JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.14.217

65.111.14.217 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.14.217

Whois 65.111.14.217

IP Abuse Reports for 65.111.14.217:

This IP address has been reported a total of 30 times from 16 distinct sources. 65.111.14.217 was first reported on June 28th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-07-10 11:55:55 (10 hours ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-07-09 01:09:33 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:02:46 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-05-11 09:15:33 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-05-11 08:33:00 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-06 16:25:35 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:43:50 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.14.217 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇱🇻 garmtech.com	2026-04-19 22:20:46 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:47 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-12-29 08:41:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:41:13.796499 2025] [security2:error] [pid 4526:tid 4526] [client 65.111.14.217:42887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silvermoonpizza.com"] [uri "/.git/HEAD"] [unique_id "aVI-qTYscI1pMvQMfXViqwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 04:59:59 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 23:59:54.147161 2025] [security2:error] [pid 10931:tid 10931] [client 65.111.14.217:10155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kalvannaawards.com"] [uri "/.git/HEAD"] [unique_id "aVIKyhjIl1dUa6RkbRhmVwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-29 04:57:27 (6 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-29 03:57:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.217 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:57:21.653728 2025] [security2:error] [pid 20674:tid 20674] [client 65.111.14.217:52685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatinnola.com"] [uri "/.svn/wc.db"] [unique_id "aVH8ITvl_D7NSCIAMwb72wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 04:12:51 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-17 00:43:50 (8 months ago)	GlobalProtect login attempts with user mbarket.	VPN IP Brute-Force

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 191.5.31.61

🇵🇱 176.53.159.197

🇵🇱 176.53.159.196

🇳🇱 91.92.40.240

🇺🇸 65.49.1.10

🇺🇸 195.250.29.165

🇦🇷 190.16.194.197

🇬🇧 35.203.211.210

🇺🇸 3.83.245.221

🇷🇴 2.57.121.112

🇨🇳 222.209.216.151

🇧🇷 205.210.31.235

🇩🇪 141.11.32.54

🇷🇺 138.124.77.177

🇹🇼 118.167.64.4

🇺🇸 20.163.15.174

🇹🇼 198.235.24.9

🇪🇬 197.120.26.157

🇺🇸 195.184.76.38

🇲🇽 189.240.44.9