JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.31.106

65.111.31.106 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.31.106

Whois 65.111.31.106

IP Abuse Reports for 65.111.31.106:

This IP address has been reported a total of 50 times from 17 distinct sources. 65.111.31.106 was first reported on July 9th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-22 13:26:01 (3 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇩🇪 sdos.es	2026-05-06 10:44:30 (1 month ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env.local"	Web App Attack
🇬🇧 PeravixGroup	2026-05-02 22:14:39 (1 month ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 2375. Severity: HI ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 2375. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇦🇺 oncord	2026-04-23 11:39:55 (1 month ago)	Form spam	Web Spam
🇺🇸 oncord	2026-04-22 09:01:43 (1 month ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2026-04-20 23:59:46 (1 month ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/65.111.31.106 2026 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/65.111.31.106 2026-04-20 08:54:28 /manager/html 2026-04-20 08:54:28 /manager/html show less	Web App Attack
🇦🇺 oncord	2026-04-20 07:05:22 (1 month ago)	Form spam	Web Spam
🇦🇺 oncord	2026-04-10 21:09:36 (2 months ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2026-04-09 23:45:55 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.31.106 2026-04-09 09 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.31.106 2026-04-09 09:19:21 /swagger/v1/swagger.json 2026-04-09 09:19:23 /v3/api-docs 2026-04-09 09:19:21 /prod-api/v2/api-docs 2026-04-09 09:19:22 /api/swagger.json 2026-04-09 09:19:22 /swagger/docs/v1 2026-04-09 09:19:21 /v2/api-docs show less	Web App Attack
🇦🇺 oncord	2026-04-08 15:19:34 (2 months ago)	Form spam	Web Spam
🇨🇳 ThreatBook.io	2026-03-29 23:50:31 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.31.106 2026-03-29 06 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.31.106 2026-03-29 06:38:00 / show less	Web App Attack
Anonymous	2026-03-22 13:15:02 (2 months ago)	VILICO WEBFORM SPAM 65.111.31.106 (65.111.31.106)	Web Spam
🇨🇳 ThreatBook.io	2026-03-06 00:06:27 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.31.106 2026-03-05 14 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.31.106 2026-03-05 14:48:24 /v1/cs/configs?search=accurate&dataId=&group=&appName=&config_tags=&pageNo=1&pageSize=999&tenant= show less	Web App Attack
🇬🇧 oncord	2026-02-26 05:24:25 (3 months ago)	Form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-20 10:11:40 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 65.111.31.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 65.111.31.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 05:11:33.815371 2026] [security2:error] [pid 30291:tid 30291] [client 65.111.31.106:56601] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|honer.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "honer.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZgzVeTEGJodjseaElg19AAAAA8"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 51.254.113.225

🇺🇸 34.173.220.129

🇰🇷 210.183.21.53

🇭🇺 195.228.72.74

🇪🇨 193.30.14.163

🇧🇪 158.173.67.11

🇵🇰 153.117.13.184

🇺🇸 66.132.172.241

🇺🇸 35.223.174.5

🇮🇳 4.187.151.60

🇺🇸 192.241.141.178

🇫🇷 172.71.123.54

🇨🇳 61.145.190.218

🇳🇱 45.128.199.105

🇩🇪 34.159.22.22

🇨🇳 14.103.115.213

🇪🇸 185.214.138.14

🇺🇸 162.216.150.200

🇮🇳 117.221.165.110

🇵🇰 110.38.254.18