JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.2.137

65.111.2.137 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 15%: ?

15%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.2.137

Whois 65.111.2.137

IP Abuse Reports for 65.111.2.137:

This IP address has been reported a total of 41 times from 21 distinct sources. 65.111.2.137 was first reported on June 27th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 fbarela	2026-08-24 01:00:28 (2 days ago)	FortiGate SSL VPN login failures.	Brute-Force Hacking
🇭🇺 matrixonline	2026-07-26 14:37:00 (1 month ago)	Jennifer [email protected] 83785595775 В даркнете нет гарантий безопасности. Но есть агрег ... show more Jennifer [email protected] 83785595775 В даркнете нет гарантий безопасности. Но есть агрегаторы, которые делают безопасность максимально вероятной. И это лучшее, что может предложить скрытая сеть своим пользователям. Здесь можно реализовать любой товар или услугу и параллельно получить доступ к ценным информационным материалам. [url=https://24x7.lc/n3bMh]САЙТЫ ДЛЯ ТОР БРАУЗЕРА[/url] Исследователи ИБ ныряют в бездну без страховки, зная, что их прикроет многослойный лук Tor. show less	Web Spam
🇫🇷 Sklurk	2026-07-09 00:49:38 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-07 23:59:29 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 02:57:17 (2 months ago)	Web App Attack	Web App Attack
Anonymous	2026-06-17 03:00:05 (2 months ago)	Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) ... show more Large-scale coordinated botnet (200+k IPs). Attacker: mikhail-smirnov-79830323 (LinkedIn/profile ID) employed by Angara Technologies Group (Explicitly identified himself as enemy a week before attack began) \| Attack Signature Blocked: /wishlist/index/add/product/11579/form_key/YSPKVqfjIbpbdpdw/ \| UA: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot Web App Attack
🇦🇺 MAGIC	2026-03-21 00:57:40 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇹 ciccio diddo	2026-02-12 20:09:14 (6 months ago)	CMS/WP Exploit xmlrpc port:Tcp/80,443	Brute-Force Web App Attack
🇲🇹 Malta	2026-01-30 03:42:09 (6 months ago)	65.111.2.137 - - [30/Jan/2026:04:42:08 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 65.111.2.137 - - [30/Jan/2026:04:42:08 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	Hacking Web App Attack
🇦🇺 MAGIC	2025-12-07 00:09:18 (8 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-26 08:49:28 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.137 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:49:24.890818 2025] [security2:error] [pid 22657:tid 22657] [client 65.111.2.137:48987] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daviddenotaris.com"] [uri "/.git/HEAD"] [unique_id "aSa_FJ4zt_m_c-jEySlLpAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2025-11-26 05:43:48 (9 months ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:38:08 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.137 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:38:03.953766 2025] [security2:error] [pid 9956:tid 9956] [client 65.111.2.137:37843] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dalore.com"] [uri "/.git/HEAD"] [unique_id "aSVOywAsle_aM3m0v006MgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 kumiko	2025-11-25 05:57:29 (9 months ago)	[2025-11-25 07:57:29] Probing for dotfiles "GET /.svn/wc.db HTTP/1.1" 301	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:27:53 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.2.137 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.2.137 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:27:45.773781 2025] [security2:error] [pid 2243:tid 2243] [client 65.111.2.137:28475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.snowrideadventures.com"] [uri "/.svn/wc.db"] [unique_id "aSQlEXaatn-sILewwp5JngAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 124.120.157.77

🇲🇦 102.99.57.187

🇲🇽 189.190.217.141

🇻🇳 152.32.162.142

🇺🇸 34.34.229.12

🇺🇸 34.24.13.68

🇬🇧 193.163.125.181

🇨🇳 180.76.236.214

🇺🇸 134.199.238.80

🇰🇷 118.37.214.187

🇻🇳 115.79.125.54

🇺🇸 66.228.62.150

🇺🇸 66.132.172.196

🇳🇱 45.142.193.164

🇫🇷 45.77.61.56

🇺🇸 13.89.125.254

🇨🇳 218.78.63.123

🇩🇪 178.105.152.141

🇸🇬 148.66.142.9

🇳🇱 185.2.80.253