JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.15.237

65.111.15.237 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.15.237

Whois 65.111.15.237

IP Abuse Reports for 65.111.15.237:

This IP address has been reported a total of 33 times from 17 distinct sources. 65.111.15.237 was first reported on July 10th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:59:41 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-10 17:57:28 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:43:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:43:24.903552 2025] [security2:error] [pid 243932:tid 243977] [client 65.111.15.237:17597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kaukabsiddique.newtrendmag.org"] [uri "/.git/HEAD"] [unique_id "aSQovFc8EtVRkmyAMesCrwAAAQw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:48:07 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:47:59.439858 2025] [security2:error] [pid 30643:tid 30643] [client 65.111.15.237:44425] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.specialtycomputer.com"] [uri "/.svn/wc.db"] [unique_id "aSQNr6-sfN2Ukml09lk-QAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:47:39 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:47:33.839519 2025] [security2:error] [pid 28879:tid 28879] [client 65.111.15.237:55297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.alpipac.org"] [uri "/.git/HEAD"] [unique_id "aSPjZVY0aHVeRPmwT-rp1gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:31:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:30:49.031565 2025] [security2:error] [pid 6096:tid 6096] [client 65.111.15.237:15743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.brent23.com"] [uri "/.git/HEAD"] [unique_id "aSPfeZpD3H0FwJHQBgeKzwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 12:14:34 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇨🇦 wil.com	2025-10-29 03:49:25 (7 months ago)	GlobalProtect login attempts with user grimmera.	VPN IP Brute-Force
🇨🇦 wil.com	2025-10-29 01:51:42 (7 months ago)	GlobalProtect login attempts with user mfahrigne.	VPN IP Brute-Force
Anonymous	2025-10-08 05:06:46 (8 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.08 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.08 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-03 15:34:38 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.03 is noted in report timestamp show less	Hacking Brute-Force
🇦🇹 urnilxfgbez	2025-10-02 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇦🇹 urnilxfgbez	2025-10-01 22:45:00 (8 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇧🇷 hostseries	2025-09-30 04:20:08 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.178.37.19

🇬🇧 172.68.229.132

🇳🇱 190.2.135.111

🇨🇳 124.90.50.30

🇮🇩 103.101.218.20

🇫🇷 85.217.140.9

🇫🇷 85.204.70.118

🇨🇱 34.176.140.236

🇻🇳 14.191.145.238

🇳🇱 204.76.203.15

🇪🇬 197.44.15.210

🇺🇸 195.184.76.25

🇧🇿 190.197.31.229

🇨🇳 150.255.89.35

🇨🇳 125.124.175.173

🇷🇺 94.25.50.130

🇫🇷 85.204.70.100

🇮🇳 49.207.243.241

🇲🇽 45.230.172.125

🇳🇱 45.148.10.152