JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.12.251

65.111.12.251 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.12.251

Whois 65.111.12.251

IP Abuse Reports for 65.111.12.251:

This IP address has been reported a total of 47 times from 26 distinct sources. 65.111.12.251 was first reported on July 2nd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MusicLibrary	2026-07-10 22:22:24 (2 days ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇫🇷 dynamix	2026-06-26 00:06:48 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇫🇷 suble.org	2026-06-06 18:36:17 (1 month ago)	65.111.12.251 - - [06/Jun/2026:20:36:17 +0200] "GET http://suble.net/wp-json/gravitysmtp/v1/tests/mo ... show more 65.111.12.251 - - [06/Jun/2026:20:36:17 +0200] "GET http://suble.net/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 301 668 "-" "curl/8.7.1" ... show less	Bad Web Bot
🇱🇻 garmtech.com	2026-05-23 01:45:31 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-45.65.111.12.251.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-45.65.111.12.251.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (3 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:44 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-23 19:26:30 (6 months ago)	wordpress-trap	Web App Attack
🇧🇪 cmbplf	2025-12-13 20:24:06 (6 months ago)	14.843 requests with url.path */xmlrpc.php	Brute-Force Bad Web Bot
Anonymous	2025-12-10 07:24:05 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 10:18:09 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:18:02.287886 2025] [security2:error] [pid 14862:tid 14862] [client 65.111.12.251:52031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.marjorierosenberg.com"] [uri "/.git/HEAD"] [unique_id "aSbT2o1GlMZPdZwNaHn6GQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:24:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:24:08.448958 2025] [security2:error] [pid 13111:tid 13150] [client 65.111.12.251:12177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.markatosphoto.com"] [uri "/.env"] [unique_id "aSadCCv-PRieONCNNDIygAAAAUU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:51:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:51:51.020886 2025] [security2:error] [pid 29282:tid 29282] [client 65.111.12.251:26427] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.battlestem.com"] [uri "/.git/HEAD"] [unique_id "aSaVd_mEKDdliQs9HFkVuQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:21:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:21:11.015329 2025] [security2:error] [pid 23696:tid 23696] [client 65.111.12.251:17637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.1cdn.com"] [uri "/.svn/wc.db"] [unique_id "aSZkF2J4FbJgTzbqOu_eWgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:45:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:45:17.722158 2025] [security2:error] [pid 25850:tid 25850] [client 65.111.12.251:12519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.artbyrt.com"] [uri "/.svn/wc.db"] [unique_id "aSZbrVDAhIlcspZOHuEJPwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:17:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.251 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:17:07.670185 2025] [security2:error] [pid 3365543:tid 3365661] [client 65.111.12.251:19937] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.councilofforeignministers.com"] [uri "/.env"] [unique_id "aSZVE2zJ-U6IElkF6xM7sQAAAcw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.166.206.195

🇨🇳 220.197.85.19

🇸🇪 196.247.225.211

🇳🇱 192.253.248.62

🇬🇧 192.248.150.180

🇳🇱 188.166.101.114

🇳🇱 188.166.101.61

🇬🇹 186.151.221.150

🇧🇪 185.245.255.113

🇺🇸 185.198.240.54

🇳🇱 185.93.89.72

🇨🇴 179.14.116.99

🇯🇴 176.29.81.105

🇺🇸 159.65.250.90

🇸🇪 155.4.245.222

🇺🇸 147.185.132.231

🇺🇸 144.225.124.188

🇨🇳 112.226.227.21

🇳🇱 104.248.81.143

🇸🇬 45.78.194.186