JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.1.119

65.111.1.119 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.1.119

Whois 65.111.1.119

IP Abuse Reports for 65.111.1.119:

This IP address has been reported a total of 39 times from 22 distinct sources. 65.111.1.119 was first reported on June 27th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-23 01:36:19 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-05-22 11:39:52 (2 weeks ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-11 05:33:09 (3 weeks ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇨🇳 ThreatBook.io	2026-05-09 23:37:18 (4 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.1.119 2026-05-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.1.119 2026-05-09 17:45:13 /v1/core/cluster/nodes?withInstances=false&pageNo=1&pageS%20ize=10&keyword show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-14 23:07:56 (1 month ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.1.119 2026-04-1 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.1.119 2026-04-14 15:37:16 /linux/sdok1.jsp show less	Web App Attack
Anonymous	2026-04-08 17:47:33 (1 month ago)	Forum/form spam	Web Spam
🇨🇳 ThreatBook.io	2026-04-03 23:30:44 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.1.119 2026-04-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.111.1.119 2026-04-03 07:42:57 /shop/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇫🇷 masterguru	2026-03-31 11:27:29 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.119 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.119 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇱🇻 garmtech.com	2026-03-23 10:57:13 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2026-03-23 10:57:06 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-18 12:12:21 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇺🇸 TPI-Abuse	2026-02-11 19:01:31 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.119 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:01:26.348877 2026] [security2:error] [pid 4113983:tid 4113983] [client 65.111.1.119:19445] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arborterra.org"] [uri "/v2/.git/config"] [unique_id "aYzSBsXYjnidipHXXWFo8wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 05:32:12 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.119 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:32:05.725797 2026] [security2:error] [pid 16295:tid 16295] [client 65.111.1.119:19541] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "knoxbestos.com"] [uri "/new/.git/config"] [unique_id "aYrC1cQdrbB08hIgb1qoHwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 03:38:13 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.119 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.119 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 22:38:05.370533 2026] [security2:error] [pid 30791:tid 30791] [client 65.111.1.119:21103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibcnu.com"] [uri "/.env.local"] [unique_id "aYqoHclYDF46axTqCsU2GgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:8bf6:f001

🇺🇸 216.25.89.150

🇳🇱 195.178.110.26

🇧🇿 190.197.25.70

🇺🇸 162.216.149.170

🇺🇸 150.107.38.254

🇷🇺 77.222.35.115

🇸🇬 74.114.31.149

🇺🇸 65.49.1.128

🇺🇸 43.173.69.147

🇺🇸 172.185.46.218

🇹🇭 171.100.121.127

🇺🇸 142.93.127.145

🇸🇬 129.226.213.238

🇰🇷 112.216.129.27

🇮🇷 93.118.146.156

🇪🇸 79.117.201.162

🇺🇸 71.6.233.2

🇧🇪 34.156.188.50

🇧🇪 34.62.21.23