JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.111

65.111.0.111 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 19%: ?

19%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.111

Whois 65.111.0.111

IP Abuse Reports for 65.111.0.111:

This IP address has been reported a total of 46 times from 24 distinct sources. 65.111.0.111 was first reported on July 11th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-07 17:28:19 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 MatStef132	2026-07-01 22:35:05 (1 week ago)	MatShield L7: blocked on mathost.eu (click-id-direct-nav)	DDoS Attack
🇫🇷 MatStef132	2026-05-19 21:11:03 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 21:05:47 (1 month ago)	MatShield L7: blocked on anonymous (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:59:02 (1 month ago)	MatShield L7: blocked on dstat.selify.io (click-id-direct-nav)	DDoS Attack
🇫🇮 inlink.ltd	2026-05-15 06:33:22 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇫🇷 MatStef132	2026-05-14 21:32:37 (1 month ago)	[mathost.eu] clic	DDoS Attack Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:04:41 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:04:35.603630 2026] [security2:error] [pid 27685:tid 27685] [client 65.111.0.111:43791] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pandahh.com"] [uri "/v2/.git/config"] [unique_id "aZG2U6BL0Ru2HPnxC5LbMgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:28:41 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:28:36.116173 2026] [security2:error] [pid 24321:tid 24321] [client 65.111.0.111:20901] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxygenfarm.com"] [uri "/app/.git/config"] [unique_id "aZGt5NI9vQXrYvIJthhFjwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:35:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:35:15.140815 2026] [security2:error] [pid 31946:tid 31946] [client 65.111.0.111:32483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prospecinspections.com"] [uri "/.git/config"] [unique_id "aZFpI1BwMLGUoCG4uNR7uwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:40:20 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:40:10.881474 2026] [security2:error] [pid 1261:tid 1261] [client 65.111.0.111:19601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "okwellbeing.com"] [uri "/.env.local"] [unique_id "aZFcOvOT2RUnKKeH1vMKQQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-15 05:17:53 (4 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇩🇪 Lino Project	2026-02-15 05:17:48 (4 months ago)	65.111.0.111 - - [15/Feb/2026:06:17:46 +0100] "GET /.env HTTP/1.1" 302 441 "-" "Mozilla/5.0 (Windows ... show more 65.111.0.111 - - [15/Feb/2026:06:17:46 +0100] "GET /.env HTTP/1.1" 302 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 65.111.0.111 - - [15/Feb/2026:06:17:47 +0100] "GET /.env.production HTTP/1.1" 302 462 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-02-15 05:11:38 (4 months ago)	Restricted File Access Attempt. Matched phrase "/.git/" at REQUEST_FILENAME. (930130-122)	Hacking Web App Attack
🇩🇪 webko.si	2026-02-15 05:07:20 (4 months ago)	pridenmozic.si: Bruteforce web app access, URI detail: '/backend/.env'.	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.185.122.186

🇮🇳 122.162.150.216

🇳🇱 195.178.110.227

🇺🇸 172.245.102.77

🇺🇸 165.154.255.63

🇺🇸 162.216.150.98

🇸🇪 155.4.244.169

🇱🇰 124.43.65.60

🇺🇸 66.132.224.19

🇳🇱 45.153.34.186

🇩🇪 45.3.45.12

🇲🇽 38.22.170.10

🇬🇾 190.80.90.73

🇦🇷 179.36.99.105

🇨🇲 154.70.102.114

🇵🇹 148.71.135.107

🇸🇬 139.162.48.91

🇨🇳 106.12.148.154

🇲🇾 47.254.234.201

🇳🇱 45.148.10.141