JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.14.9

65.111.14.9 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 52%: ?

52%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.14.9

Whois 65.111.14.9

IP Abuse Reports for 65.111.14.9:

This IP address has been reported a total of 34 times from 17 distinct sources. 65.111.14.9 was first reported on July 12th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GabrielJST	2026-07-08 15:34:34 (2 days ago)	(wordpress) Failed wordpress login from 65.111.14.9 (US/United States/-)	Brute-Force
🇲🇽 octageeks.com	2026-07-08 04:09:35 (2 days ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-07-08 01:21:15 (2 days ago)	Wordpress login attempts	Brute-Force
🇺🇸 TPI-Abuse	2026-07-07 02:52:26 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 22:52:22.701979 2026] [security2:error] [pid 17503:tid 17503] [client 65.111.14.9:18061] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|humbliaslaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "humbliaslaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akxp5goqjzI1JwCWAGyzdQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 lostswordfish.com	2026-07-06 10:10:04 (4 days ago)	Wordfence waf block on registrymatters	Web App Attack
🇫🇷 Hippoline	2026-07-04 23:10:02 (5 days ago)	Jul 5 01:10:01 local wp(XXXX-B)[31178]: Authentication attempt for unknown user wpadminas from 65.1 ... show more Jul 5 01:10:01 local wp(XXXX-B)[31178]: Authentication attempt for unknown user wpadminas from 65.111.14.9 ... show less	Brute-Force Web App Attack
Anonymous	2026-07-04 02:58:42 (6 days ago)	Web attack blocked by Wordfence on mergel.nu (1 hit). Reported by CRMON.	Web App Attack
Anonymous	2026-07-01 17:49:31 (1 week ago)	[ns65.kdns.gr] httpd-login-spray-site: sites=www.iason-ceramics.gr; logs=/var/log/httpd/domains/iaso ... show more [ns65.kdns.gr] httpd-login-spray-site: sites=www.iason-ceramics.gr; logs=/var/log/httpd/domains/iason-ceramics.gr.log; samples=site_wide=true \| distinct_ips=17 \| /wp-login.php show less	Hacking Web App Attack
🇨🇭 backslash	2026-05-23 05:06:15 (1 month ago)		Bad Web Bot
Anonymous	2026-04-12 05:45:30 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇺🇸 TPI-Abuse	2026-02-18 03:49:02 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:48:57.207545 2026] [security2:error] [pid 22553:tid 22553] [client 65.111.14.9:37769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertmcatee.com"] [uri "/wp/.git/config"] [unique_id "aZU2qUK_VQxzCcXOTNLkdAAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 02:31:09 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 21:31:02.316237 2026] [security2:error] [pid 24368:tid 24368] [client 65.111.14.9:21165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rentadeandamioscdmx.com"] [uri "/.env.local"] [unique_id "aZUkZsRjwY19yqu211a3EAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:53:18 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.14.9 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:53:11.828339 2026] [security2:error] [pid 1497892:tid 1497892] [client 65.111.14.9:10979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pawlewicz.org"] [uri "/.env.local"] [unique_id "aZUNd6cc8W-ksaFBRWBEIgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-02-03 06:03:54 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.14.9 (US/United States/-): 1 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.14.9 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2025-12-27 13:01:57 (6 months ago)	2025-12-27T15:01:57.028804+02:00 zanati wp(www.sahpa.co.za)[193518]: Blocked authentication attempt ... show more 2025-12-27T15:01:57.028804+02:00 zanati wp(www.sahpa.co.za)[193518]: Blocked authentication attempt for [email protected] from 65.111.14.9 ... show less	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2a09:bac5:55fa:30c8::4dc:43

🇩🇪 207.154.250.9

🇮🇩 157.15.67.253

🇳🇱 51.15.110.3

🇳🇱 45.148.10.157

🇧🇩 45.120.115.150

🇹🇿 41.59.34.135

🇬🇧 35.203.210.35

🇸🇬 2a09:bac5:55fc:30c8::4dc:43

🇸🇬 2a09:bac1:6560:8::4dc:43

🇺🇦 178.83.5.55

🇺🇸 162.216.150.140

🇸🇬 103.250.10.18

🇸🇬 94.231.206.10

🇫🇷 85.217.140.34

🇧🇷 45.168.90.163

🇨🇳 42.48.38.177

🇸🇬 2a09:bac5:55f9:30c8::4dc:43

🇺🇸 205.210.31.98

🇺🇸 205.210.31.58