JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.3.50

65.111.3.50 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 29%: ?

29%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.3.50

Whois 65.111.3.50

IP Abuse Reports for 65.111.3.50:

This IP address has been reported a total of 45 times from 19 distinct sources. 65.111.3.50 was first reported on July 10th 2024, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-07-03 04:17:17 (13 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇫🇷 pm33	2026-07-02 21:43:41 (19 hours ago)	Wordpress login attempts	Brute-Force
Anonymous	2026-06-27 23:34:31 (5 days ago)	[ns41.kdns.gr] httpd-login-spray-site: sites=jiotis.gr; logs=/var/log/httpd/domains/jiotis.gr.log; s ... show more [ns41.kdns.gr] httpd-login-spray-site: sites=jiotis.gr; logs=/var/log/httpd/domains/jiotis.gr.log; samples=site_wide=true \| distinct_ips=29 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 mnsf	2026-05-28 22:06:22 (1 month ago)	Scanning/Probing (34)	Brute-Force Web App Attack
🇲🇹 Malta	2026-05-17 09:21:30 (1 month ago)	65.111.3.50 - - [17/May/2026:11:21:30 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ... show more 65.111.3.50 - - [17/May/2026:11:21:30 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" show less	Hacking Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (4 months ago)	Probing for Exploits	Exploited Host Web App Attack
Anonymous	2025-12-30 13:20:17 (6 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇨🇦 SSH-Admin	2025-12-27 22:05:38 (6 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 22:11:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 17:11:48.486701 2025] [security2:error] [pid 18429:tid 18429] [client 65.111.3.50:13645] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stardancertantra.com"] [uri "/.git/HEAD"] [unique_id "aS9kJDIe1luy1KzCOF8kXQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:24:09 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:24:03.055549 2025] [security2:error] [pid 7944:tid 7944] [client 65.111.3.50:14051] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orleansdartclub.com"] [uri "/.env"] [unique_id "aS6iI3ZISbS3FrO3IzaIJAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:14:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:14:50.497990 2025] [security2:error] [pid 32184:tid 32184] [client 65.111.3.50:13647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rhysryan.com"] [uri "/.env"] [unique_id "aS51yslsjzYZhb6X43pqbQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 23:57:55 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 18:57:49.942312 2025] [security2:error] [pid 12012:tid 12012] [client 65.111.3.50:22529] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abilityimprinting.com"] [uri "/.git/config"] [unique_id "aSo2_VHfNrAGMe4p48xO7AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-28 21:33:14 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 28 16:33:09.364615 2025] [security2:error] [pid 1949974:tid 1949974] [client 65.111.3.50:42371] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abakada.net"] [uri "/wp-config.php.bak"] [unique_id "aSoVFdNdDsIYS6k_V629RwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 ki3	2025-11-21 02:34:34 (7 months ago)	Fail2Ban: Web App Attacks and Forum Spam 65.111.3.50 1763692474.0(JST)	Web Spam Bad Web Bot Web App Attack
Anonymous	2025-11-14 05:34:50 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 34.148.162.49

🇨🇭 209.99.184.143

🇮🇳 160.238.92.233

🇲🇿 160.119.157.118

🇮🇳 124.253.68.71

🇨🇳 115.56.238.174

🇮🇳 103.118.35.22

🇯🇵 20.78.136.78

🇸🇬 167.99.72.161

🇲🇲 103.95.4.166

🇺🇸 97.165.193.219

🇺🇸 52.224.109.126

🇺🇸 45.66.209.12

🇪🇬 41.33.231.52

🇩🇪 213.209.159.231

🇭🇰 199.45.155.101

🇷🇺 138.124.69.150

🇵🇰 110.39.179.200

🇺🇸 48.214.55.32

🇯🇵 34.97.241.132