JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.2

65.111.0.2 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.2

Whois 65.111.0.2

IP Abuse Reports for 65.111.0.2:

This IP address has been reported a total of 28 times from 15 distinct sources. 65.111.0.2 was first reported on June 28th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 F242	2026-01-30 06:07:42 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 myagent.site	2026-01-20 14:07:09 (4 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇺🇸 TPI-Abuse	2025-11-25 05:15:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:15:30.925419 2025] [security2:error] [pid 1395:tid 1395] [client 65.111.0.2:39721] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jacksonconstructiongroup.com"] [uri "/.env"] [unique_id "aSU7cti5LJp5UwyqOlfdEwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:33:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:33:50.474352 2025] [security2:error] [pid 32735:tid 301] [client 65.111.0.2:40731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.meeker.us"] [uri "/.svn/wc.db"] [unique_id "aSUjnuyRrmvyed2G3rXI8QAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:29:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:29:35.619101 2025] [security2:error] [pid 7185:tid 7185] [client 65.111.0.2:21917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.graficasbis.com"] [uri "/.svn/wc.db"] [unique_id "aSUUjwToxPAhmjkqZj9kqAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 02:01:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:01:16.714846 2025] [security2:error] [pid 19807:tid 19807] [client 65.111.0.2:46959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.portraitartisans.vittariadesign.com"] [uri "/.env"] [unique_id "aSUN7HMsamClqa39kFOSFQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:55:49 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:55:29.511740 2025] [security2:error] [pid 4325:tid 4325] [client 65.111.0.2:33461] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.k4uu.com"] [uri "/.git/HEAD"] [unique_id "aST-gcrHda72av45vWU0ewAAAD8"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MM-bot	2025-11-24 13:57:35 (6 months ago)	URL-probe: HTTP/1.1 GET request on /.env (2025-11-24 14:57:35 UTC+1)	Hacking Web App Attack
🇺🇸 nowyouknow	2025-11-10 05:12:38 (7 months ago)	(From [email protected]) SOFTWARE: New AI Cloud-Tool Quietly Turns Simple Ideas Into Pas ... show more (From [email protected]) SOFTWARE: New AI Cloud-Tool Quietly Turns Simple Ideas Into Passive Royalties.... ...No tech. No product. No audience. Just this one AI tool. https://www.novaai.expert/OhanashiGenAI to UNSUBSCRIBE: https://www.novaai.expert/unsubscribe?domain=ferrignochiropractic.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
🇦🇺 oncord	2025-11-07 12:33:59 (7 months ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-11-07 02:13:14 (7 months ago)	(From [email protected]) World's FIRST AI System That Creates PROFITABLE Amazon Books In Un ... show more (From [email protected]) World's FIRST AI System That Creates PROFITABLE Amazon Books In Under 6 Minutes Across 25+ Niches https://goldsolutions.pro/RoyaltyProfitsAI to UNSUBSCRIBE: https://goldsolutions.pro/unsubscribe?domain=familychiropractorsofridgewood.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam
Anonymous	2025-10-28 23:26:40 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇱🇻 garmtech.com	2025-10-24 06:27:46 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-27.65.111.0.2.web-spammers. ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-27.65.111.0.2.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-10-20 11:42:49 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-42.65.111.0.2.web-spammers. ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 14-42.65.111.0.2.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.56

🇰🇷 210.222.46.15

🇮🇳 182.95.103.74

🇮🇳 103.180.213.153

🇮🇩 103.155.47.102

🇷🇴 94.156.152.50

🇷🇺 91.133.6.3

🇩🇪 91.92.240.42

🇨🇦 85.217.149.40

🇱🇹 62.60.130.139

🇺🇸 23.238.60.164

🇷🇴 193.46.255.86

🇪🇸 185.9.193.111

🇨🇳 183.158.241.110

🇸🇬 101.47.8.187

🇳🇱 45.148.10.141

🇰🇷 34.47.123.55

🇬🇧 2a06:4880:c000::dd

🇬🇪 195.54.179.151

🇩🇪 167.94.146.41