JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.1.160

65.111.1.160 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.1.160

Whois 65.111.1.160

IP Abuse Reports for 65.111.1.160:

This IP address has been reported a total of 28 times from 14 distinct sources. 65.111.1.160 was first reported on June 27th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-06-04 19:09:24 (1 month ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇬🇧 [email protected]	2026-03-04 00:24:48 (4 months ago)	65.111.1.160 - - [04/Mar/2026:00:17:27 +0000] "GET http://movietips.de/.env HTTP/1.1" 404 540 "-" "G ... show more 65.111.1.160 - - [04/Mar/2026:00:17:27 +0000] "GET http://movietips.de/.env HTTP/1.1" 404 540 "-" "Go-http-client/1.1" 65.111.1.160 - - [04/Mar/2026:00:24:47 +0000] "GET /.git/objects/b9/9434255ece6db6e39e26f9e59d6e0520e11265 HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/b9/9434255ece6db6e39e26f9e59d6e0520e11265" "Go-http-client/1.1" 65.111.1.160 - - [04/Mar/2026:00:24:48 +0000] "GET http://devpartnerprograms.srixon.com/.git/objects/cc/8367745087a3c54a4ed8dd5834fe29d7f559ce HTTP/1.1" 404 557 "-" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-26 10:15:38 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 05:15:35.461410 2026] [security2:error] [pid 19630:tid 19630] [client 65.111.1.160:38645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.149"] [uri "/.git/config"] [unique_id "aaAdR7D4b8XocVxgrNq6HQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 techboy117	2025-12-22 18:03:29 (6 months ago)	Blocking due to password spraying. Username: aheroux	Brute-Force
Anonymous	2025-12-04 15:30:42 (7 months ago)	botnet	DDoS Attack
Anonymous	2025-12-04 05:19:12 (7 months ago)	botnet	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:58 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-24 08:12:04 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:11:53.250046 2025] [security2:error] [pid 8284:tid 8284] [client 65.111.1.160:47011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.poptrading.tgcindustrial.com"] [uri "/.env"] [unique_id "aSQTSR_xNVGPr-0ykmCosQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:49:59 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:49:54.483407 2025] [security2:error] [pid 3493212:tid 3493212] [client 65.111.1.160:17161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bccworldmedia.com"] [uri "/.svn/wc.db"] [unique_id "aSQOItUZhcXtdJhIh7PoXAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:11:32 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:24.597543 2025] [security2:error] [pid 1643:tid 1643] [client 65.111.1.160:9681] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.evelowerealtor.com"] [uri "/.svn/wc.db"] [unique_id "aSQFHCgVqv144Y_7mXOwaAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:45:25 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:45:20.143040 2025] [security2:error] [pid 5223:tid 5251] [client 65.111.1.160:37671] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mailme.name"] [uri "/.svn/wc.db"] [unique_id "aSPw8GBLaC45odtmKAmjqwAAAFg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:36:41 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:36:33.381497 2025] [security2:error] [pid 18192:tid 18247] [client 65.111.1.160:17389] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.prismatik.com"] [uri "/.git/HEAD"] [unique_id "aSPg0SagYJ-Jn6Tmn4sypQAAAVE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 15:51:17 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-14 09:09:16 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 techboy117	2025-11-14 00:06:07 (7 months ago)	Blocking due to password spraying.	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:6d1d:323c::501:14

🇨🇳 183.208.50.216

🇵🇱 176.53.159.198

🇫🇮 147.185.133.74

🇺🇸 135.237.126.18

🇨🇳 120.85.117.0

🇨🇳 118.145.111.33

🇪🇸 85.59.234.246

🇧🇬 79.124.49.174

🇫🇷 51.159.29.250

🇺🇸 2a09:bac5:6d1c:aa::11:19e

🇳🇱 195.178.110.137

🇨🇳 183.230.155.13

🇲🇾 180.74.91.50

🇨🇱 138.84.34.109

🇮🇳 103.120.153.214

🇮🇳 59.184.249.147

🇫🇷 51.159.149.103

🇺🇸 45.45.237.171

🇬🇧 35.203.211.132