JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.116

65.111.2.116 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.116

Whois 65.111.2.116

IP Abuse Reports for 65.111.2.116:

This IP address has been reported a total of 23 times from 13 distinct sources. 65.111.2.116 was first reported on June 27th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-11 01:06:04 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-07 16:10:50 (1 month ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-05-17 05:25:45 (3 months ago)	Brute force	Brute-Force
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇬🇧 relianoid.com	2026-03-02 01:32:32 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇬🇧 relianoid.com	2026-02-23 07:45:54 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2026-01-13 20:10:26 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 15:10:16.749984 2026] [security2:error] [pid 9657:tid 9657] [client 65.111.2.116:19209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brainwavecenters.com"] [uri "/.svn/wc.db"] [unique_id "aWamqHMWpEAGq4CbsBhV0gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-31 13:05:08 (7 months ago)	wordpress-trap	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:32 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-26 09:34:26 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:34:23.682078 2025] [security2:error] [pid 4440:tid 4440] [client 65.111.2.116:33129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amyisms.com.utilis.net"] [uri "/.git/HEAD"] [unique_id "aSbJn4BdBcpOGELpV8CzmQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 09:12:14 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 04:12:07.552307 2025] [security2:error] [pid 16488:tid 16488] [client 65.111.2.116:28633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.superzilla.com"] [uri "/.git/HEAD"] [unique_id "aSbEZ9DZIVJWOZ64K7_5ZwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 06:04:01 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:03:57.871451 2025] [security2:error] [pid 4003:tid 4003] [client 65.111.2.116:50229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rodeo.bickleton.org"] [uri "/.env"] [unique_id "aSaYTSZhSXSM5q0gIe0ILgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:43:29 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:43:22.218974 2025] [security2:error] [pid 17261:tid 17261] [client 65.111.2.116:33769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.infolinkqr.com"] [uri "/.git/HEAD"] [unique_id "aSZNKiNjS-zPV928lsA48AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:12:36 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:12:33.800511 2025] [security2:error] [pid 4731:tid 4731] [client 65.111.2.116:36215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gisresults.com"] [uri "/.git/HEAD"] [unique_id "aSUssfgYEgBP8ZeAoQs1VAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:54:53 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:54:48.261542 2025] [security2:error] [pid 10695:tid 10817] [client 65.111.2.116:40703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.chadcentral.com"] [uri "/.env"] [unique_id "aSPzKCFZz-lT68YT4kPH0gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.124.199.105

🇺🇦 31.128.76.143

🇷🇺 178.177.40.29

🇨🇳 116.52.54.99

🇳🇱 81.22.132.64

🇺🇸 40.77.167.28

🇩🇪 193.124.20.230

🇺🇸 185.191.171.18

🇺🇦 176.102.192.245

🇺🇸 172.212.200.96

🇺🇸 162.216.149.51

🇩🇿 154.241.29.8

🇸🇬 114.119.137.105

🇮🇩 103.155.197.227

🇺🇸 100.29.192.86

🇷🇴 92.118.39.77

🇷🇴 92.118.39.49

🇳🇱 91.92.47.42

🇳🇱 45.148.10.120

🇻🇪 38.61.193.150