JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.244

65.111.0.244 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 2%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.244

Whois 65.111.0.244

IP Abuse Reports for 65.111.0.244:

This IP address has been reported a total of 36 times from 19 distinct sources. 65.111.0.244 was first reported on July 9th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 librebit	2026-05-19 00:51:37 (2 weeks ago)	Brute force	Brute-Force
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:15 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-27 21:33:11 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 16:33:06.466390 2025] [security2:error] [pid 23265:tid 23265] [client 65.111.0.244:49075] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billhoy.com"] [uri "/.env"] [unique_id "aVBQkjyu2Oze5rnfmoW4IQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 19:58:47 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 14:58:42.580980 2025] [security2:error] [pid 7936:tid 7936] [client 65.111.0.244:32167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "freedomforcefive.com"] [uri "/.env"] [unique_id "aVA6cs08mXQohcDw3MeDkgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 18:50:59 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 13:50:55.759480 2025] [security2:error] [pid 4421:tid 4509] [client 65.111.0.244:16811] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexanderwarnow.com"] [uri "/.svn/wc.db"] [unique_id "aVAqjznhhmbIUOyJaolo1AAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 16:08:13 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 11:08:08.233097 2025] [security2:error] [pid 14310:tid 14310] [client 65.111.0.244:39173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "criticalthinkinginbusiness.com"] [uri "/.env"] [unique_id "aVAEaLWtHMizeuugbiSg6wAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-27 14:34:10 (5 months ago)	"GET /.git/HEAD HTTP/1.1"	Hacking Web App Attack
🇷🇸 Smel	2025-12-03 12:52:54 (6 months ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇺🇸 nowyouknow	2025-11-20 02:15:20 (6 months ago)	(From [email protected]) Are you searching for a job that can be done right away? If so ... show more (From [email protected]) Are you searching for a job that can be done right away? If so, countless businesses are hiring website chat support agents - no experience is needed, as full training will be provided. Click here to complete your application if you are interested. -----> THEmoneyfromhome.com show less	Phishing Web Spam
Anonymous	2025-11-14 02:58:58 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 12:43:16 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:40:49	Port Scan Brute-Force Exploited Host Web App Attack
🇫🇷 applemooz	2025-11-01 10:54:02 (7 months ago)	WordPress XMLRPC Brute Force Attacks ...	Brute-Force Web App Attack
Anonymous	2025-10-26 20:07:58 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.26 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-22 22:11:42 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.22 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2025-10-22 14:20:02 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-20.65.111.0.244.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 17-20.65.111.0.244.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 95.169.173.32

🇫🇷 89.89.197.171

🇸🇬 68.183.236.1

🇧🇬 193.24.211.107

🇺🇸 185.92.182.129

🇮🇳 122.176.156.82

🇺🇸 104.168.146.33

🇦🇪 5.107.207.182

🇻🇳 183.91.186.36

🇺🇸 104.168.55.180

🇷🇺 79.104.0.82

🇺🇸 66.228.53.136

🇧🇷 187.76.245.170

🇷🇺 185.206.167.215

🇷🇺 176.120.22.113

🇲🇾 175.137.198.138

🇻🇳 103.166.184.148

🇦🇿 82.194.21.139

🇩🇪 64.89.163.170

🇭🇰 45.78.22.106