JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.1.95

65.111.1.95 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 24%: ?

24%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.1.95

Whois 65.111.1.95

IP Abuse Reports for 65.111.1.95:

This IP address has been reported a total of 57 times from 28 distinct sources. 65.111.1.95 was first reported on July 3rd 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-09-01 02:30:48 (2 days ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-08-08 00:44:44 (3 weeks ago)	Web App Attack	Web App Attack
Anonymous	2026-07-29 07:00:00 (1 month ago)	Apache probe; attempts=20; exact paths: /xmlrpc.php	Web App Attack
Anonymous	2026-07-23 06:43:06 (1 month ago)	WordPress Brute Force	Brute-Force
🇪🇸 librebit	2026-07-19 03:39:23 (1 month ago)	Brute force	Brute-Force
🇮🇹 VHosting	2026-07-15 03:15:02 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 05:01:53 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-07 14:55:08 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 04:36:25 (2 months ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-04-06 00:02:58 (4 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.95 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.95 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇹🇷 rtbh.com.tr	2026-02-13 20:11:35 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 TPI-Abuse	2026-02-13 08:09:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:09:44.761464 2026] [security2:error] [pid 6643:tid 6643] [client 65.111.1.95:55693] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "labcomputers.com"] [uri "/app/.git/config"] [unique_id "aY7cSG6hxc1Rq9hUa1aDSAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:02:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:01:57.989941 2026] [security2:error] [pid 28869:tid 28869] [client 65.111.1.95:39305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koolcoastalnights.com"] [uri "/test/.git/config"] [unique_id "aY6-VUgEsWeG_hWZL3fR5wAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:20:41 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:20:35.996538 2026] [security2:error] [pid 21702:tid 21702] [client 65.111.1.95:28677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matthewhestad.help"] [uri "/app/.git/config"] [unique_id "aY60o0NjwDIeMsZuMZ23BwAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:30:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:30:43.519113 2026] [security2:error] [pid 24962:tid 24962] [client 65.111.1.95:15953] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marveldirectory.com"] [uri "/wp/.git/config"] [unique_id "aY6o8zI3-ax9sVSFVm5jFwAAABg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.100

🇧🇷 205.210.31.224

🇧🇷 201.7.212.57

🇵🇦 190.123.46.136

🇦🇷 186.122.224.251

🇱🇧 185.130.137.14

🇨🇴 181.59.3.94

🇺🇸 162.216.149.54

🇻🇳 103.172.236.15

🇺🇸 73.249.138.22

🇸🇬 47.79.207.209

🇨🇳 222.176.201.116

🇨🇳 202.46.62.44

🇬🇧 193.176.29.12

🇮🇩 182.253.170.58

🇨🇴 181.59.3.115

🇷🇺 178.66.111.55

🇨🇳 175.43.163.221

🇩🇪 116.203.18.194

🇸🇬 103.216.221.90