JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.31.20

65.111.31.20 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.31.20

Whois 65.111.31.20

IP Abuse Reports for 65.111.31.20:

This IP address has been reported a total of 26 times from 15 distinct sources. 65.111.31.20 was first reported on July 7th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 neithnet	2026-09-15 10:19:20 (5 days ago)	Malicious web scan	Hacking Web App Attack
🇨🇭 backslash	2026-09-13 04:03:03 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Sklurk	2026-08-01 02:40:26 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 02:13:17 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-29 23:59:41 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-07-05 20:48:03 (2 months ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 04:55:11 (2 months ago)	[Jul 5 06:55:10] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:808@154 ... show more [Jul 5 06:55:10] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.31.20:62407' (callid: d1fe767e2dcbf158f616b0aa09c9a54d) - No matching endpoint found [Jul 5 06:55:10] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.31.20:62407' (callid: d1fe767e2dcbf158f616b0aa09c9a54d) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 sgofferj	2026-07-03 21:07:56 (2 months ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 20:58:38 (2 months ago)	[Jul 3 22:58:37] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:444@154 ... show more [Jul 3 22:58:37] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.31.20:22433' (callid: 1be5a63a85a7b0c8a388ee91dcb64f40) - No matching endpoint found [Jul 3 22:58:37] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.31.20:22433' (callid: 1be5a63a85a7b0c8a388ee91dcb64f40) - No matching endpoint found ... show less	Brute-Force Port Scan
🇬🇧 PeravixGroup	2026-05-21 03:51:11 (3 months ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇳🇱 homeshowdomain.nl	2026-02-10 23:00:29 (7 months ago)	Auto-ban: >3000 req/min op 2026-02-10	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-10 17:12:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 12:12:21.259252 2026] [security2:error] [pid 12762:tid 12762] [client 65.111.31.20:63931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "18mstudio.com"] [uri "/app/.git/config"] [unique_id "aYtm9a-YEnQ3sxyW2bnB4gAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 15:31:47 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:31:43.047037 2026] [security2:error] [pid 31378:tid 31378] [client 65.111.31.20:31721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestcountryclubs.com"] [uri "/.env.local"] [unique_id "aYtPX_wjTXw2WKUUGePLOwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:11:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:11:40.885607 2026] [security2:error] [pid 25464:tid 25464] [client 65.111.31.20:60213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnaird.enterprises"] [uri "/.env.local"] [unique_id "aYqh7KAU9PclYCMasmLwUwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 01:53:41 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 20:53:38.514271 2026] [security2:error] [pid 31346:tid 31346] [client 65.111.31.20:63079] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hxiakj.com"] [uri "/backend/.env"] [unique_id "aYqPovI8a0cNCQjhv8shnQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 201.246.196.185

🇭🇰 47.79.23.180

🇨🇳 36.139.229.71

🇸🇬 136.110.7.23

🇨🇳 106.12.127.250

🇮🇩 103.187.165.26

🇻🇳 103.162.31.131

🇷🇺 95.165.170.222

🇺🇸 91.230.168.151

🇵🇹 85.245.39.202

🇧🇬 79.124.49.70

🇧🇪 35.240.24.252

🇸🇬 34.21.151.52

🇰🇷 221.156.126.1

🇱🇻 213.176.24.46

🇨🇱 190.44.161.59

🇵🇦 190.14.223.82

🇺🇸 144.172.105.41

🇸🇬 129.212.230.127

🇺🇸 98.48.178.139