JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.21.46

65.111.21.46 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.21.46

Whois 65.111.21.46

IP Abuse Reports for 65.111.21.46:

This IP address has been reported a total of 19 times from 8 distinct sources. 65.111.21.46 was first reported on July 3rd 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 webgobe	2026-07-10 22:40:50 (1 day ago)	wew-Joomla User : try to access forms...	Hacking
🇫🇷 Sklurk	2026-07-09 00:52:05 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:35:10 (4 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 02:22:25 (3 weeks ago)	Web App Attack	Web App Attack
🇮🇹 [email protected]	2026-04-17 22:31:07 (2 months ago)	[Sat Apr 18 00:31:06.795220 2026] [authz_core:error] [pid 560720:tid 560802] [remote 65.111.21.46:43 ... show more [Sat Apr 18 00:31:06.795220 2026] [authz_core:error] [pid 560720:tid 560802] [remote 65.111.21.46:43011] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:22 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 07:33:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:33:46.755124 2025] [security2:error] [pid 17144:tid 17144] [client 65.111.21.46:40605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.angove.biz"] [uri "/.env"] [unique_id "aSVb2ustCAsT-r_Uz952EQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:28:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:28:17.001092 2025] [security2:error] [pid 30894:tid 30894] [client 65.111.21.46:10371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.partyblockfavors.com"] [uri "/.git/HEAD"] [unique_id "aSVMgPwGY4-osV1h_NO0zAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:39:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:38:59.943377 2025] [security2:error] [pid 29041:tid 29041] [client 65.111.21.46:38087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drayvian.com"] [uri "/.env"] [unique_id "aSUy45WpArIogOtNvy-OkwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:43:05 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:42:57.815641 2025] [security2:error] [pid 24088:tid 24088] [client 65.111.21.46:16395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.corangues.com"] [uri "/.env"] [unique_id "aSQooRLzujY9ODqmgI7ddwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:23:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:23:30.417304 2025] [security2:error] [pid 30885:tid 30885] [client 65.111.21.46:24955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arts4health.org"] [uri "/.env"] [unique_id "aSQH8uDwI0QWRJ1JkXIHNgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:00:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.21.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:00:22.838823 2025] [security2:error] [pid 15562:tid 15562] [client 65.111.21.46:28747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.comicpreservation.com"] [uri "/.svn/wc.db"] [unique_id "aSPYVrtib_7JaLdK2CE63QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2024-11-25 12:01:41 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 65.111.21.46 2024-11-25T12:05:10+01:0 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 65.111.21.46 2024-11-25T12:05:10+01:00 vpn Access-Reject 'filn00' station: 65.111.21.46 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2024-11-25T12:05:52+01:00 vpn Access-Reject 'jana.kourilova' station: 65.111.21.46 auth-type: PAP realm: vse.cz nas: <redacted> called: <redacted> => address-pool: zam_pool msg: '<redacted>' show less	Brute-Force Web App Attack
Anonymous	2024-10-28 04:22:55 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-10-17 00:41:13 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.145

🇧🇷 187.111.28.131

🇺🇸 172.253.9.216

🇮🇳 139.59.18.4

🇺🇸 66.132.195.15

🇨🇳 58.240.204.254

🇫🇮 46.17.105.137

🇳🇱 45.148.10.141

🇺🇸 20.118.209.32

🇺🇸 20.64.105.81

🇨🇦 20.48.236.161

🇺🇸 191.102.163.185

🇺🇸 191.102.149.161

🇹🇭 125.27.12.122

🇸🇬 103.187.146.107

🇸🇬 47.84.102.58

🇺🇸 20.124.84.235

🇺🇸 143.110.233.243

🇺🇸 64.227.1.192

🇱🇹 62.60.130.234