JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.7.168

65.111.7.168 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.7.168

Whois 65.111.7.168

IP Abuse Reports for 65.111.7.168:

This IP address has been reported a total of 36 times from 16 distinct sources. 65.111.7.168 was first reported on June 27th 2024, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 stinpriza	2026-07-26 10:43:25 (2 hours ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-24 09:13:04 (2 days ago)	Web App Attack	Web App Attack
🇩🇪 stinpriza	2026-07-23 07:06:27 (3 days ago)	Web App Attack	Web App Attack
🇮🇹 VHosting	2026-07-17 06:25:04 (1 week ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2025-12-10 17:57:44 (7 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-12-02 22:18:29 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:18:20.629433 2025] [security2:error] [pid 10592:tid 10592] [client 65.111.7.168:48821] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bizecomm.com"] [uri "/.env"] [unique_id "aS9lrCOjzixtoz-rYHc64wAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 21:57:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:57:21.809573 2025] [security2:error] [pid 28685:tid 28685] [client 65.111.7.168:32453] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bgraph.com"] [uri "/.git/HEAD"] [unique_id "aS9gwZtEAIIZiJYEnON1PgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:37:58 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:37:52.463439 2025] [security2:error] [pid 4513:tid 4513] [client 65.111.7.168:41307] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "norinpaco.com"] [uri "/.git/HEAD"] [unique_id "aS9AEI0G289yCd0sBKnqgQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 19:11:09 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 14:11:01.635657 2025] [security2:error] [pid 5187:tid 5187] [client 65.111.7.168:54333] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessicabaer.com"] [uri "/.env"] [unique_id "aS85xVkqJ2MTrynrEFFqUQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:19:16 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:19:09.474195 2025] [security2:error] [pid 19899:tid 19899] [client 65.111.7.168:42623] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "journalofcommonsenseeconomics.com"] [uri "/.git/HEAD"] [unique_id "aS6g_eg22lvSZOcNTeLzFQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2025-12-02 05:06:04 (7 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇵🇱 sefinek.net	2025-12-02 02:27:48 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.svn/wc.db UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 02:22:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 21:22:18.208121 2025] [security2:error] [pid 30362:tid 30362] [client 65.111.7.168:48607] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greybrucepork.ca"] [uri "/.git/HEAD"] [unique_id "aS5NWpmOLDVXcWjXxKv3kQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-27 20:36:49 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 15:36:41.927917 2025] [security2:error] [pid 584449:tid 584449] [client 65.111.7.168:34101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citizensforsanity.com"] [uri "/.env"] [unique_id "aSi2WZ9Sq-9LvwF5hpjLkwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Swiptly	2025-11-26 18:03:11 (7 months ago)	Bot scanning for environment files .env .env/\* ...	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.2

🇻🇳 14.225.218.99

🇮🇳 202.141.102.90

🇳🇱 195.178.110.137

🇧🇬 193.24.211.234

🇧🇷 192.140.43.217

🇺🇸 162.216.150.229

🇺🇸 147.185.132.53

🇧🇷 131.100.242.102

🇫🇷 104.28.196.56

🇩🇪 69.5.169.209

🇺🇸 64.62.156.92

🇳🇴 51.120.70.186

🇺🇸 35.88.140.229

🇹🇼 198.235.24.115

🇨🇳 182.119.230.31

🇵🇱 178.219.105.156

🇵🇱 176.53.159.197

🇨🇳 124.31.104.8

🇸🇬 118.139.164.171