JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.21.42

65.111.21.42 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 34%: ?

34%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.21.42

Whois 65.111.21.42

IP Abuse Reports for 65.111.21.42:

This IP address has been reported a total of 17 times from 14 distinct sources. 65.111.21.42 was first reported on September 27th 2024, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ELYAZ	2026-07-24 03:46:13 (23 hours ago)	(wordpress) Failed wordpress login from 65.111.21.42 (BR/Brazil/-): (CF_ENABLE)	Brute-Force
Anonymous	2026-07-24 01:06:25 (1 day ago)	Trying to access config files	Web App Attack
🇺🇸 lostswordfish.com	2026-07-20 10:44:04 (4 days ago)	Wordfence waf block on restore georgia	Web App Attack
🇨🇭 4server	2026-07-20 07:16:20 (4 days ago)	[MonJul2009:16:16.7407862026][security2:error][pid522204:tid522235][client65.111.21.42:0]ModSecurity ... show more [MonJul2009:16:16.7407862026][security2:error][pid522204:tid522235][client65.111.21.42:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"368\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"edomustech.com\"][uri\"/xmlrpc.php\"][unique_id\"al3LQEF-eQn2fdxGYWFa3AAAAQw\"]\,referer:https://t.co/ show less	Hacking Web App Attack
🇫🇷 Sklurk	2026-07-09 01:28:46 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 03:48:01 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 22:47:55.251053 2026] [security2:error] [pid 1637717:tid 1637717] [client 65.111.21.42:28059] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robertet.co"] [uri "/.git/config"] [unique_id "aZU2a4_1wkEhqmqZGIKBkwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 00:51:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 19:51:22.422502 2026] [security2:error] [pid 26308:tid 26308] [client 65.111.21.42:20067] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "paulshorrock.com"] [uri "/wp/.git/config"] [unique_id "aZUNCpX2QCLI-uyCA2I_dAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-06 21:14:41 (6 months ago)	Infected user bad webscan	Exploited Host
🇨🇭 backslash	2025-12-28 19:55:04 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 myagent.site	2025-12-27 18:14:34 (6 months ago)	Blocking for trying to access an exploit file: /xmlrpc.php	Hacking
🇨🇭 backslash	2025-10-30 08:55:06 (8 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-10-30 06:16:23 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 65.111.21.42 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 65.111.21.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 30 02:16:20.510567 2025] [security2:error] [pid 30917:tid 30917] [client 65.111.21.42:35113] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|elfinforest.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "elfinforest.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aQMCtInRYBeCm-2LkdRqzAAAAAo"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-10-07 17:14:02 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-09-29 04:50:04 (9 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.29 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.09.29 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-02-25 16:30:33 (1 year ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:10ff:13::

🇭🇰 152.32.225.99

🇺🇸 45.194.67.27

🇬🇧 35.203.210.216

🇩🇪 167.94.146.33

🇫🇷 145.239.74.160

🇭🇰 118.193.44.169

🇨🇳 112.86.225.143

🇰🇿 89.218.69.66

🇺🇸 50.6.248.168

🇸🇬 47.128.122.28

🇵🇰 2407:aa80:15:37bd::8

🇵🇰 223.123.125.242

🇩🇪 194.88.98.107

🇦🇴 193.163.125.95

🇺🇸 134.122.125.41

🇰🇷 115.68.208.117

🇮🇩 110.139.83.5

🇮🇳 103.165.10.79

🇫🇷 85.217.140.15