JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.21.190

65.111.21.190 was found in our database!

This IP was reported 22 times. Confidence of Abuse is 9%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.21.190

Whois 65.111.21.190

IP Abuse Reports for 65.111.21.190:

This IP address has been reported a total of 22 times from 12 distinct sources. 65.111.21.190 was first reported on July 8th 2024, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 Subnet Phantom Veil	2026-07-05 10:31:41 (16 hours ago)	[Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatic ... show more [Security Alert] Targeted scanning for WordPress vulnerabilities has been detected. Access automatically blocked, and the IP Address banned. [Method]: => GET. [Request]: => /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings. Access revoked. [User-Agent]: curl/8.7.1. [OS]: Unknown. [IP Address]: 65.111.21.190. [Date]: 2026-07-05 11:22:06 UTC. show less	Bad Web Bot DDoS Attack Hacking Port Scan Web App Attack
🇫🇷 Sklurk	2026-06-23 05:17:49 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-17 03:14:12 (2 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-01-26 19:30:51 (5 months ago)	wordpress-trap	Web App Attack
🇱🇻 garmtech.com	2026-01-25 16:06:49 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇪🇸 10dencehispahard SL	2026-01-23 07:13:28 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇨🇭 backslash	2025-12-31 02:50:10 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇮🇹 VHosting	2025-12-28 23:55:06 (6 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2025-12-24 20:22:26 (6 months ago)	wordpress-trap	Web App Attack
🇫🇷 mrcrassi	2025-12-03 21:37:55 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 07:53:13 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 02:53:07.469703 2025] [security2:error] [pid 27454:tid 27454] [client 65.111.21.190:55435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.conversationtalentnetwork.com"] [uri "/.env"] [unique_id "aSax4_13N4wNxgUdkow81wAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:03:32 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:03:26.268252 2025] [security2:error] [pid 4740:tid 4740] [client 65.111.21.190:10389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.villasenor.org"] [uri "/.git/HEAD"] [unique_id "aSaKHo-t2GkdVgpC1Rl8CgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:10:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:10:41.566273 2025] [security2:error] [pid 16044:tid 16044] [client 65.111.21.190:35285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gabosoftware.com"] [uri "/.git/HEAD"] [unique_id "aSZvsU9voaxqeLwIWWRT3QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:55:07 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:55:00.253243 2025] [security2:error] [pid 1008:tid 1008] [client 65.111.21.190:55873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.eye7graphics.com"] [uri "/.git/HEAD"] [unique_id "aSZd9H94WJIJuS7pES-eSQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:10:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:10:16.902953 2025] [security2:error] [pid 19442:tid 19442] [client 65.111.21.190:18049] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.now-app.space"] [uri "/.git/HEAD"] [unique_id "aSZTePOw2gKKzLALmlGDwgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 22 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.197.85.152

🇺🇸 207.97.180.203

🇧🇪 198.235.24.179

🇺🇸 198.20.67.203

🇺🇸 195.184.76.201

🇮🇩 182.23.5.226

🇧🇷 177.30.64.65

🇨🇳 115.57.243.186

🇨🇳 111.9.22.102

🇨🇳 110.179.80.144

🇨🇳 103.219.32.239

🇫🇷 91.231.89.141

🇳🇱 91.92.40.7

🇧🇬 79.124.56.202

🇧🇷 45.188.187.182

🇺🇸 44.47.65.120

🇺🇸 2600:1900:4120:e3fb:0:76::

🇺🇸 216.132.142.50

🇺🇸 185.172.53.104

🇺🇸 172.245.225.106