JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.1.139

65.111.1.139 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.1.139

Whois 65.111.1.139

IP Abuse Reports for 65.111.1.139:

This IP address has been reported a total of 42 times from 17 distinct sources. 65.111.1.139 was first reported on July 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-04-18 16:27:11 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-27.65.111.1.139.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-27.65.111.1.139.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 13:42:19 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:42:16.367590 2026] [security2:error] [pid 2775456:tid 2775456] [client 65.111.1.139:26149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadek.com"] [uri "/.env.save"] [unique_id "aY8qOBXYSMVlgscE_qt1JAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 12:52:46 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:52:38.323217 2026] [security2:error] [pid 10101:tid 10101] [client 65.111.1.139:31781] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "midnight-tech.com"] [uri "/backup/.git/config"] [unique_id "aY8elqyTZUsQhIfe0pt4mQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:08:28 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:08:21.902885 2026] [security2:error] [pid 16178:tid 16178] [client 65.111.1.139:11693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "menafert.com"] [uri "/.env"] [unique_id "aY7b9fZueeioi7DoP9cTYQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:58:09 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:58:02.952341 2026] [security2:error] [pid 1908034:tid 1908098] [client 65.111.1.139:37589] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mastersofthesecrets.com"] [uri "/.env.production"] [unique_id "aY6vWmyow04PUXjo15WVBwAAAcA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:15:30 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:15:25.951997 2026] [security2:error] [pid 184701:tid 184701] [client 65.111.1.139:42017] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marriedtv.com"] [uri "/wp/.git/config"] [unique_id "aY6lXYmXl4BamMSSIb5IAwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:31:39 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:31:36.341917 2026] [security2:error] [pid 1253806:tid 1253806] [client 65.111.1.139:64587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariannehansen.com"] [uri "/.env.staging"] [unique_id "aY6bGBZaW-aWxKxhynKwJQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:15:05 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:14:55.793630 2026] [security2:error] [pid 31815:tid 31815] [client 65.111.1.139:56617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcedinc.com"] [uri "/.env"] [unique_id "aY6XL6zt4DJJSkArsM2s-QAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:56:21 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:56:14.848267 2026] [security2:error] [pid 15152:tid 15152] [client 65.111.1.139:27659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mantality.com"] [uri "/.env.save"] [unique_id "aY6SzjCymfQAoBDmY73uJgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:42:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:42:29.506392 2026] [security2:error] [pid 10534:tid 10534] [client 65.111.1.139:35039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mailperform.com"] [uri "/admin/.git/config"] [unique_id "aY6BhRRO76OAO7jkJANOOgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-12 23:00:16 (3 months ago)	Auto-ban: >3000 req/min op 2026-02-12	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-12 17:27:45 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:27:41.778761 2026] [security2:error] [pid 5405:tid 5405] [client 65.111.1.139:37315] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deepseasugar.com"] [uri "/.env"] [unique_id "aY4Nja0X6Jtaduws3U49SwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 16:07:34 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:07:27.894284 2026] [security2:error] [pid 11410:tid 11410] [client 65.111.1.139:40595] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disloyalunion.com"] [uri "/.git/config"] [unique_id "aY36vyrRfHOQ7PUX_eVOiAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 15:07:12 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:07:05.271424 2026] [security2:error] [pid 30067:tid 30067] [client 65.111.1.139:28273] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "copiershickory.com"] [uri "/.git/config"] [unique_id "aY3smWPjtxoJSUJtTkc1mgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-12 00:35:46 (3 months ago)	65.111.1.139 - - [12/Feb/2026:00:35:45 +0000] "GET /admin/.git/config HTTP/1.1" 302 507 "-" "Mozilla ... show more 65.111.1.139 - - [12/Feb/2026:00:35:45 +0000] "GET /admin/.git/config HTTP/1.1" 302 507 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.186.135

🇺🇸 35.188.112.111

🇷🇴 2.57.121.112

🇷🇴 193.32.162.82

🇺🇸 162.216.150.113

🇮🇩 162.128.66.45

🇮🇳 103.97.215.11

🇱🇹 81.30.98.158

🇳🇱 45.148.10.151

🇧🇷 189.6.14.59

🇳🇱 183.81.169.76

🇨🇳 183.21.118.8

🇫🇮 178.20.210.208

🇩🇪 164.92.178.52

🇭🇰 152.32.215.226

🇺🇸 142.204.192.10

🇮🇳 122.186.174.35

🇩🇪 78.46.211.133

🇳🇱 45.156.128.43

🇷🇺 31.173.7.121