JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.14.173

65.111.14.173 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.14.173

Whois 65.111.14.173

IP Abuse Reports for 65.111.14.173:

This IP address has been reported a total of 48 times from 26 distinct sources. 65.111.14.173 was first reported on July 18th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-13 11:32:42 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Thaliruth	2026-06-14 12:39:29 (1 month ago)	65.111.14.173 - - [14/Jun/2026:14:39:29 +0200] "GET /data/database.sql HTTP/1.1" 404 4625 "-" "Mozil ... show more 65.111.14.173 - - [14/Jun/2026:14:39:29 +0200] "GET /data/database.sql HTTP/1.1" 404 4625 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" ... show less	SQL Injection
🇩🇪 Bedios GmbH	2026-06-11 21:53:42 (1 month ago)	SQL backup theft attempt	Hacking
🇱🇻 garmtech.com	2026-04-26 18:10:08 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-10.65.111.14.173.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 21-10.65.111.14.173.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:41 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 08:07:42 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:07:32.469481 2025] [security2:error] [pid 30760:tid 30760] [client 65.111.14.173:54907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benlbrown.com"] [uri "/.git/HEAD"] [unique_id "aVI2xMLjwjMHAYzDMl3dZwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 07:47:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 02:47:18.362501 2025] [security2:error] [pid 9273:tid 9273] [client 65.111.14.173:10489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sirio-b.com"] [uri "/.env"] [unique_id "aVIyBr4wgxmYBJjt_TipAQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:33:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:33:37.646911 2025] [security2:error] [pid 12304:tid 12304] [client 65.111.14.173:45947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amoriotech.com"] [uri "/.git/HEAD"] [unique_id "aVIgwYyps9jIWRj-sI4iygAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:28:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:28:51.694264 2025] [security2:error] [pid 17868:tid 17868] [client 65.111.14.173:35999] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sutherlandyogastudio.com"] [uri "/.env"] [unique_id "aVIRk8329Q9gDLgOsWbX5gAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:04:51 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:04:45.139028 2025] [security2:error] [pid 22043:tid 22099] [client 65.111.14.173:24205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atechtransmission.com"] [uri "/.env"] [unique_id "aVIL7eo-JHkotc-RqBJVTAAAAVc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 00:13:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 19:13:23.391274 2025] [security2:error] [pid 2298:tid 2298] [client 65.111.14.173:53993] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gransla.com"] [uri "/.git/HEAD"] [unique_id "aVB2I8ELgdwhlYFwufTCXQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-27 23:43:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 18:43:05.503961 2025] [security2:error] [pid 27414:tid 27414] [client 65.111.14.173:16623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ozkanturker.com"] [uri "/.svn/wc.db"] [unique_id "aVBvCWH75IX8ynKpQZnsrAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Shaik Sai Meera	2025-12-27 23:10:13 (6 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 TPI-Abuse	2025-12-27 22:28:09 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.173 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 17:28:04.697831 2025] [security2:error] [pid 26538:tid 26538] [client 65.111.14.173:39251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icaruscreativearts.com"] [uri "/.git/HEAD"] [unique_id "aVBddEcNf2SzbUye1dLvjAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 2000cn.com.au	2025-12-27 21:29:47 (6 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 194.5.53.113

🇷🇴 193.46.255.86

🇻🇳 171.225.185.43

🇺🇸 147.185.132.143

🇺🇸 65.49.1.117

🇳🇱 45.156.87.147

🇳🇱 45.148.10.147

🇹🇿 41.59.64.54

🇨🇳 36.138.78.195

🇺🇸 2607:f8b0:4004:c1f::126

🇸🇬 143.198.208.150

🇹🇷 95.0.206.167

🇳🇱 93.174.95.106

🇺🇸 91.230.168.185

🇷🇴 72.5.43.62

🇺🇸 52.167.144.237

🇺🇸 44.128.174.186

🇨🇳 43.226.36.171

🇩🇪 213.209.159.113

🇹🇼 198.235.24.58