JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.101

65.111.0.101 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.101

Whois 65.111.0.101

IP Abuse Reports for 65.111.0.101:

This IP address has been reported a total of 32 times from 12 distinct sources. 65.111.0.101 was first reported on June 27th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-07-17 08:18:00 (3 days ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇫🇷 Sklurk	2026-07-09 01:04:08 (1 week ago)	Web App Attack	Web App Attack
🇫🇷 mrcrassi	2026-07-04 15:56:34 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/2 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 VHosting	2025-12-23 14:05:05 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-22 15:07:15 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 10:31:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 05:31:06.118971 2025] [security2:error] [pid 17354:tid 17354] [client 65.111.0.101:40141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.siteworkestimating.com"] [uri "/.svn/wc.db"] [unique_id "aSbW6nCEMaCcMaNS7zgdHAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:45:15 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:45:08.218569 2025] [security2:error] [pid 5425:tid 5442] [client 65.111.0.101:38171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pattinauction.com"] [uri "/.git/HEAD"] [unique_id "aSa-FFoBK930f_mgSwHRBgAAAU8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:55:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:55:22.110286 2025] [security2:error] [pid 30504:tid 30504] [client 65.111.0.101:20873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.greenanvilfarrier.com"] [uri "/.svn/wc.db"] [unique_id "aSQriq5v2accm8SiB4lnOwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:29:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:29:49.867953 2025] [security2:error] [pid 32089:tid 32089] [client 65.111.0.101:55215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thefussbudgets.com"] [uri "/.env"] [unique_id "aSP7XSQPgiZ0hEp4Bp_cjQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:50:22 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:50:14.878500 2025] [security2:error] [pid 12639:tid 12639] [client 65.111.0.101:46457] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kiahunahawaii.com"] [uri "/.env"] [unique_id "aSPyFiPhamO_P974CVcRlwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:21:46 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:21:41.696375 2025] [security2:error] [pid 7117:tid 7117] [client 65.111.0.101:24371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sealcoatnj.com"] [uri "/.svn/wc.db"] [unique_id "aSPrZWUaisU-xz0XMiaR_gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:31:30 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:31:22.560308 2025] [security2:error] [pid 17644:tid 17644] [client 65.111.0.101:27913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ilovecoffeegroup.com"] [uri "/.git/HEAD"] [unique_id "aSPfmv8aaSsc8L4p-xMVegAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:14:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:14:15.971555 2025] [security2:error] [pid 4630:tid 4645] [client 65.111.0.101:33729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.scribblism.com"] [uri "/.svn/wc.db"] [unique_id "aSPbl6cxawx_aukreZu1MAAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:34:38 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:34:33.293408 2025] [security2:error] [pid 24243:tid 24243] [client 65.111.0.101:44399] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kimpitchellandassociatesinc.com"] [uri "/.git/HEAD"] [unique_id "aSPSSWApSyyJRWxmZkRa9AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 02:14:18 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:14:10.021795 2025] [security2:error] [pid 10414:tid 10414] [client 65.111.0.101:14885] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.prodigypartners.com"] [uri "/.git/HEAD"] [unique_id "aSO_cnFrSdyGQmhBWA0bkgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.188.118.10

🇸🇦 185.22.228.25

🇭🇰 152.32.191.98

🇩🇪 140.248.227.30

🇨🇳 111.10.244.187

🇩🇪 69.5.169.165

🇺🇸 2a04:4e40:e010:0:3:3451:58da:458b

🇳🇱 195.178.110.228

🇳🇱 185.177.124.74

🇨🇳 183.6.118.248

🇩🇪 178.105.95.88

🇺🇸 173.230.150.73

🇵🇰 149.71.34.141

🇧🇷 138.255.122.231

🇻🇳 103.167.89.222

🇫🇷 85.217.140.33

🇫🇷 54.38.241.200

🇮🇳 49.43.32.31

🇺🇸 32.199.191.214

🇺🇸 20.65.154.83