JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.3.165

65.111.3.165 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.3.165

Whois 65.111.3.165

IP Abuse Reports for 65.111.3.165:

This IP address has been reported a total of 24 times from 15 distinct sources. 65.111.3.165 was first reported on June 25th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-05-16 01:39:30 (3 weeks ago)	(From [email protected]) Hi Rubin Family Chiropractic, I wanted to bump this in cas ... show more (From [email protected]) Hi Rubin Family Chiropractic, I wanted to bump this in case you missed it — I built an AI agent just for Rubin Family Chiropractic, trained on your website, Google info, and everything I could find. It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part. Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee. Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇬🇧 PeravixGroup	2026-05-09 09:35:24 (4 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
Anonymous	2026-03-30 11:36:08 (2 months ago)	Forum/form spam	Web Spam
🇩🇪 juutis	2026-03-12 10:24:47 (2 months ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
Anonymous	2026-02-10 23:34:25 (3 months ago)	Forum/form spam	Web Spam
Anonymous	2026-01-18 16:55:13 (4 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-01-16 22:54:56 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.165 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 17:54:53.187328 2026] [security2:error] [pid 2501:tid 2501] [client 65.111.3.165:21789] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.teguer.com"] [uri "/.env"] [unique_id "aWrBvR5E-qybdBoe2mlNUwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-13 10:54:56 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.165 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.165 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 13 05:54:50.588478 2026] [security2:error] [pid 247964:tid 247964] [client 65.111.3.165:30537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keychainfilms.com"] [uri "/.env"] [unique_id "aWYkelKP7YhFWSeBR5osqwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-01-13 03:00:13 (4 months ago)	Bad file extension: 65.111.3.165 - - [13/Jan/2026:02:56:22 +0000] "GET /.svn/wc.db HTTP/1.1" 404 24 ... show more Bad file extension: 65.111.3.165 - - [13/Jan/2026:02:56:22 +0000] "GET /.svn/wc.db HTTP/1.1" 404 247 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-01-05 02:11:42 (5 months ago)	Probing websites for vulnerabilities	Web App Attack
Anonymous	2025-12-08 12:12:34 (5 months ago)	botnet	DDoS Attack
Anonymous	2025-11-14 04:31:08 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇬🇧 relianoid.com	2025-11-06 18:44:01 (6 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2025-10-17 13:10:30 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-16 22:16:22 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.185.136.57

🇦🇹 213.225.38.154

🇲🇽 187.140.79.156

🇨🇳 180.102.110.159

🇺🇸 172.253.85.93

🇭🇰 118.193.44.184

🇻🇳 113.182.30.51

🇭🇰 103.218.241.245

🇦🇺 3.107.174.248

🇺🇸 2600:1f18:3120:f501:aa60:32ad:5289:b1b3

🇭🇰 190.92.239.81

🇳🇱 185.226.197.49

🇬🇧 185.127.71.129

🇳🇱 176.65.139.229

🇺🇸 130.94.12.189

🇮🇳 122.187.235.148

🇵🇱 81.210.53.105

🇵🇰 45.194.15.129

🇳🇱 45.148.10.151

🇨🇳 36.32.104.163