JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.15.220

65.111.15.220 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.15.220

Whois 65.111.15.220

IP Abuse Reports for 65.111.15.220:

This IP address has been reported a total of 42 times from 20 distinct sources. 65.111.15.220 was first reported on June 27th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-05-16 02:37:53 (2 weeks ago)	(From [email protected]) Hi Stone Chiropractic Center LLC, I wanted to bump this in ... show more (From [email protected]) Hi Stone Chiropractic Center LLC, I wanted to bump this in case you missed it — I built an AI agent just for Stone Chiropractic Center LLC, trained on your website, Google info, and everything I could find. It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part. Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee. Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇱🇻 garmtech.com	2026-05-04 23:00:56 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-00.65.111.15.220.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 02-00.65.111.15.220.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇨🇭 4server	2026-04-18 12:43:07 (1 month ago)	[SatApr1814:43:00.6169912026][security2:error][pid3180716:tid3180739][client65.111.15.220:0]ModSecur ... show more [SatApr1814:43:00.6169912026][security2:error][pid3180716:tid3180739][client65.111.15.220:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"edelhaut.ch\"][uri\"/xmlrpc.php\"][unique_id\"aeN8VGJTworgBpIFrotfRQAAAJQ\"] show less	Hacking Web App Attack
Anonymous	2026-04-17 20:03:21 (1 month ago)	Forum/form spam	Web Spam
🇫🇷 masterguru	2026-04-03 11:01:43 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.15.220 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.15.220 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-04-01 21:52:32 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-52.65.111.15.220.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-52.65.111.15.220.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇫🇷 masterguru	2026-03-30 06:20:56 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.15.220 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.15.220 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-03-03 01:10:00 (3 months ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-02-21 19:33:45 (3 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-02-10 05:46:40 (3 months ago)	IM360 WAF: Old style account creation and modification in Joomla! MV:registration	Web App Attack
🇮🇹 VHosting	2025-12-23 18:45:27 (5 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-08 22:25:54 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-27 20:21:05 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 15:20:58.309063 2025] [security2:error] [pid 13045:tid 13055] [client 65.111.15.220:35143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "busybeerestaurant.com"] [uri "/.svn/wc.db"] [unique_id "aSiyqpw4Fizu8O7oXWH0MAAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:47:29 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.220 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:47:23.424210 2025] [security2:error] [pid 8620:tid 8620] [client 65.111.15.220:42243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ibiocat.com"] [uri "/.git/HEAD"] [unique_id "aSU029ifMuSGgISmHwqo5QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-25 03:53:18 (6 months ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.26.115.76

🇦🇷 190.114.116.91

🇨🇴 181.51.189.171

🇮🇶 62.201.239.245

🇭🇰 47.243.220.206

🇵🇱 2a00:1450:4025:802::125

🇺🇸 207.241.173.57

🇧🇷 205.210.31.220

🇸🇪 185.217.1.246

🇧🇷 177.154.91.100

🇧🇷 177.70.253.206

🇺🇸 173.239.214.148

🇺🇸 147.185.132.80

🇧🇩 103.65.240.34

🇺🇸 91.230.168.131

🇺🇸 74.7.244.19

🇸🇬 47.237.200.170

🇳🇱 45.148.10.121

🇺🇸 3.87.151.153

🇺🇸 192.119.33.126