:34213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|backstore.com\|F\|4"] [data "a href="] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "backstore.com"] [uri "/usage_202512.html"] [unique_id "aTEUkpdRj2M-D5rYnO9ySQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-12-03 12:36:22 (6 months ago)	(From [email protected]) Boost your seo rank with quality seo backlinks! BonusBacklinks ... show more (From [email protected]) Boost your seo rank with quality seo backlinks! BonusBacklinks.com - we deliver daily backlinks and bring organic traffic to your site EVERY DAY: + Take 85% OFF + Quality daily seo backlinks + Real website traffic + Prices only from $1 + Bonus coupon codes Check seo coupons - https://tiny.cc/bonusbacklinks-promos Or visit directly - https://Bonusbacklinks.com BonusBacklinks - daily seo backlinks and website traffic to boost your page everyday show less	Phishing Web Spam
🇺🇸 TPI-Abuse	2025-11-26 11:48:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:48:21.175608 2025] [security2:error] [pid 13950:tid 13950] [client 65.111.28.11:54653] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.aantariaconstructions.com"] [uri "/.git/HEAD"] [unique_id "aSbpBUDa5JZeo0YOn7QvzQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:35:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.11 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.11 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:35:10.939060 2025] [security2:error] [pid 3071:tid 3071] [client 65.111.28.11:47907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.janyoors.com"] [uri "/.svn/wc.db"] [unique_id "aSaRjkJravmOKg5AguvdKwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2025-11-18 08:42:58 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from DE. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Vivaldi/5.3.2679.68 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Phenix Info	2025-10-26 12:24:30 (7 months ago)	SSH Login failed	Brute-Force SSH
🇧🇾 lns.bz	2025-10-26 11:55:45 (7 months ago)	SSH bruteforce [BY]	SSH
🇩🇪 ps-center	2025-10-23 07:48:38 (7 months ago)	C1-W: TCP-Scanner. Port: 22	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 47.128.96.175

🇫🇷 185.177.72.52

🇩🇪 167.94.146.71

🇩🇪 154.195.180.31

🇺🇸 151.240.67.87

🇨🇳 122.8.46.78

🇨🇳 111.26.95.126

🇭🇰 101.36.124.127

🇺🇸 66.132.186.163

🇰🇷 59.27.249.238

🇭🇰 47.86.208.86

🇬🇧 217.146.80.109

🇺🇸 184.105.139.117

🇺🇸 162.216.150.21

🇨🇳 119.115.181.184

🇳🇱 107.189.27.179

🇷🇴 80.94.92.167

🇧🇬 78.128.113.46

🇩🇪 51.89.39.36

🇧🇷 45.174.157.185