JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.31.136

65.111.31.136 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.31.136

Whois 65.111.31.136

IP Abuse Reports for 65.111.31.136:

This IP address has been reported a total of 9 times from 4 distinct sources. 65.111.31.136 was first reported on June 28th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-24 09:22:43 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 04:22:38.715669 2026] [security2:error] [pid 5834:tid 5834] [client 65.111.31.136:34741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sermonofsong.talkingmess.com"] [uri "/.git/config"] [unique_id "aZ1t3urAf6D_IVy0lpgrDQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:35:35 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:35:29.823474 2025] [security2:error] [pid 12818:tid 12818] [client 65.111.31.136:45601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.braddonengineering.com"] [uri "/.svn/wc.db"] [unique_id "aSQm4flCg5ruwx7zUs5YRwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:25:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:24:34.227808 2025] [security2:error] [pid 10891:tid 10891] [client 65.111.31.136:55873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.isleofcain.com"] [uri "/.git/HEAD"] [unique_id "aSP6ItDXS125HkCqdg4Y1gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 05:08:20 (6 months ago)	Try to connect to Port_Scan_80_stealth	Port Scan
🇺🇸 TPI-Abuse	2025-11-24 04:44:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:44:23.890762 2025] [security2:error] [pid 866:tid 866] [client 65.111.31.136:19561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.akramansari.com"] [uri "/.svn/wc.db"] [unique_id "aSPipwZXYspgsu9GwP3THAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:46:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:46:09.554565 2025] [security2:error] [pid 32379:tid 32379] [client 65.111.31.136:48791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.beirutbazar.com"] [uri "/.svn/wc.db"] [unique_id "aSPVAXqNC0AALNMwjJ1RrAAAACo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-07-11 01:05:57 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-28 05:11:04 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.11

🇧🇪 198.235.24.234

🇺🇸 147.185.132.148

🇯🇵 92.202.82.102

🇺🇦 85.239.147.15

🇨🇳 1.197.102.62

🇨🇦 192.95.10.204

🇩🇪 179.61.145.113

🇧🇷 177.136.206.71

🇺🇸 136.116.186.200

🇰🇷 115.178.75.243

🇻🇳 103.166.184.148

🇳🇱 91.92.42.136

🇺🇦 82.29.225.114

🇺🇸 66.132.195.121

🇺🇸 66.132.172.221

🇬🇧 45.82.76.139

🇺🇸 34.70.122.164

🇺🇸 34.28.108.22

🇨🇳 221.203.139.105