JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.9.17

65.111.9.17 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.9.17

Whois 65.111.9.17

IP Abuse Reports for 65.111.9.17:

This IP address has been reported a total of 60 times from 31 distinct sources. 65.111.9.17 was first reported on July 4th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 00:29:28 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-08 00:27:09 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 05:49:42 (2 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-04-14 17:34:48 (2 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-04-02 00:27:15 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-03-05 02:10:18 (4 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-23 20:31:41 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:31:33.763499 2026] [security2:error] [pid 22827:tid 22880] [client 65.111.9.17:31345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marketingfirm.org.aafm.us"] [uri "/.git/config"] [unique_id "aZy5JQATtf9SHmHxys71EQAAAVg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 jjnxpct	2026-02-14 04:53:00 (4 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /app/.git/config (Rule ID: 930130) - Restricted File Access Attempt show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 09:16:42 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:16:37.636683 2026] [security2:error] [pid 17561:tid 17561] [client 65.111.9.17:24209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "langkawi-boat-registration.com"] [uri "/admin/.env"] [unique_id "aY7r9RvLGrit3Ox6vQqe9QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:55:37 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:55:32.347940 2026] [security2:error] [pid 2036:tid 2036] [client 65.111.9.17:50097] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamariposagallery.com"] [uri "/.env.production"] [unique_id "aY7nBLC_3sAUxaEAthb5sgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 07:11:20 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:11:14.270766 2026] [security2:error] [pid 27304:tid 27304] [client 65.111.9.17:40493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kuddlkat.com"] [uri "/api/.env"] [unique_id "aY7OknW8PQC18pY9YTdq4AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-13 05:05:23 (4 months ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:08:46 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:08:39.141314 2026] [security2:error] [pid 23687:tid 23687] [client 65.111.9.17:21175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingmanrents.com"] [uri "/admin/.env"] [unique_id "aY6jxwoy-ECBLgqR9krXsAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:39:15 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:39:07.652797 2026] [security2:error] [pid 15346:tid 15346] [client 65.111.9.17:14723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kidswithcamerasmovie.com"] [uri "/dev/.git/config"] [unique_id "aY6c23tR8HjWtBkggLhwkwAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-13 02:34:09 (4 months ago)	Blocking for trying to access an exploit file: /wp/.git/config	Hacking

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.141.17

🇱🇹 45.227.254.170

🇳🇱 45.156.87.13

🇺🇸 34.56.248.133

🇵🇱 176.53.159.198

🇺🇸 159.89.228.57

🇬🇲 153.67.65.222

🇩🇪 69.5.169.32

🇨🇴 201.184.50.251

🇺🇸 167.99.148.102

🇺🇸 162.216.149.80

🇮🇳 125.23.155.110

🇻🇳 116.101.123.227

🇺🇸 108.167.177.224

🇮🇹 91.80.85.80

🇺🇸 34.205.73.195

🇺🇸 34.125.112.10

🇨🇳 2400:7fc0:82c0:801:710e:9b0e:44bb:4c8c

🇮🇳 172.253.229.217

🇺🇸 172.56.85.31