JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.7.241

65.111.7.241 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 18%: ?

18%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.7.241

Whois 65.111.7.241

IP Abuse Reports for 65.111.7.241:

This IP address has been reported a total of 30 times from 19 distinct sources. 65.111.7.241 was first reported on June 28th 2024, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 drewf.ink	2026-09-02 03:13:35 (4 hours ago)	[03:13] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [03:13] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇺🇸 drewf.ink	2026-09-02 00:58:29 (6 hours ago)	[00:58] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gatew ... show more [00:58] Attempted HTTPS access to the GlobalProtect prelogin endpoint on the web honeypot (VPN gateway fingerprinting/recon) show less	Web App Attack
🇫🇷 Sklurk	2026-08-16 00:42:02 (2 weeks ago)	Web App Attack	Web App Attack
🇱🇻 garmtech.com	2026-07-15 15:25:18 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-25.65.111.7.241.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-25.65.111.7.241.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇫🇷 tecnicorioja	2026-05-15 22:00:53 (3 months ago)	wp-login attack [15/May/2026:20:54:27	Brute-Force Web App Attack
🇦🇷 whost	2026-02-09 12:27:00 (6 months ago)	bfa - reported by silicomnetwork.com	Brute-Force
🇧🇷 hostseries	2025-12-24 05:15:09 (8 months ago)	Trigger: LF_DISTATTACK	Brute-Force
🇬🇧 openstrike.co.uk	2025-12-12 08:39:42 (8 months ago)	9 packets to port 2083	Port Scan
🇷🇴 clauss	2025-12-01 07:35:32 (9 months ago)	IP reached maximum auth failures for a one day block	Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 09:37:51 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:37:43.674641 2025] [security2:error] [pid 16364:tid 16364] [client 65.111.7.241:47115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.robertminuzzo.com"] [uri "/.svn/wc.db"] [unique_id "aSQnZ-FBNsHTIZLRKrsYAwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:01:21 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:01:11.955329 2025] [security2:error] [pid 30667:tid 30667] [client 65.111.7.241:24351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aykonak.com"] [uri "/.git/HEAD"] [unique_id "aSQQxwqW4s75aCmSwlEemwAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:40:19 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:40:11.953017 2025] [security2:error] [pid 3425:tid 3425] [client 65.111.7.241:52515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.burke698.org.nilestree.com"] [uri "/.svn/wc.db"] [unique_id "aSPvu88oM47agsP_atmVXwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:08:44 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:08:30.225898 2025] [security2:error] [pid 7784:tid 7784] [client 65.111.7.241:27963] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.firingsquadfilms.com"] [uri "/.git/HEAD"] [unique_id "aSPaPtwsvCsdxJCLB8bpuAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 23:09:34 (9 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇵🇱 sefinek.net	2025-11-02 14:14:25 (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 152.58.36.235

🇫🇮 2.26.136.243

🇺🇸 216.219.89.86

🇺🇸 216.73.217.25

🇮🇩 202.136.83.169

🇬🇧 193.163.125.196

🇧🇷 191.53.12.230

🇨🇳 182.46.29.115

🇧🇷 179.176.210.17

🇺🇸 91.230.168.70

🇵🇱 79.189.129.106

🇩🇪 69.5.169.153

🇱🇹 62.60.130.253

🇱🇻 62.60.130.240

🇩🇪 47.254.159.17

🇨🇳 39.144.60.11

🇴🇲 38.10.236.117

🇨🇳 36.250.220.144

🇮🇩 34.101.158.53

🇫🇷 2001:41d0:33d:9200::405