JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.247

65.111.2.247 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 16%: ?

16%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.247

Whois 65.111.2.247

IP Abuse Reports for 65.111.2.247:

This IP address has been reported a total of 36 times from 20 distinct sources. 65.111.2.247 was first reported on July 8th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-05-16 23:57:03 (2 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.2.247 2026-05-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.2.247 2026-05-16 09:37:21 / 2026-05-16 10:00:49 / 2026-05-16 09:40:22 / show less	Web App Attack
🇩🇪 Hazzard	2026-05-16 08:23:36 (2 weeks ago)	(wordpress) Failed wordpress login from 65.111.2.247 (US/United States/Virginia/Ashburn/-/[redacted] ... show more (wordpress) Failed wordpress login from 65.111.2.247 (US/United States/Virginia/Ashburn/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇳🇿 billyborsht	2026-05-15 23:05:26 (3 weeks ago)	2026-05-16T11:05:26.115041+12:00 southern wordpress(poetryinhell.org)[903899]: Authentication attemp ... show more 2026-05-16T11:05:26.115041+12:00 southern wordpress(poetryinhell.org)[903899]: Authentication attempt for unknown user @dmin from 65.111.2.247 ... show less	Hacking Web App Attack
🇫🇷 masterguru	2026-03-29 14:10:28 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.247 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.247 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-03-26 15:30:11 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.247 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.2.247 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-03-20 06:48:27 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2026-03-05 08:12:20 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.247 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:12:12.636526 2026] [security2:error] [pid 2915:tid 2920] [client 65.111.2.247:25429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/f0/6c52fa46e710a1345c7fcda8a785780ea9fca9"] [unique_id "aak63Gbdh7c6FWT9QFVM4wAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-02-20 17:36:44 (3 months ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (1020-123)	Web App Attack
Anonymous	2026-02-04 03:51:48 (4 months ago)	Forum/form spam	Web Spam
🇫🇷 mrcrassi	2025-12-25 23:52:59 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇦🇺 MAGIC	2025-12-19 00:06:03 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-25 03:18:23 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.2.247 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 65.111.2.247 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:18:17.900114 2025] [security2:error] [pid 27727:tid 27736] [client 65.111.2.247:57831] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|unitedonegroup.com\|F\|2"] [data ".php.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "unitedonegroup.com"] [uri "/config.php.old"] [unique_id "aSUf-feXMnwYTnmV60Pf6AAAAMc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 23:16:57 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇦🇺 weblite	2025-11-04 14:04:31 (7 months ago)	WP_XMLRPC_ABUSE WP_LOGIN_FAIL	Brute-Force Web App Attack
Anonymous	2025-10-29 14:44:25 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.226.232.42

🇰🇷 221.144.91.155

🇨🇳 106.75.189.53

🇲🇩 217.156.64.228

🇺🇸 208.84.100.71

🇺🇸 206.189.180.100

🇹🇼 198.235.24.106

🇦🇪 176.205.69.152

🇹🇭 147.50.103.212

🇬🇧 109.75.164.236

🇺🇸 107.172.204.15

🇨🇳 106.117.105.40

🇵🇰 103.134.2.20

🇺🇸 66.132.186.242

🇺🇸 45.8.19.194

🇺🇸 20.65.193.108

🇦🇹 213.225.38.154

🇨🇳 203.189.196.168

🇮🇩 202.10.41.249

🇺🇸 199.48.128.86