JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.28.163

65.111.28.163 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.28.163

Whois 65.111.28.163

IP Abuse Reports for 65.111.28.163:

This IP address has been reported a total of 22 times from 16 distinct sources. 65.111.28.163 was first reported on July 3rd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 gigatech	2026-07-09 07:40:05 (1 day ago)	Webserver Probing	Web App Attack
🇫🇷 ELYAZ	2026-06-25 06:34:11 (2 weeks ago)	(y4) Failed scan -byebye- from 65.111.28.163 (IT/Italy/-): (CF_ENABLE)	Hacking
🇬🇧 poundawebsiteltd	2026-06-23 02:19:29 (2 weeks ago)	WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 65.111.28.163 - - [23/Jun/2026:03:19:25 +0100] P ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 65.111.28.163 - - [23/Jun/2026:03:19:25 +0100] POST /wp-login.php HTTP/1.1 200 7364 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 show less	Web App Attack
🇮🇩 zam	2026-06-22 10:53:34 (2 weeks ago)	65.111.28.163 - - [22/Jun/2026:10:53:31 +0000] "POST /wp-login.php HTTP/1.1" 404 27293	Web App Attack
🇬🇷 setupgr	2026-06-22 09:02:53 (2 weeks ago)	(mod_security) mod_security (id:900001) triggered by 65.111.28.163 (IT/Italy/Lazio/Rome/-/[AS200373 ... show more (mod_security) mod_security (id:900001) triggered by 65.111.28.163 (IT/Italy/Lazio/Rome/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 22 12:02:51.201350 2026] [security2:error] [pid 1934756:tid 1934916] [client 65.111.28.163:65157] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: ions.gr"] [severity "CRITICAL"] [tag "security"] [hostname "ions.gr"] [uri "/wp-login.php"] [unique_id "ajj6Oy7wGrlvgFoRVzagZwAAAU0"], referer: https://ions.gr/wp-login.php show less	Port Scan
🇲🇽 octageeks.com	2026-06-22 04:06:52 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-06-21 00:51:09 (2 weeks ago)	Wordpress login attempts	Brute-Force
Anonymous	2026-01-05 20:29:00 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.05 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:55:31 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:55:24.510460 2025] [security2:error] [pid 9029:tid 9029] [client 65.111.28.163:36481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.untraceable.org"] [uri "/.git/HEAD"] [unique_id "aSQdfP2aOu74M2XCFDdQbAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:31:40 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:31:33.093388 2025] [security2:error] [pid 26806:tid 26806] [client 65.111.28.163:25039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayfieldwis.com"] [uri "/.svn/wc.db"] [unique_id "aSQX5SKbLFuRsWILPf3udgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:15:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:15:09.092509 2025] [security2:error] [pid 1209:tid 1209] [client 65.111.28.163:18525] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badfoodlawsuit.com"] [uri "/.svn/wc.db"] [unique_id "aSQUDZtecQDUk8dcTX6LJAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:41:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:41:46.038109 2025] [security2:error] [pid 1993:tid 1993] [client 65.111.28.163:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sportsbookcommission.com"] [uri "/.svn/wc.db"] [unique_id "aSPwGlIJ9AZwVoUBI8rj-wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:03:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.28.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:03:34.593030 2025] [security2:error] [pid 29831:tid 29831] [client 65.111.28.163:27943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.propertygalleria.com"] [uri "/.env"] [unique_id "aSPnJvkU3lz6e3DMLNgOwAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 18:28:23 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/13 12:26:10	Port Scan Brute-Force Exploited Host Web App Attack
🇦🇺 MAGIC	2025-11-09 01:15:05 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 176.53.159.198

🇵🇭 119.92.70.82

🇮🇳 103.50.150.60

🇺🇸 64.62.197.73

🇺🇸 2604:a940:300:5b6:0:2a::

🇬🇧 216.226.76.30

🇺🇸 216.25.89.91

🇬🇲 197.255.205.120

🇨🇳 180.100.217.164

🇨🇳 119.179.255.88

🇺🇸 104.28.221.219

🇳🇱 85.11.167.7

🇲🇶 83.203.54.249

🇨🇦 20.104.76.210

🇬🇧 5.252.83.236

🇷🇴 2.57.122.238

🇮🇳 2404:6800:4000:101d::12d

🇺🇸 195.184.76.32

🇨🇳 119.96.173.169

🇨🇳 110.52.22.132