JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.20.207

65.111.20.207 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.20.207

Whois 65.111.20.207

IP Abuse Reports for 65.111.20.207:

This IP address has been reported a total of 20 times from 9 distinct sources. 65.111.20.207 was first reported on July 6th 2024, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-06-15 00:52:56 (9 hours ago)	Port scan detected on port 1881 (connection without data transfer)	Port Scan
🇺🇸 TPI-Abuse	2026-02-10 23:43:05 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 18:43:00.775604 2026] [security2:error] [pid 5822:tid 5822] [client 65.111.20.207:36409] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appsdips.com"] [uri "/site/.git/config"] [unique_id "aYvChFl0cFDKNKiqtAdBRwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-02-10 04:43:52 (4 months ago)	Try to access /test/.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:56:51 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:56:45.290085 2026] [security2:error] [pid 22920:tid 22920] [client 65.111.20.207:61841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1surplus.com"] [uri "/config/.env"] [unique_id "aYqsfcaxNyiWTPbNYQnkxAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:34:07 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:33:57.133202 2026] [security2:error] [pid 12746:tid 12793] [client 65.111.20.207:40519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kellenlee.com"] [uri "/dev/.git/config"] [unique_id "aYpu5S7qoT-4nEbOWPXd0wAAANI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-03 19:28:00 (7 months ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2025-10-16 21:03:01 (7 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇨🇭 backslash	2025-03-05 03:40:07 (1 year ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇨🇭 backslash	2025-02-03 05:40:14 (1 year ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 TPI-Abuse	2025-01-16 22:15:00 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 65.111.20.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 16 17:14:56.299131 2025] [security2:error] [pid 8011:tid 8011] [client 65.111.20.207:6059] [client 65.111.20.207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|frankcgill.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "frankcgill.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z4mE4AY1-Cay9pZ2akHLQwAAABk"], referer: https://frankcgill.com show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 MAGIC	2024-12-12 15:09:46 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2024-11-17 07:05:55 (1 year ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-10-27 02:53:39 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-10-12 03:20:33 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-09-24 23:44:23 (1 year ago)	WP Login Scan Activities	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4023:1009::12e

🇻🇳 112.137.143.2

🇧🇷 45.185.93.188

🇺🇸 35.161.85.155

🇪🇸 213.195.117.233

🇪🇨 205.235.2.176

🇷🇺 185.81.181.9

🇩🇪 167.94.146.40

🇳🇱 45.148.10.141

🇧🇷 43.164.196.114

🇻🇳 42.115.212.221

🇺🇸 34.182.184.122

🇺🇸 34.168.128.244

🇧🇷 201.94.145.176

🇷🇺 193.194.98.46

🇫🇷 163.172.172.163

🇺🇸 141.152.255.11

🇵🇰 139.135.41.173

🇺🇸 136.125.33.175

🇺🇸 130.131.161.238