JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.85

65.111.0.85 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 26%: ?

26%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.85

Whois 65.111.0.85

IP Abuse Reports for 65.111.0.85:

This IP address has been reported a total of 26 times from 21 distinct sources. 65.111.0.85 was first reported on June 28th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-05 18:54:50 (1 week ago)	B: f2b asterisk aggressive 3x	Email Spam
🇮🇹 Francesco Ippoliti	2026-07-05 04:48:18 (1 week ago)	[Jul 5 06:48:18] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:808@154 ... show more [Jul 5 06:48:18] NOTICE[66068] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.0.85:64195' (callid: 7c17116e43ee2a8a324dc8bdabcb3ae8) - No matching endpoint found ... show less	Brute-Force Port Scan
Anonymous	2026-07-04 15:30:07 (1 week ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇫🇮 sgofferj	2026-07-04 00:50:35 (1 week ago)	Attack attempt on SIP server	Fraud VoIP Hacking Brute-Force
🇮🇹 Francesco Ippoliti	2026-07-03 21:28:59 (1 week ago)	[Jul 3 23:28:58] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:600@154 ... show more [Jul 3 23:28:58] NOTICE[64812] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.0.85:42671' (callid: 4d2ea65929c1949d9faf582739b83b54) - No matching endpoint found [Jul 3 23:28:58] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.0.85:42671' (callid: 4d2ea65929c1949d9faf582739b83b54) - No matching endpoint found ... show less	Brute-Force Port Scan
🇮🇹 Francesco Ippoliti	2026-07-03 20:23:21 (1 week ago)	[Jul 3 22:23:20] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:222@154 ... show more [Jul 3 22:23:20] NOTICE[65286] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.0.85:51382' (callid: a96b5f51c3bc3924d964b809a8e798d3) - No matching endpoint found [Jul 3 22:23:20] NOTICE[65023] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '<sip:[email protected]>' failed for '65.111.0.85:51382' (callid: a96b5f51c3bc3924d964b809a8e798d3) - No matching endpoint found ... show less	Brute-Force Port Scan
🇫🇮 inlink.ltd	2026-05-27 19:07:26 (1 month ago)	Known malicious PHP file or CMS probe	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 12:03:02 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇱🇻 garmtech.com	2025-11-26 06:13:15 (7 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:58:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:58:06.838080 2025] [security2:error] [pid 9444:tid 9444] [client 65.111.0.85:51239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ols.e-zschedule.com"] [uri "/.git/HEAD"] [unique_id "aSZ6zrkdsSdfUIHkjxL2KQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 sid3windr	2025-11-26 00:43:53 (7 months ago)	GET /.git/HEAD (Tarpitted for 2m10s, wasted 7.73kB)	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 00:32:45 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 19:32:38.608410 2025] [security2:error] [pid 3343204:tid 3343211] [client 65.111.0.85:14587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cookmanufacturinggroup.com"] [uri "/.svn/wc.db"] [unique_id "aSZKprRcUqZZgnn61k0RMAAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:31:06 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.85 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.85 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:31:00.468843 2025] [security2:error] [pid 18109:tid 18109] [client 65.111.0.85:20997] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cathayan.abecasis.com"] [uri "/.svn/wc.db"] [unique_id "aSPtlPq8VLWYv7MLM-l8qAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ph	2025-11-07 14:48:40 (8 months ago)	Bad web bot attempting to run wp-login.php on non-WP site	Hacking Bad Web Bot Web App Attack
Anonymous	2025-11-02 16:29:19 (8 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 06:57:54	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 46.59.68.211

🇨🇳 1.26.176.186

🇭🇰 199.45.154.140

🇲🇽 187.141.71.166

🇸🇮 176.65.134.3

🇮🇳 125.20.210.182

🇷🇴 92.118.39.71

🇳🇱 91.92.42.17

🇷🇺 77.51.166.154

🇺🇸 71.6.135.131

🇪🇬 41.40.9.165

🇧🇷 201.17.146.173

🇺🇸 192.129.155.134

🇪🇸 161.123.64.35

🇯🇵 153.138.234.126

🇺🇸 151.244.95.106

🇩🇪 141.11.32.54

🇮🇳 122.168.194.41

🇫🇷 88.185.5.158

🇵🇰 72.255.59.99