JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.185

65.111.2.185 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 3%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.185

Whois 65.111.2.185

IP Abuse Reports for 65.111.2.185:

This IP address has been reported a total of 40 times from 17 distinct sources. 65.111.2.185 was first reported on June 27th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-17 02:14:57 (6 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-16 01:11:58 (1 week ago)	Web App Attack	Web App Attack
🇩🇪 LRob	2026-06-22 19:17:33 (2 months ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-04-18 22:11:05 (4 months ago)	Forum/form spam	Web Spam
Anonymous	2026-03-08 20:56:20 (5 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-13 08:55:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:55:26.384955 2026] [security2:error] [pid 9152:tid 9152] [client 65.111.2.185:27943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamanchaorchards.com"] [uri "/backend/.env"] [unique_id "aY7m_iRIQukLSJPH_xCNKQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-13 06:05:32 (6 months ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:16:25 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:16:21.739932 2026] [security2:error] [pid 2351342:tid 2351342] [client 65.111.2.185:44281] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kneupper.com"] [uri "/backend/.env"] [unique_id "aY6zpdXqAYNDkETOoj6g8AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2026-02-13 04:48:40 (6 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:08:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:08:49.385412 2026] [security2:error] [pid 23707:tid 23707] [client 65.111.2.185:10605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingmanrents.com"] [uri "/app/.env"] [unique_id "aY6j0YTtQLlJGbhaxEdlxgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:46:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:46:41.060658 2026] [security2:error] [pid 26295:tid 26295] [client 65.111.2.185:64179] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killeramps.com"] [uri "/dev/.git/config"] [unique_id "aY6eoadvKKJtfy3j09jBvgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:58:17 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:58:12.756795 2026] [security2:error] [pid 29266:tid 29266] [client 65.111.2.185:28771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kbalan.com"] [uri "/test/.git/config"] [unique_id "aY6FNP-LGZw-3LZmxkbnPgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:16:12 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:16:05.255906 2026] [security2:error] [pid 30846:tid 30846] [client 65.111.2.185:43503] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karieva.com"] [uri "/test/.git/config"] [unique_id "aY57Vdv19kbTK8GJPLSWngAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 23:16:22 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.185 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 18:16:16.577778 2026] [security2:error] [pid 10620:tid 10647] [client 65.111.2.185:11831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventuresdotcom.com"] [uri "/.git/config"] [unique_id "aY5fQA5L8XVhr8ldDXmiXwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-12 23:01:21 (6 months ago)	Auto-ban: >3000 req/min op 2026-02-12	Hacking Web App Attack SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.94

🇦🇷 190.55.112.25

🇦🇷 186.152.165.56

🇦🇷 153.67.183.170

🇳🇱 45.148.10.151

🇮🇷 217.60.255.130

🇧🇴 190.129.122.12

🇦🇷 186.19.22.49

🇺🇸 161.35.53.253

🇺🇸 104.209.144.33

🇺🇸 66.175.220.105

🇺🇸 66.132.195.124

🇫🇷 2400:cb00:1038:1000:aed5:858c:5430:e918

🇳🇱 167.99.209.241

🇺🇸 137.184.94.195

🇳🇱 80.82.65.72

🇺🇦 77.52.70.154

🇺🇸 54.157.101.216

🇸🇬 47.128.48.1

🇺🇸 44.215.219.236