JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.3.1

65.111.3.1 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 17%: ?

17%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.3.1

Whois 65.111.3.1

IP Abuse Reports for 65.111.3.1:

This IP address has been reported a total of 29 times from 16 distinct sources. 65.111.3.1 was first reported on June 27th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-08-01 00:41:39 (3 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-31 00:18:14 (3 weeks ago)	Web App Attack	Web App Attack
🇲🇽 Centynova Corp.	2026-07-17 07:35:12 (1 month ago)	Blocked by threat detection service. Centynova Security [Fuerza bruta y Ataque a servicios web]	Brute-Force Web App Attack
🇮🇹 VHosting	2026-07-16 18:50:04 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 stinpriza	2026-07-12 04:57:40 (1 month ago)	Web App Attack	Web App Attack
🇩🇪 NxtGenIT	2026-06-19 05:52:57 (2 months ago)	Redishoneypot Honeypot hit, Action: Closed	IoT Targeted
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇲🇹 Malta	2026-01-01 14:11:29 (7 months ago)	65.111.3.1 - - [01/Jan/2026:15:11:29 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 1 ... show more 65.111.3.1 - - [01/Jan/2026:15:11:29 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.207 Safari/537.36" show less	VPN IP Hacking Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:58:08 (7 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
Anonymous	2025-11-29 12:18:36 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.29 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:47:43 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:47:37.544603 2025] [security2:error] [pid 19886:tid 19886] [client 65.111.3.1:13833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pfmarch.com"] [uri "/.git/HEAD"] [unique_id "aSQbqV3V5gOeermQJpnmYAAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:59:15 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:59:11.614064 2025] [security2:error] [pid 17106:tid 17106] [client 65.111.3.1:24665] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alextra.org"] [uri "/.git/HEAD"] [unique_id "aSP0L53nmmK-YW98YYM1kAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:37:17 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:37:12.166559 2025] [security2:error] [pid 3965260:tid 3965368] [client 65.111.3.1:44875] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.catslife.net"] [uri "/.git/HEAD"] [unique_id "aSPS6KyiyKH59MCrZuHiggAAAhA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-16 21:42:25 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.16 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 TPI-Abuse	2025-11-16 15:42:09 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 65.111.3.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 10:42:05.813093 2025] [security2:error] [pid 18279:tid 18302] [client 65.111.3.1:13153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.pinnaclemgmt.net\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.pinnaclemgmt.net"] [uri "/s3cmd.ini"] [unique_id "aRnwzUI7CeOka9rQNW8f2gAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.189.236.151

🇦🇷 190.138.123.32

🇺🇸 161.35.238.241

🇨🇳 112.102.222.47

🇻🇳 103.9.204.209

🇭🇰 101.36.107.233

🇨🇳 221.228.203.3

🇪🇸 196.196.150.4

🇳🇱 193.47.62.69

🇦🇷 186.61.170.118

🇺🇸 172.253.221.153

🇳🇱 172.71.103.220

🇺🇸 147.185.132.97

🇨🇳 111.26.177.216

🇮🇳 110.173.190.221

🇯🇵 101.36.104.242

🇺🇸 92.118.112.176

🇺🇸 52.20.198.190

🇺🇸 48.217.227.245

🇺🇦 37.139.170.225