JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.12.202

65.111.12.202 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 21%: ?

21%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.12.202

Whois 65.111.12.202

IP Abuse Reports for 65.111.12.202:

This IP address has been reported a total of 62 times from 23 distinct sources. 65.111.12.202 was first reported on July 17th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-06-14 09:34:54 (5 days ago)	Blocked by UFW on MVI [443/tcp] \| SPT: 19459 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.c ... show more Blocked by UFW on MVI [443/tcp] \| SPT: 19459 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Sklurk	2026-06-11 11:37:36 (1 week ago)	Web App Attack	Web App Attack
🇺🇸 mnsf	2026-06-10 19:06:34 (1 week ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇬🇧 relianoid.com	2026-03-24 18:21:50 (2 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 mw	2026-02-16 00:00:18 (4 months ago)	GET /.env HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:34:05 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:33:59.460841 2026] [security2:error] [pid 8949:tid 8949] [client 65.111.12.202:22583] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sguard.co"] [uri "/.git/config"] [unique_id "aZG9N1IuLhlHQWNRenJGTwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:48:49 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:48:46.937866 2026] [security2:error] [pid 5574:tid 5574] [client 65.111.12.202:32619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paihianz.com"] [uri "/api/.env"] [unique_id "aZGynnWGsUen6StHD3joYgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 11:11:44 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 06:11:39.018494 2026] [security2:error] [pid 585268:tid 585268] [client 65.111.12.202:48209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "purelywhimsical.com"] [uri "/.env.staging"] [unique_id "aZGp61gf95dQ1fFJ7UgJfwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 07:04:41 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 02:04:33.092189 2026] [security2:error] [pid 6223:tid 6235] [client 65.111.12.202:9151] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychclinicforchange.com"] [uri "/api/.git/config"] [unique_id "aZFwAfZ1Qi5ljpkNddWIWwAAAIg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-02-15 06:45:38 (4 months ago)	Try to access /admin/.env	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:39:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:39:03.228805 2026] [security2:error] [pid 9871:tid 9871] [client 65.111.12.202:16271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scsurfside.net"] [uri "/admin/.env"] [unique_id "aZFqB6mHoUSt_VAH675vAAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:14:08 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:14:03.108171 2026] [security2:error] [pid 26600:tid 26600] [client 65.111.12.202:55993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schunagroup.com"] [uri "/admin/.env"] [unique_id "aZFkK5J6DEjc9oAMyu-uegAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 05:38:43 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.202 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 00:38:40.696152 2026] [security2:error] [pid 2064:tid 2064] [client 65.111.12.202:59033] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scala-global.com"] [uri "/.env"] [unique_id "aZFb4JPJ847cYEPbDjEaOwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-02-15 05:23:01 (4 months ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-02-15 05:17:57 (4 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 104.208.108.166

🇮🇳 103.206.97.155

🇷🇺 91.211.236.106

🇮🇹 79.3.96.178

🇨🇳 39.144.78.177

🇮🇳 202.148.58.163

🇩🇿 193.194.91.218

🇨🇳 120.48.111.71

🇳🇱 91.92.241.196

🇳🇱 91.92.40.19

🇬🇧 89.37.172.150

🇱🇹 81.30.98.49

🇺🇸 52.54.123.236

🇺🇸 45.156.129.92

🇧🇪 35.210.61.208

🇺🇸 2600:1f18:3120:f502:28cb:195d:9f6:44cf

🇳🇱 216.57.110.81

🇳🇱 176.65.139.217

🇿🇦 147.136.65.250

🇦🇹 109.70.100.5