JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.11.16

65.111.11.16 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.11.16

Whois 65.111.11.16

IP Abuse Reports for 65.111.11.16:

This IP address has been reported a total of 23 times from 14 distinct sources. 65.111.11.16 was first reported on July 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-04 02:01:59 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-01.65.111.11.16.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-01.65.111.11.16.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-04-30 00:55:23 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-55.65.111.11.16.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 03-55.65.111.11.16.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇮🇩 Burayot	2026-03-18 18:39:37 (2 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.11.16 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.11.16 (US/United States/-): 2 in the last 3600 secs show less	Web App Attack
Anonymous	2026-03-03 05:49:19 (3 months ago)	Forum/form spam	Web Spam
🇦🇺 MAGIC	2026-03-01 00:42:04 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 F242	2026-01-30 05:59:40 (4 months ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 03:34:29 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.11.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 65.111.11.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 22:34:24.529797 2026] [security2:error] [pid 3298:tid 3298] [client 65.111.11.16:14289] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|investorsfundingusa.com\|F\|2"] [data ".cfg"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "investorsfundingusa.com"] [uri "/wp-config.cfg"] [unique_id "aWsDQC-gaYcnyI-4Rob91wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 fbarela	2025-12-29 01:00:21 (5 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:15:00 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.11.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.11.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:14:54.917907 2025] [security2:error] [pid 7133:tid 7133] [client 65.111.11.16:38907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.lobstersupplier.com"] [uri "/.env"] [unique_id "aSQT_h2mDnBhZeRgeUT92AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:21:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.11.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.11.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:20:53.758325 2025] [security2:error] [pid 3227198:tid 3227198] [client 65.111.11.16:37795] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.croixlac.com"] [uri "/.env"] [unique_id "aSPPFTu_C57q40i7sUf1GAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 01:03:48 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇩🇪 Marc	2025-10-29 21:18:04 (7 months ago)		Brute-Force
🇨🇦 wil.com	2025-10-17 05:19:20 (7 months ago)	GlobalProtect login attempts with user amathial.	VPN IP Brute-Force
Anonymous	2025-10-13 16:26:21 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.13 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.13 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-06 14:55:11 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.235

🇳🇮 190.212.216.60

🇲🇰 188.44.20.34

🇰🇷 182.208.225.78

🇫🇮 147.185.133.31

🇮🇳 103.242.199.192

🇺🇸 91.230.168.72

🇪🇸 84.88.81.122

🇨🇳 58.54.33.126

🇲🇽 46.250.173.129

🇳🇱 45.148.10.147

🇺🇸 20.118.233.189

🇧🇷 205.210.31.244

🇺🇸 198.144.183.125

🇲🇽 189.181.24.83

🇳🇱 185.242.226.73

🇺🇸 181.214.48.205

🇳🇱 178.16.55.178

🇳🇱 176.65.148.242

🇺🇸 172.253.83.93