JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.15.135

65.111.15.135 was found in our database!

This IP was reported 63 times. Confidence of Abuse is 4%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.15.135

Whois 65.111.15.135

IP Abuse Reports for 65.111.15.135:

This IP address has been reported a total of 63 times from 22 distinct sources. 65.111.15.135 was first reported on June 28th 2024, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-30 01:04:36 (21 hours ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-11 12:14:13 (1 month ago)	Web App Attack	Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-09 22:59:21 (5 months ago)	Auto-ban: >3000 req/min op 2026-02-09	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-02-09 21:39:50 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 16:39:46.309660 2026] [security2:error] [pid 17268:tid 17268] [client 65.111.15.135:43685] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garretthillary.com"] [uri "/config/.env"] [unique_id "aYpUIomO7fiJmOkOzK4ZoQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 19:30:17 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 14:30:12.492963 2026] [security2:error] [pid 24645:tid 24662] [client 65.111.15.135:41585] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabegabel.com"] [uri "/admin/.env"] [unique_id "aYo1xAqk7H7qfiLBuhW8lwAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 18:37:41 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 13:37:29.280741 2026] [security2:error] [pid 8410:tid 8410] [client 65.111.15.135:53729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fuzzyecho.com"] [uri "/frontend/.env"] [unique_id "aYopaUB9dwLtj4H5BfeIdQAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 17:36:44 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 12:36:38.338533 2026] [security2:error] [pid 28022:tid 28022] [client 65.111.15.135:33351] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fundingworkingcapital.com"] [uri "/v2/.git/config"] [unique_id "aYobJqviJYveufgcWB9DZgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 11:26:28 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 06:26:22.995478 2026] [security2:error] [pid 11180:tid 11180] [client 65.111.15.135:29175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galengetting.com"] [uri "/.env.staging"] [unique_id "aYnEXhHcfJNZwD9yCp_N2wAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 09:54:22 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 04:54:16.372047 2026] [security2:error] [pid 1392585:tid 1392585] [client 65.111.15.135:52839] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabbyspetnanny.com"] [uri "/api/.env"] [unique_id "aYmuyCz7e6ugUCpfQ2h0HwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:02 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-12-22 18:44:03 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-12-22 17:04:30 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-12-11 03:19:15 (7 months ago)	botnet	DDoS Attack
🇫🇷 mrcrassi	2025-12-09 09:27:18 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2025-12-09 08:15:05 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:100d:b057:26e5:788e:259e:331a:8a90

🇮🇳 210.212.136.3

🇺🇸 185.198.240.220

🇺🇸 172.202.49.251

🇳🇱 45.148.10.230

🇳🇱 45.148.10.152

🇺🇸 209.83.0.197

🇧🇷 205.210.31.164

🇸🇬 101.47.15.26

🇺🇸 96.78.175.36

🇦🇪 94.203.250.247

🇲🇾 49.124.153.25

🇳🇱 5.61.209.44

🇷🇴 2.57.121.112

🇺🇸 2603:300c:181f:de00:2543:4eb5:7686:cb81

🇺🇸 198.98.62.211

🇲🇲 136.228.161.66

🇻🇳 103.172.236.241

🇸🇬 101.47.155.9

🇦🇺 40.82.214.8