JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.112

65.111.2.112 was found in our database!

This IP was reported 58 times. Confidence of Abuse is 31%: ?

31%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.112

Whois 65.111.2.112

IP Abuse Reports for 65.111.2.112:

This IP address has been reported a total of 58 times from 30 distinct sources. 65.111.2.112 was first reported on July 18th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 CELOS-SOC	2026-09-17 22:30:59 (3 days ago)	Multiple Unauthorized VPN Login Attempts	Hacking Brute-Force
Anonymous	2026-09-08 00:40:28 (1 week ago)	Web scanner: GET /wp-login.php	Web App Attack Hacking
🇨🇭 ALPHANET	2026-09-07 09:56:05 (1 week ago)	web exploits	Hacking Exploited Host Web App Attack
🇨🇿 lp	2026-09-04 04:50:14 (2 weeks ago)	Unauthorized VPN login attempts: 10 attempts were recorded from 65.111.2.112 2026-09-04T06:28:14+02: ... show more Unauthorized VPN login attempts: 10 attempts were recorded from 65.111.2.112 2026-09-04T06:28:14+02:00 vpn Access-Reject 'lars' station: 65.111.2.112 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-04T06:29:57+02:00 vpn Access-Reject 'suser' station: 65.111.2.112 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-04T06:31:36+02:00 vpn Access-Reject 'scanner' station: 65.111.2.112 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-04T06:33:22+02:00 vpn Access-Reject 'sebastien' station: 65.111.2.112 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-04T06:35:07+02:00 vpn Access-Reject 'nicolene' station: 65.111.2.112 auth-type: - realm: vse.cz nas: <redacted> c show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2026-09-03 06:48:08 (2 weeks ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2026-09-03 06:48:08 (2 weeks ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇫🇷 Sklurk	2026-08-16 01:10:54 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 iNetWorker	2026-05-21 17:46:41 (3 months ago)	trolling for resource vulnerabilities	Web App Attack
🇫🇷 vtchost.com	2026-05-13 19:06:36 (4 months ago)	vtchost.com:80 65.111.2.112 - - [13/May/2026:21:06:36 +0200] "GET http://vtchost.com/.git/HEAD HTTP/ ... show more vtchost.com:80 65.111.2.112 - - [13/May/2026:21:06:36 +0200] "GET http://vtchost.com/.git/HEAD HTTP/1.1" 418 215 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 MM-bot	2026-05-13 01:24:58 (4 months ago)	URL-probe: HTTP/1.1 GET request on /.git/HEAD (2026-05-13 03:24:58 UTC+2)	Web App Attack Hacking
🇨🇭 4server	2026-05-11 09:50:02 (4 months ago)	[MonMay1111:49:58.5406262026][security2:error][pid196243:tid196264][client65.111.2.112:0]ModSecurity ... show more [MonMay1111:49:58.5406262026][security2:error][pid196243:tid196264][client65.111.2.112:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"probuild.ch\"][uri\"/.aws/credentials\"][unique_id\"agGmRjFvM9daY_VAnGojFQAAAJM\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-05-09 11:36:04 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-07 01:07:04 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-02 00:51:07 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-01 10:41:40 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.112 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 58 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇴 186.146.19.140

🇺🇸 172.206.227.146

🇲🇽 154.200.140.143

🇲🇬 154.120.133.86

🇺🇸 104.152.57.231

🇨🇳 103.219.32.239

🇱🇹 62.60.130.253

🇺🇸 34.186.15.229

🇨🇱 34.176.76.8

🇮🇳 20.219.91.90

🇺🇸 5.253.38.204

🇷🇴 2.57.121.25

🇺🇸 199.102.218.59

🇨🇱 186.78.168.136

🇻🇳 171.244.142.205

🇷🇺 155.212.17.174

🇮🇳 144.24.111.128

🇻🇳 115.78.73.106

🇮🇩 112.78.134.58

🇮🇶 91.217.133.87