JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.31.238

65.111.31.238 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 47%: ?

47%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.31.238

Whois 65.111.31.238

IP Abuse Reports for 65.111.31.238:

This IP address has been reported a total of 20 times from 15 distinct sources. 65.111.31.238 was first reported on July 3rd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 conseilgouz	2026-07-24 05:58:54 (2 days ago)	vee-6 : Trying access system files=>/wp-login.php(wp-login.php)	Hacking
Anonymous	2026-07-24 00:15:43 (2 days ago)	Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.	Web App Attack
🇺🇸 lostswordfish.com	2026-07-23 05:02:05 (3 days ago)	Wordfence waf block on decarcerationnation	Web App Attack
🇫🇷 ELYAZ	2026-07-22 11:14:51 (4 days ago)	(wordpress) Failed wordpress login from 65.111.31.238 (FR/France/-): (CF_ENABLE)	Brute-Force
🇩🇪 F242	2026-07-21 22:59:22 (4 days ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇩🇪 iNetWorker	2026-07-21 04:34:40 (5 days ago)	trolling for resource vulnerabilities	Web App Attack
🇮🇩 Burayot	2026-07-07 21:32:45 (2 weeks ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.31.238 (FR/France/-): 1 in t ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.31.238 (FR/France/-): 1 in the last 3600 secs show less	Web App Attack
🇧🇪 cmbplf	2026-06-28 14:31:31 (3 weeks ago)	3.219 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 F242	2026-01-30 05:41:13 (5 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2025-12-10 14:52:11 (7 months ago)	"Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized ac ... show more "Participant in large-scale DDoS Attack in which data injection was attmpted to gain unauthorized access" show less	DDoS Attack SQL Injection Exploited Host
🇺🇸 TPI-Abuse	2025-12-02 18:03:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 13:03:18.972636 2025] [security2:error] [pid 5477:tid 5477] [client 65.111.31.238:29561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ken-hensley.com"] [uri "/.git/HEAD"] [unique_id "aS8p5m6kW6hjJgvbiHeGBQAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 12:47:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:47:43.069525 2025] [security2:error] [pid 15340:tid 15369] [client 65.111.31.238:15257] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazzzcatz.com"] [uri "/.git/HEAD"] [unique_id "aS7f72fVV3te9jwc25scmQAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:50:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.31.238 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.31.238 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:50:33.337230 2025] [security2:error] [pid 19603:tid 19603] [client 65.111.31.238:57567] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consolidatedoperationsgroup.com"] [uri "/.git/HEAD"] [unique_id "aS5-KRaiYr3NUMJcucU16wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-09 21:29:55 (8 months ago)	(From [email protected]) Boost commonwealthfamilyhealthcare.com SEO standings, increase yo ... show more (From [email protected]) Boost commonwealthfamilyhealthcare.com SEO standings, increase your online exposure and gain powerful backlinks! BonusBacklinks.com - we provide daily backlinks and drive website visits to your website EVERY DAY: + Get 85% SALE + Trusted daily backlinks + Real website traffic + Prices only from $1 + Bonus coupon codes https://BonusBacklinks.com/85coupon BonusBacklinks.com - daily backlinks and website clicks to increase your webpage every day show less	Phishing Web Spam

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇩🇪 157.230.123.106

🇺🇿 144.124.192.236

🇻🇳 113.161.149.20

🇨🇭 104.244.79.113

🇬🇧 35.203.211.124

🇧🇷 20.195.181.10

🇫🇷 217.128.80.129

🇬🇧 212.132.207.24

🇮🇳 106.195.15.158

🇭🇰 103.14.33.129

🇺🇸 70.120.203.193

🇸🇬 20.24.137.18

🇫🇷 185.190.142.132

🇫🇮 147.185.133.174

🇦🇪 139.185.55.154

🇳🇱 45.148.10.239

🇬🇧 35.203.211.125

🇷🇴 2.57.122.209

🇫🇷 2001:41d0:303:963e::1