JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.115

65.111.0.115 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.115

Whois 65.111.0.115

IP Abuse Reports for 65.111.0.115:

This IP address has been reported a total of 25 times from 15 distinct sources. 65.111.0.115 was first reported on June 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pocketpark	2026-04-27 01:41:40 (1 month ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (POST) \| Endpo ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK \| Protocol: HTTP/1.1 (POST) \| Endpoint: /admin/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 nowyouknow	2026-04-17 23:55:44 (1 month ago)	(From [email protected]) Hi Westside Chiropractic PC, I’ve built and trained an AI empl ... show more (From [email protected]) Hi Westside Chiropractic PC, I’ve built and trained an AI employee specifically for Westside Chiropractic PC. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
Anonymous	2026-01-09 11:45:40 (5 months ago)	65.111.0.115 - - [09/Jan/2026:12:45:40 +0100] "GET /db.sql HTTP/1.1" 403 5014 "-" "Mozilla/5.0 (Wind ... show more 65.111.0.115 - - [09/Jan/2026:12:45:40 +0100] "GET /db.sql HTTP/1.1" 403 5014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇧🇪 voormedia	2026-01-06 02:26:19 (5 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:10:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.115 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:10:36.144734 2025] [security2:error] [pid 16007:tid 16007] [client 65.111.0.115:17179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.whatyouhear.com"] [uri "/.env"] [unique_id "aSQS_N99rs25qSgFtZlTZwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:30:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.115 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.115 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:30:02.029297 2025] [security2:error] [pid 3350681:tid 3350681] [client 65.111.0.115:47057] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.varnadorefamily.com"] [uri "/.svn/wc.db"] [unique_id "aSPtWiIM6n0iclS8NagKSAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 05:21:14 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-17 10:22:19 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-14 05:38:03 (7 months ago)	GlobalProtect login attempts with user libailey.	VPN IP Brute-Force
Anonymous	2025-10-08 10:47:43 (8 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.08 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 17:26:12 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 14:51:19 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 21:08:00 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 10:46:44 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 london2038.com	2025-09-28 21:44:26 (8 months ago)	Connection atttempts against closed TCP ports Sep 28 23:44:23 BLOCK SRC=65.111.0.115 LEN=60 TOS=0x00 ... show more Connection atttempts against closed TCP ports Sep 28 23:44:23 BLOCK SRC=65.111.0.115 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7564 DF PROTO=TCP SPT=37923 DPT=22 WINDOW=64240 RES=0x00 SYN Sep 28 23:44:24 BLOCK SRC=65.111.0.115 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7565 DF PROTO=TCP SPT=37923 DPT=22 WINDOW=64240 RES=0x00 SYN Sep 28 23:44:25 BLOCK SRC=65.111.0.115 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7566 DF PROTO=TCP SPT=37923 DPT=22 WINDOW=64240 RES=0x00 SYN show less	Port Scan

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.68

🇵🇾 181.91.86.84

🇨🇳 14.103.112.5

🇦🇱 217.73.139.205

🇺🇸 107.173.253.11

🇳🇱 45.148.10.151

🇺🇸 45.56.79.53

🇺🇸 45.56.70.39

🇦🇪 5.31.163.78

🇬🇧 81.19.219.198

🇪🇸 79.117.3.127

🇲🇾 47.250.53.172

🇳🇱 45.156.87.117

🇺🇸 45.56.103.189

🇺🇸 45.55.80.34

🇬🇧 31.14.254.60

🇵🇭 27.110.166.67

🇺🇸 205.210.31.107

🇺🇸 205.210.31.80

🇹🇼 198.235.24.100