JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.29.124

65.111.29.124 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.29.124

Whois 65.111.29.124

IP Abuse Reports for 65.111.29.124:

This IP address has been reported a total of 23 times from 12 distinct sources. 65.111.29.124 was first reported on June 26th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-23 03:35:14 (1 day ago)	(mod_security) mod_security (id:225170) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 23:35:09.021110 2026] [security2:error] [pid 30252:tid 30252] [client 65.111.29.124:47859] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jerusalem-temple-today.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jerusalem-temple-today.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aopqbdmIJ1a0GBtgO8FupQAAAAU"], referer: https://t.co/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-22 08:48:26 (1 day ago)	Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probin ... show more Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools show less	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-08-05 01:37:49 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-04 01:36:07 (2 weeks ago)	Web App Attack	Web App Attack
🇮🇹 VHosting	2026-07-16 21:45:03 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-07-16 04:43:51 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-09 01:00:40 (1 month ago)	Web App Attack	Web App Attack
🇨🇳 ThreatBook.io	2026-04-23 23:28:04 (4 months ago)	ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/65.111.29.124 202 ... show more ThreatBook Intelligence: Zombie,vpn_proxy more details on https://threatbook.io/ip/65.111.29.124 2026-04-23 06:43:01 /static/images/ 2026-04-23 06:43:12 /static/images/ 2026-04-23 06:43:05 /index.html 2026-04-23 06:43:13 /index.html 2026-04-23 06:43:08 /static/images/ 2026-04-23 06:43:04 /static/images/ 2026-04-23 06:36:35 /false 2026-04-23 06:39:07 /kayako 2026-04-23 06:43:00 /index.html 2026-04-23 06:43:10 /index.html show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 03:21:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:21:02.219219 2026] [security2:error] [pid 2288188:tid 2288188] [client 65.111.29.124:22819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southsideaccountingservices.com"] [uri "/.env"] [unique_id "aWsAHpM82Qthswsz28VQEwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 18:07:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 13:07:25.069419 2026] [security2:error] [pid 6253:tid 6253] [client 65.111.29.124:15571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.partiklezoo.com"] [uri "/.env"] [unique_id "aWp-Xe_NTbOhZureqdJfyAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 10:48:30 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-17 21:26:11 (8 months ago)	wordpress-trap	Web App Attack
🇺🇸 TPI-Abuse	2025-02-17 17:29:14 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 65.111.29.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 17 12:29:11.181524 2025] [security2:error] [pid 4852:tid 4852] [client 65.111.29.124:45173] [client 65.111.29.124] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sfgardening.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sfgardening.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z7Nx5zahsEQbiWwtBVzlWAAAAAM"], referer: https://sfgardening.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-02-17 16:55:06 (1 year ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
Anonymous	2025-01-23 18:12:28 (1 year ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.23 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.01.23 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.139

🇧🇷 168.181.104.238

🇯🇵 168.138.215.193

🇩🇪 141.95.54.130

🇺🇸 74.82.47.11

🇵🇪 45.170.50.2

🇳🇱 45.148.10.151

🇻🇳 45.119.212.99

🇺🇸 2400:cb00:119:1000:7316:ef31:babe:9613

🇺🇸 2400:cb00:119:1000:b17:bbbe:3b2a:8b

🇺🇸 195.184.76.200

🇳🇱 174.138.4.133

🇨🇳 171.83.190.238

🇰🇷 168.131.216.36

🇵🇪 168.121.220.66

🇺🇸 167.172.223.244

🇺🇸 167.71.126.9

🇺🇸 152.163.235.188

🇨🇳 123.148.201.58

🇻🇳 113.160.209.29