JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.15.46

65.111.15.46 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 33%: ?

33%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.15.46

Whois 65.111.15.46

IP Abuse Reports for 65.111.15.46:

This IP address has been reported a total of 52 times from 26 distinct sources. 65.111.15.46 was first reported on July 7th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 VHosting	2026-07-15 04:30:02 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 05:15:13 (4 days ago)	Web App Attack	Web App Attack
Anonymous	2026-07-08 02:44:20 (1 week ago)	Attempted WordPress login: 65.111.15.46 - - [08/Jul/2026:03:44:20 +0100] "GET /wp-login.php HTTP/1. ... show more Attempted WordPress login: 65.111.15.46 - - [08/Jul/2026:03:44:20 +0100] "GET /wp-login.php HTTP/1.1" 200 234 "http://[sub domain]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0" show less	Hacking Web App Attack
🇨🇭 backslash	2026-07-07 15:21:00 (1 week ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-22 23:07:17 (3 weeks ago)	[Tue Jun 23 09:07:16.519898 2026] [security2:error] [pid 175781] [client 65.111.15.46:29443] [client ... show more [Tue Jun 23 09:07:16.519898 2026] [security2:error] [pid 175781] [client 65.111.15.46:29443] [client 65.111.15.46] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "ajnAJMDEI5eu2SQx_IiQRAAAAAk"] ... show less	Web App Attack
Anonymous	2026-01-28 15:21:41 (5 months ago)	wordpress-trap	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-26 12:09:17 (5 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 stinpriza	2026-01-25 22:03:38 (5 months ago)	Web App Attack	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-06 15:00:04 (6 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 island-freaks.com	2025-12-22 05:05:44 (6 months ago)	Attack Type: WordPress Exploit Bot attempt on /wp-json/wp/v2/users \| DNS 65.111.15.46 \| Agent: Mozil ... show more Attack Type: WordPress Exploit Bot attempt on /wp-json/wp/v2/users \| DNS 65.111.15.46 \| Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-16 00:00:15 (7 months ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-12-11 08:10:25 (7 months ago)	botnet	DDoS Attack
🇮🇩 BPS-StatisticsIndonesia	2025-12-10 19:29:08 (7 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 21:15:28 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 16:15:22.282229 2025] [security2:error] [pid 23584:tid 23584] [client 65.111.15.46:54113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microscopedia.com"] [uri "/.env"] [unique_id "aS9W6m2wu4lyx2DJJ4CsawAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 17:44:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.15.46 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.15.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 12:44:28.596817 2025] [security2:error] [pid 30937:tid 30937] [client 65.111.15.46:37209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rogerheath.com"] [uri "/.svn/wc.db"] [unique_id "aS8lfPl4CDG1VOXVzh6drQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.208.2

🇨🇦 85.217.149.47

🇳🇱 45.148.10.147

🇬🇧 185.170.108.249

🇧🇷 179.191.82.115

🇸🇬 159.65.128.12

🇺🇸 135.237.125.237

🇨🇳 116.228.195.251

🇵🇰 110.93.236.235

🇩🇪 104.207.54.37

🇧🇷 45.4.179.4

🇺🇸 40.124.173.206

🇨🇳 14.103.115.212

🇬🇧 13.41.228.219

🇺🇸 216.25.89.106

🇳🇱 195.178.110.232

🇳🇱 195.178.110.228

🇧🇷 187.40.215.162

🇺🇸 172.253.85.248

🇺🇸 162.144.61.95