JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.15.142

65.111.15.142 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.15.142

Whois 65.111.15.142

IP Abuse Reports for 65.111.15.142:

This IP address has been reported a total of 45 times from 22 distinct sources. 65.111.15.142 was first reported on June 26th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-07-22 02:23:59 (14 hours ago)	65.111.15.142 - - [22/Jul/2026:04:23:59 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linu ... show more 65.111.15.142 - - [22/Jul/2026:04:23:59 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 F242	2026-07-21 23:01:02 (17 hours ago)	Wordpress Login or XMLRPC abuse	Web App Attack
🇫🇷 Sklurk	2026-07-07 17:29:10 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 04:34:13 (4 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 03:01:56 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-16 01:16:01 (1 month ago)	Web App Attack	Web App Attack
🇧🇪 cmbplf	2026-05-24 00:39:20 (1 month ago)	1.345 requests with url.path //xmlrpc.php	Brute-Force Bad Web Bot
🇳🇱 i-turnradio.nl	2026-04-07 22:59:19 (3 months ago)	2026-04-08 00:59:19 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇵🇱 nfsec.pl	2026-03-28 22:47:09 (3 months ago)	65.111.15.142 - - [28/Mar/2026:22:47:00 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 2058 ... show more 65.111.15.142 - - [28/Mar/2026:22:47:00 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 403 2058 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 65.111.15.142 - - [28/Mar/2026:22:47:02 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 403 6276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 65.111.15.142 - - [28/Mar/2026:22:47:04 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 65.111.15.142 - - [28/Mar/2026:22:47:06 +0000] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0 Safari/537.36" 65.111.15.142 - - [28/Mar/2026:22:47:08 +0000] "GET //wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Windows NT 10.0; Wi ... show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-02-13 13:51:13 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:51:09.485602 2026] [security2:error] [pid 2990195:tid 2990195] [client 65.111.15.142:51635] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leagueloch.com"] [uri "/.env.save"] [unique_id "aY8sTa5u0azL0H7BklDOVgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 07:30:27 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:30:20.964637 2026] [security2:error] [pid 5059:tid 5059] [client 65.111.15.142:13039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meganmurph.com"] [uri "/site/.git/config"] [unique_id "aY7TDMjdUlPLr441gqbKvQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:14:39 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:14:32.371470 2026] [security2:error] [pid 21899:tid 21937] [client 65.111.15.142:55597] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcismanila.com"] [uri "/test/.git/config"] [unique_id "aY7BSFbOvFBDCmI4tvl7dgAAAUc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:38:04 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.142 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:38:02.008610 2026] [security2:error] [pid 19270:tid 19270] [client 65.111.15.142:30131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marilynmonroebook.com"] [uri "/admin/.git/config"] [unique_id "aY6cmmmVKIbMpt242QeHBwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-02-13 02:06:48 (5 months ago)	Scanning/Probing (23)	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-02-12 23:00:38 (5 months ago)	Auto-ban: >3000 req/min op 2026-02-12	Hacking Web App Attack SSH

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 218.190.8.165

🇺🇸 205.210.31.22

🇨🇳 114.250.49.123

🇺🇸 100.49.117.77

🇫🇷 91.196.152.34

🇺🇸 64.62.156.15

🇳🇱 45.148.10.147

🇧🇪 207.175.89.9

🇫🇷 185.177.72.100

🇵🇱 176.53.159.197

🇯🇵 152.32.201.247

🇨🇳 111.13.118.37

🇳🇱 85.11.167.7

🇺🇸 76.38.7.148

🇧🇷 45.169.200.254

🇳🇱 45.148.10.29

🇭🇰 45.120.216.232

🇨🇳 14.103.108.102

🇧🇬 5.188.206.30

🇫🇷 195.25.75.65