JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.70

65.111.2.70 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 88%: ?

88%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.70

Whois 65.111.2.70

IP Abuse Reports for 65.111.2.70:

This IP address has been reported a total of 55 times from 35 distinct sources. 65.111.2.70 was first reported on June 28th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 iNetWorker	2026-06-30 01:34:55 (1 day ago)	trolling for resource vulnerabilities	Web App Attack
🇩🇪 georgengelmann	2026-06-29 21:02:09 (1 day ago)	Failed login attempt for administrator	Brute-Force Web App Attack
Anonymous	2026-06-29 15:41:13 (2 days ago)	WordPress Brute Force	Brute-Force
Anonymous	2026-06-28 08:26:43 (3 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇲🇹 Malta	2026-06-26 11:59:26 (5 days ago)	65.111.2.70 - - [26/Jun/2026:13:59:26 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 65.111.2.70 - - [26/Jun/2026:13:59:26 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 ELYAZ	2026-06-26 00:24:57 (5 days ago)	(y4) Failed scan -byebye- from 65.111.2.70 (US/United States/-): (CF_ENABLE)	Hacking
🇬🇷 setupgr	2026-06-25 15:27:50 (6 days ago)	(mod_security) mod_security (id:900001) triggered by 65.111.2.70 (US/United States/Virginia/Ashburn/ ... show more (mod_security) mod_security (id:900001) triggered by 65.111.2.70 (US/United States/Virginia/Ashburn/-/[AS200373 DREI-K-TECH-GMBH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 18:27:48.452570 2026] [security2:error] [pid 358185:tid 358278] [client 65.111.2.70:12217] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "75"] [id "900001"] [msg "Blocked WP Login attempt on domain: mail.doityourself.gr"] [severity "CRITICAL"] [tag "security"] [hostname "mail.doityourself.gr"] [uri "/wp-login.php"] [unique_id "aj1I9DpPCootS5mrGd5rKgAAAYQ"], referer: https://mail.doityourself.gr/wp-login.php show less	Port Scan
🇺🇸 lostswordfish.com	2026-06-25 05:00:07 (6 days ago)	Wordfence waf block on wvrsol	Web App Attack
🇫🇷 ELYAZ	2026-06-23 19:29:57 (1 week ago)	(y4) Failed scan -byebye- from 65.111.2.70 (US/United States/-): (CF_ENABLE)	Hacking
🇩🇪 4server	2026-06-23 10:10:29 (1 week ago)	[TueJun2312:10:23.3519472026][security2:error][pid3016842:tid3016911][client65.111.2.70:0]ModSecurit ... show more [TueJun2312:10:23.3519472026][security2:error][pid3016842:tid3016911][client65.111.2.70:0]ModSecurity:Accessdeniedwithcode403$phase2$.OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded$TotalScore:5$\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"prstartup.ch\"][uri\"/wp-login.php\"][unique_id\"ajpbj-ySTR_hc-t3BmAjmQAAABY\"]\,referer:https://prstartup.ch/wp-login.php show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-06-23 08:41:42 (1 week ago)	65.111.2.70 - - [23/Jun/2026:10:40:21 +0200] "POST /wp-login.php HTTP/1.1" 200 2734 "https://learnin ... show more 65.111.2.70 - - [23/Jun/2026:10:40:21 +0200] "POST /wp-login.php HTTP/1.1" 200 2734 "https://learningladderzm.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 65.111.2.70 - - [23/Jun/2026:10:40:22 +0200] "POST /wp-login.php HTTP/1.1" 200 2227 "https://learningladderzm.com/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 65.111.2.70 - - [23/Jun/2026:10:41:30 +0200] "POST /wp-login.php HTTP/1.1" 200 2734 "https://learningladderzm.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 65.111.2.70 - - [23/Jun/2026:10:41:30 +0200] "POST /wp-login.php HTTP/1.1" 200 2227 "https://learningladderzm.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 65.111.2.70 - - [23/Jun/2026:10:41:4 ... show less	Brute-Force Web App Attack
🇫🇷 pm33	2026-06-23 08:30:54 (1 week ago)	Wordpress login attempts	Brute-Force
🇬🇧 spamverify.com	2026-06-22 16:04:21 (1 week ago)	Honeypot Hit: WordPress Login	Web Spam Blog Spam Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-06-22 01:44:37 (1 week ago)	(y4) Failed scan -byebye- from 65.111.2.70 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 SpaceHost-Server	2026-06-20 22:31:36 (1 week ago)		Brute-Force Web App Attack

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a01:e0a:a1a:c3a0:8959:5f01:114a:3f8a

🇻🇳 103.160.5.123

🇺🇸 34.228.104.231

🇨🇦 72.55.189.248

🇹🇼 198.235.24.65

🇲🇽 189.150.29.228

🇳🇱 185.223.235.34

🇨🇳 182.92.200.98

🇮🇳 117.205.3.26

🇮🇩 114.10.47.235

🇳🇬 102.90.103.126

🇨🇦 85.217.149.63

🇩🇪 69.5.169.45

🇺🇸 66.132.172.196

🇨🇳 1.13.246.253

🇰🇷 222.120.97.60

🇲🇰 188.44.20.24

🇺🇸 187.77.3.45

🇸🇬 152.32.218.149

🇮🇹 151.59.124.109