JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.28.111

65.111.28.111 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.28.111

Whois 65.111.28.111

IP Abuse Reports for 65.111.28.111:

This IP address has been reported a total of 13 times from 8 distinct sources. 65.111.28.111 was first reported on July 8th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2026-07-11 15:37:39 (1 day ago)	Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST c ... show more Wordpress attack: Submitted data to wp-login.php prior getting page content, attempt blocked. POST counter 1 is greater than GET counter 0, captcha counter for /wp-login.php by 65.111.28.111. show less	Web Spam
🇺🇸 lostswordfish.com	2026-07-11 04:26:04 (1 day ago)	Wordfence waf block on pameganslaw	Web App Attack
🇺🇸 xmission.com	2026-05-25 17:06:36 (1 month ago)	65.111.28.111 - - [25/May/2026:11:06:36 -0600] "GET //xmlrpc.php?rsd HTTP/1.1" 200 780 "-" "Mozilla/ ... show more 65.111.28.111 - - [25/May/2026:11:06:36 -0600] "GET //xmlrpc.php?rsd HTTP/1.1" 200 780 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 [email protected]	2026-04-17 22:29:46 (2 months ago)	[Sat Apr 18 00:29:46.002943 2026] [authz_core:error] [pid 560720:tid 560779] [remote 65.111.28.111:3 ... show more [Sat Apr 18 00:29:46.002943 2026] [authz_core:error] [pid 560720:tid 560779] [remote 65.111.28.111:34733] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 18:54:17 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 09 13:54:13.274666 2025] [security2:error] [pid 2587:tid 2600] [client 65.111.28.111:54969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ennerdalebridge.com"] [uri "/.git/HEAD"] [unique_id "aThwVVAjUFqn7N65zQYRowAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 20:26:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 15:26:04.844067 2025] [security2:error] [pid 581:tid 581] [client 65.111.28.111:9659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "satanisdead.com"] [uri "/.svn/wc.db"] [unique_id "aTXi3Htj9Nu-qjbgCC07-QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 15:26:11 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:26:04.559528 2025] [security2:error] [pid 19008:tid 19008] [client 65.111.28.111:29551] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towlefarmcommunity.org"] [uri "/.env"] [unique_id "aTWcjCyWviErlhEH7K1wlAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 12:51:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 07:51:54.446895 2025] [security2:error] [pid 26327:tid 26327] [client 65.111.28.111:14709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "demircan.org"] [uri "/.env"] [unique_id "aTV4alWxRrFIs1xFXwTLWgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-06 11:40:31 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 06 06:40:24.586732 2025] [security2:error] [pid 23637:tid 23637] [client 65.111.28.111:37435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "girardonline.net"] [uri "/.git/HEAD"] [unique_id "aTQWKKpGltPD8WQIIMJshQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-05 14:38:39 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 05 09:38:33.707736 2025] [security2:error] [pid 28399:tid 28399] [client 65.111.28.111:32287] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluedogzero.com"] [uri "/.env"] [unique_id "aTLuaQcjb6WH4JDg0ZyLOwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-01-23 15:21:44 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.23 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.23 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 Julio Covolato	2024-08-19 21:45:01 (1 year ago)	Imap or Submission login brute-force attacks.	Brute-Force
Anonymous	2024-07-08 04:00:50 (2 years ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.191.201.229

🇬🇧 157.245.36.108

🇺🇸 138.197.204.198

🇰🇷 118.43.81.108

🇨🇦 74.125.16.253

🇳🇱 45.156.87.192

🇺🇸 18.190.15.50

🇸🇪 216.40.73.171

🇬🇧 185.216.145.169

🇨🇳 183.158.252.234

🇺🇸 104.243.35.120

🇭🇰 103.149.93.26

🇰🇪 102.0.13.10

🇺🇸 73.24.155.116

🇺🇸 65.49.20.74

🇲🇾 49.124.147.101

🇳🇱 45.148.10.151

🇺🇸 18.218.118.203

🇬🇧 217.146.80.119

🇻🇳 116.110.41.173