JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.29.161

65.111.29.161 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.29.161

Whois 65.111.29.161

IP Abuse Reports for 65.111.29.161:

This IP address has been reported a total of 24 times from 13 distinct sources. 65.111.29.161 was first reported on July 4th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-08-23 04:16:12 (3 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 conseilgouz	2026-08-22 13:35:46 (3 days ago)	doe-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
🇮🇹 [email protected]	2026-04-18 08:43:35 (4 months ago)	[Sat Apr 18 10:43:35.337843 2026] [authz_core:error] [pid 560721:tid 560756] [remote 65.111.29.161:1 ... show more [Sat Apr 18 10:43:35.337843 2026] [authz_core:error] [pid 560721:tid 560756] [remote 65.111.29.161:11423] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 EGP Abuse Dept	2026-02-22 00:04:17 (6 months ago)	Scanning for port/service exploits on tpc-013.mach3builders.nl	Port Scan Hacking
🇺🇸 TPI-Abuse	2026-02-12 04:33:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 23:33:18.290563 2026] [security2:error] [pid 4297:tid 4297] [client 65.111.29.161:55229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arthynatarajan.com"] [uri "/admin/.git/config"] [unique_id "aY1YDmaOsgWB5dtocU-8IQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 16:57:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 11:57:35.170206 2026] [security2:error] [pid 17237:tid 17237] [client 65.111.29.161:44765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "17thstreetrealty.com"] [uri "/api/.env"] [unique_id "aYtjf98uNeaxeD2vuH6MTAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 05:42:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:42:05.053576 2026] [security2:error] [pid 31486:tid 31486] [client 65.111.29.161:47875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kochcreative.com"] [uri "/.env"] [unique_id "aYrFLWUqZQ84Fn90g-_a9QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:15:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:15:43.021348 2026] [security2:error] [pid 17406:tid 17406] [client 65.111.29.161:34425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iahksa.com"] [uri "/backup/.git/config"] [unique_id "aYqi32ODE0_Mokrg0YpbBwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 02:31:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:31:22.419307 2026] [security2:error] [pid 431:tid 431] [client 65.111.29.161:53459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinaffanchufoods.com"] [uri "/backend/.env"] [unique_id "aYqYenrEO9-e9yDoJi4QxwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:48:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:48:17.526826 2026] [security2:error] [pid 474:tid 474] [client 65.111.29.161:16285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keyston.net"] [uri "/app/.env"] [unique_id "aYqAUTvcq0Y054QttrWErAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 22:20:45 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.29.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 17:20:38.060889 2026] [security2:error] [pid 23952:tid 23952] [client 65.111.29.161:19749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotspringstips.com"] [uri "/.env.save"] [unique_id "aYpdtiL0Iycsc-LJ89-iGAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2025-12-30 08:25:27 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇹 VHosting	2025-12-24 05:55:32 (8 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇸🇪 Johan Finn	2025-12-12 00:40:04 (8 months ago)	malicious activity	Web App Attack
Anonymous	2025-11-21 19:09:55 (9 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/21 12:31:47	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.86.33.171

🇺🇸 173.255.223.124

🇮🇳 152.59.0.203

🇺🇸 136.124.32.62

🇰🇷 112.164.253.222

🇺🇸 104.173.101.135

🇺🇦 46.150.79.222

🇧🇷 45.179.173.214

🇺🇦 212.1.93.54

🇮🇳 203.192.253.112

🇳🇱 195.178.110.228

🇩🇪 185.178.74.117

🇵🇭 180.232.159.197

🇦🇷 179.37.41.194

🇭🇷 161.53.2.37

🇨🇳 112.7.116.152

🇹🇼 111.70.49.179

🇺🇸 107.175.52.3

🇺🇸 104.37.46.94

🇿🇦 102.129.54.147