JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.10.229

65.111.10.229 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 33%: ?

33%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.10.229

Whois 65.111.10.229

IP Abuse Reports for 65.111.10.229:

This IP address has been reported a total of 35 times from 18 distinct sources. 65.111.10.229 was first reported on July 10th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-07-25 08:24:49 (2 hours ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-24 05:46:18 (1 day ago)	Web App Attack	Web App Attack
🇺🇸 Mehmet_The_Script_Kiddie	2026-07-23 16:40:52 (1 day ago)	CloudFlare WAF REPORT: /sitemap_index.xml	Bad Web Bot Web App Attack
Anonymous	2026-07-23 06:38:10 (2 days ago)	WordPress Brute Force	Brute-Force
🇩🇪 stinpriza	2026-07-23 04:05:10 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-16 07:25:13 (1 week ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-12 04:51:34 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-09 00:04:07 (2 weeks ago)	Web App Attack	Web App Attack
🇩🇪 filstal.org	2026-06-28 16:30:29 (3 weeks ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-24 15:25:04 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:38 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 05:46:20 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 00:46:14.693366 2025] [security2:error] [pid 22836:tid 22836] [client 65.111.10.229:57447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elhosting.us"] [uri "/.git/HEAD"] [unique_id "aSVCpiZBV6mOvwoQx_eJ3wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:40:30 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:40:25.268198 2025] [security2:error] [pid 20731:tid 20731] [client 65.111.10.229:37437] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ldnstudios.com"] [uri "/.git/HEAD"] [unique_id "aSQoCWFw11J_4RjuN4pktAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:08:32 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:08:18.196506 2025] [security2:error] [pid 23683:tid 23683] [client 65.111.10.229:26737] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thecommonsenseeconomist.com"] [uri "/.env"] [unique_id "aSQggqrs5wKmnl13eds_vwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:22:08 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.10.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:22:04.660361 2025] [security2:error] [pid 4004:tid 4004] [client 65.111.10.229:17787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americashealthtalk.com"] [uri "/.git/HEAD"] [unique_id "aSP5jIc_6O-cM-dT6ArP8gAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a04:4e40:e000:0:b34:8e2:7832:5d8

🇸🇮 212.30.82.68

🇨🇦 167.114.36.136

🇬🇭 154.161.132.250

🇫🇮 147.185.133.180

🇲🇴 125.31.2.160

🇮🇩 103.166.10.244

🇺🇸 52.53.201.36

🇺🇸 45.156.129.88

🇬🇧 35.203.210.30

🇵🇰 223.123.73.193

🇩🇪 213.209.159.242

🇹🇷 212.108.107.87

🇨🇳 182.244.5.153

🇺🇦 176.121.1.237

🇺🇸 172.253.8.157

🇺🇸 162.216.149.108

🇰🇷 112.184.40.215

🇨🇳 112.74.160.57

🇫🇷 85.217.140.2