JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.250

65.111.2.250 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 35%: ?

35%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.250

Whois 65.111.2.250

IP Abuse Reports for 65.111.2.250:

This IP address has been reported a total of 36 times from 18 distinct sources. 65.111.2.250 was first reported on July 3rd 2024, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-24 08:36:46 (22 hours ago)	(wordpress) Failed wordpress login from 65.111.2.250 (US/United States/-): (CF_ENABLE)	Brute-Force
🇲🇽 octageeks.com	2026-07-23 04:10:20 (2 days ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 lostswordfish.com	2026-07-22 18:50:07 (2 days ago)	Wordfence waf block on registrymatters	Web App Attack
🇩🇪 georgengelmann	2026-07-22 18:48:42 (2 days ago)	Failed login attempt for [email protected]	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-06-23 04:54:39 (1 month ago)	Web App Attack	Web App Attack
🇵🇾 armandosaucedo.me	2026-06-14 00:28:04 (1 month ago)	Threat Intelligence via ARMTI, Web Attack: GET /wp-sitemap.xml	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-12 07:23:26 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:05 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇦🇺 MAGIC	2025-12-23 02:10:18 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2025-12-22 15:28:22 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:22:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:22:50.288875 2025] [security2:error] [pid 20455:tid 20455] [client 65.111.2.250:11313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.doubloonswap.com"] [uri "/.svn/wc.db"] [unique_id "aSbU-nEfVPqKbwUGbECSyQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:59:50 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:59:42.335713 2025] [security2:error] [pid 17828:tid 17828] [client 65.111.2.250:45911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.susanoneill.us"] [uri "/.svn/wc.db"] [unique_id "aSaXTiTTLcLfBBaaxMOHogAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:09:00 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:08:56.780097 2025] [security2:error] [pid 23142:tid 23142] [client 65.111.2.250:43757] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.scottcarper.com"] [uri "/.svn/wc.db"] [unique_id "aSZvSNAQz5YevTJsYgsmjAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:19:04 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:18:58.021081 2025] [security2:error] [pid 32003:tid 32018] [client 65.111.2.250:44655] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.gorealtors.com"] [uri "/.env"] [unique_id "aSZVgjKMur_mjuXzQQ9NVwAAAQ0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:59:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:59:18.808267 2025] [security2:error] [pid 21019:tid 21019] [client 65.111.2.250:29749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.wintercypher.com"] [uri "/.git/HEAD"] [unique_id "aSPYFiEjgHFOKB2-1ti7kgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.191.239.155

🇫🇮 147.185.133.11

🇮🇩 140.213.190.18

🇺🇸 71.6.134.229

🇬🇧 35.203.210.12

🇨🇳 211.99.113.162

🇩🇪 185.242.3.195

🇺🇸 162.216.149.123

🇮🇳 124.253.120.127

🇺🇸 100.52.184.87

🇳🇱 89.21.67.178

🇺🇸 66.93.227.197

🇳🇱 45.198.224.8

🇬🇧 35.203.211.140

🇨🇳 182.119.59.112

🇮🇩 180.254.67.100

🇨🇳 60.184.113.183

🇺🇸 52.176.211.73

🇳🇱 45.148.10.141

🇧🇪 34.140.125.2