JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.3.139

65.111.3.139 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 22%: ?

22%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.3.139

Whois 65.111.3.139

IP Abuse Reports for 65.111.3.139:

This IP address has been reported a total of 27 times from 15 distinct sources. 65.111.3.139 was first reported on June 26th 2024, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Kacelly Nima	2026-09-21 01:15:42 (43 minutes ago)		Bad Web Bot Blog Spam Brute-Force DDoS Attack DNS Compromise DNS Poisoning Email Spam Exploited Host Fraud Orders Fraud VoIP FTP Brute-Force Hacking IoT Targeted Open Proxy Phishing Ping of Death Port Scan Spoofing SQL Injection SSH VPN IP Web App Attack Web Spam
🇸🇪 shab	2026-09-04 02:20:44 (2 weeks ago)	Suspicious VPN activity	Brute-Force
🇨🇭 SOC [GOLINE SA]	2026-09-02 16:31:25 (2 weeks ago)	[RoutePulse \| 2026-09-02T16:31:24Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 65.111.3.13 ... show more [RoutePulse \| 2026-09-02T16:31:24Z \| RTBH-INJECTED] ATTACK CLASS: vpn_bruteforce SOURCE: 65.111.3.139 EVIDENCE: Cisco VPN RA Brute force on Cisco FTDv — distributed attack (6 attempts/15min) DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Brute-Force Hacking
🇫🇷 Sklurk	2026-09-01 00:47:15 (2 weeks ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 04:24:01 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:23:53.882888 2026] [security2:error] [pid 7950:tid 7950] [client 65.111.3.139:18203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kln.ne.jp"] [uri "/.env"] [unique_id "aZaQWVG2MRuwE2QmoMlKOQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:44:44 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:44:41.135104 2026] [security2:error] [pid 26388:tid 26388] [client 65.111.3.139:51919] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinaffanchufoods.com"] [uri "/app/.git/config"] [unique_id "aZaHKVqOA0zPgyPtWbmu1gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 03:18:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:18:14.701274 2026] [security2:error] [pid 32744:tid 32744] [client 65.111.3.139:55023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kewlkarz.com"] [uri "/api/.git/config"] [unique_id "aZaA9oawDmPj9M0bkppenQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 02:33:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:33:18.744693 2026] [security2:error] [pid 31174:tid 31174] [client 65.111.3.139:15705] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kcmastercleaners.com"] [uri "/app/.git/config"] [unique_id "aZZ2biYzvFIB3NcvWQeTggAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-19 00:10:52 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 19:10:46.421362 2026] [security2:error] [pid 32199:tid 32199] [client 65.111.3.139:49327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vitality-webb.com"] [uri "/app/.git/config"] [unique_id "aZZVBi5A6CZZqZdNxMGQIgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 19:09:20 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:09:15.840440 2026] [security2:error] [pid 23651:tid 23651] [client 65.111.3.139:10027] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timlandry.com"] [uri "/v2/.git/config"] [unique_id "aZYOW_q1TCmvnqJr46fbwwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-02-18 13:49:12 (7 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 11:44:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 06:44:46.983252 2026] [security2:error] [pid 20929:tid 20929] [client 65.111.3.139:51849] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wallpaperpro.com"] [uri "/new/.git/config"] [unique_id "aZWmLsWMSn8663CPPBVkqwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-22 17:38:16 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 fbarela	2025-11-07 22:01:16 (10 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2025-11-02 17:21:37 (10 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:29:44	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.172

🇮🇩 182.253.244.5

🇵🇱 176.53.159.197

🇺🇸 172.212.225.223

🇫🇷 169.58.124.238

🇺🇸 165.154.162.74

🇺🇸 162.216.150.214

🇨🇳 118.145.242.91

🇹🇷 94.154.43.196

🇳🇱 89.248.173.219

🇨🇳 36.99.46.101

🇬🇧 35.203.211.18

🇸🇬 34.143.198.151

🇫🇷 2001:41d0:304:300::3de9

🇺🇸 191.96.196.10

🇲🇽 187.173.249.153

🇨🇦 143.110.213.72

🇬🇧 35.203.211.238

🇺🇸 204.8.96.179

🇭🇰 202.155.236.242