JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.14.103

65.111.14.103 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 43%: ?

43%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.14.103

Whois 65.111.14.103

IP Abuse Reports for 65.111.14.103:

This IP address has been reported a total of 42 times from 22 distinct sources. 65.111.14.103 was first reported on July 11th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-07-08 01:15:13 (18 hours ago)	Wordpress login attempts	Brute-Force
🇺🇸 lostswordfish.com	2026-07-06 10:10:04 (2 days ago)	Wordfence waf block on registrymatters	Web App Attack
🇺🇸 cwytech	2026-07-04 03:17:01 (4 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-login-lockdown-high.	Bad Web Bot Web App Attack
Anonymous	2026-07-03 23:15:58 (4 days ago)	Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.	Web App Attack
🇫🇷 ELYAZ	2026-07-03 12:46:55 (5 days ago)	(y4) Failed scan -byebye- from 65.111.14.103 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 ELYAZ	2026-07-01 22:57:21 (6 days ago)	(y4) Failed scan -byebye- from 65.111.14.103 (US/United States/-): (CF_ENABLE)	Hacking
Anonymous	2026-07-01 17:50:26 (1 week ago)	[ns65.kdns.gr] httpd-login-spray-site: sites=www.iason-ceramics.gr; logs=/var/log/httpd/domains/iaso ... show more [ns65.kdns.gr] httpd-login-spray-site: sites=www.iason-ceramics.gr; logs=/var/log/httpd/domains/iason-ceramics.gr.log; samples=site_wide=true \| distinct_ips=17 \| /wp-login.php show less	Hacking Web App Attack
🇩🇪 LRob	2026-06-24 01:32:23 (2 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇺🇸 octageeks.com	2026-02-24 05:08:00 (4 months ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
🇺🇸 TPI-Abuse	2026-02-11 00:16:44 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 19:16:38.289521 2026] [security2:error] [pid 31297:tid 31297] [client 65.111.14.103:53521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "apropa.org"] [uri "/api/.env"] [unique_id "aYvKZvMKA8hzOQis3qZSpwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 06:31:44 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 01:31:38.794052 2026] [security2:error] [pid 23556:tid 23556] [client 65.111.14.103:29205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilandman.com"] [uri "/api/.git/config"] [unique_id "aYrQypFvN3MV8XXB3yE3PQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:48:06 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:47:58.974026 2026] [security2:error] [pid 10334:tid 10334] [client 65.111.14.103:24825] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kitebeach.com"] [uri "/frontend/.env"] [unique_id "aYqqbovdS_zhBbbI1zkvaQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 i-turnradio.nl	2026-02-10 03:02:54 (4 months ago)	2026-02-10 04:02:54 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 02:16:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:16:26.874635 2026] [security2:error] [pid 1036083:tid 1036230] [client 65.111.14.103:35575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killasgarage.bike"] [uri "/config/.env"] [unique_id "aYqU-sSbPeRAhJWxyhGE8gAAAlY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:15:16 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.103 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:15:10.603282 2026] [security2:error] [pid 6557:tid 6557] [client 65.111.14.103:63195] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keepaustinnuts.com"] [uri "/.git/config"] [unique_id "aYpqftT02a6PhXERYDm9QgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.138.16.110

🇧🇷 152.243.94.70

🇺🇸 146.190.134.221

🇧🇷 143.95.214.121

🇨🇳 101.96.214.98

🇫🇷 91.231.89.228

🇳🇱 45.156.128.57

🇳🇱 45.156.87.204

🇻🇳 14.225.253.26

🇬🇧 217.154.45.93

🇫🇮 204.168.194.93

🇨🇳 180.76.202.69

🇺🇸 172.238.188.122

🇺🇸 157.230.229.88

🇨🇳 117.184.105.34

🇹🇷 78.186.188.115

🇺🇸 65.191.211.33

🇺🇸 64.225.17.153

🇱🇹 62.60.130.219

🇦🇺 45.134.20.116