JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.47

65.111.2.47 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 28%: ?

28%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.47

Whois 65.111.2.47

IP Abuse Reports for 65.111.2.47:

This IP address has been reported a total of 36 times from 20 distinct sources. 65.111.2.47 was first reported on March 27th 2025, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 lp	2026-09-03 19:50:09 (4 hours ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 65.111.2.47 2026-09-03T21:40:43+02:00 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 65.111.2.47 2026-09-03T21:40:43+02:00 vpn Access-Reject 'fusel007' station: 65.111.2.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-03T21:43:51+02:00 vpn Access-Reject 'fuser001' station: 65.111.2.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-09-01 08:36:26 (2 days ago)	2026-09-01T18:36:25.916227+10:00 ip-172-26-1-7 wordpress(stkildashule.org.au)[221792]: XML-RPC authe ... show more 2026-09-01T18:36:25.916227+10:00 ip-172-26-1-7 wordpress(stkildashule.org.au)[221792]: XML-RPC authentication attempt for unknown user david.pueray from 65.111.2.47 ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-31 09:51:30 (3 days ago)	[31/Aug/2026:12:51:30 +0300] -- 65.111.2.47 Ban reason: Scanner [CMS_GENERIC] \| Request: GET http:// ... show more [31/Aug/2026:12:51:30 +0300] -- 65.111.2.47 Ban reason: Scanner [CMS_GENERIC] \| Request: GET http://elconf.kpi.ua/wp-content/uploads/2016/04/Programa_Elektronika_2016.pdf HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-08-10 00:50:09 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-02 01:07:46 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-01 00:15:08 (1 month ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-05-17 03:55:22 (3 months ago)	Brute force	Brute-Force
🇮🇹 LTM	2026-05-10 06:20:02 (3 months ago)	DNS - Multiple recursive query request denied	DNS Poisoning Hacking
🇵🇱 sefinek.net	2026-03-24 17:43:03 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2026-02-16 04:12:02 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: / \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-01-01 22:50:30 (8 months ago)	Kingcopy(AI-IDS):IP is Probing for Wordpress vulnerabilities WTF:Banned	Hacking Bad Web Bot Web App Attack
🇫🇷 Jean Valjean	2025-12-30 23:20:18 (8 months ago)	Fail2ban Caboom : xmlrpc.php Abuse	SQL Injection Web App Attack
🇩🇪 ger-stg-sifi1	2025-12-29 12:25:45 (8 months ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 12:24:39 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.47 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 07:24:32.585541 2025] [security2:error] [pid 8476:tid 8476] [client 65.111.2.47:43297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stardancertantra.com"] [uri "/.git/HEAD"] [unique_id "aVJzAAuKct0LdYeh0eTfXwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 12:05:54 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.47 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 07:05:50.319003 2025] [security2:error] [pid 3589:tid 3607] [client 65.111.2.47:49105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flipkimmel.com"] [uri "/.svn/wc.db"] [unique_id "aVJunhYHTuZ-V5QGqWk9cgAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.29.202.89

🇺🇸 158.94.187.22

🇵🇰 139.135.44.52

🇨🇳 118.250.104.119

🇺🇸 43.130.37.243

🇯🇵 35.221.77.167

🇬🇧 2a06:4880::b

🇫🇷 2a02:c207:2344:2306::1

🇬🇷 2a02:586:4e08:b300:1eaf:4aff:fecc:3b02

🇨🇦 216.26.234.109

🇺🇸 205.210.31.69

🇮🇶 185.203.53.93

🇦🇷 181.94.73.195

🇧🇷 177.129.229.245

🇿🇦 165.73.183.24

🇺🇸 161.123.82.191

🇺🇸 148.153.188.246

🇻🇳 125.212.235.194

🇰🇷 125.130.102.172

🇮🇳 122.187.244.198