JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.3.89

65.111.3.89 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.3.89

Whois 65.111.3.89

IP Abuse Reports for 65.111.3.89:

This IP address has been reported a total of 39 times from 13 distinct sources. 65.111.3.89 was first reported on June 26th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nowyouknow	2026-05-14 14:38:14 (3 weeks ago)	(From [email protected]) Hi Lampe Chiropractic, I wanted to bump this in case you m ... show more (From [email protected]) Hi Lampe Chiropractic, I wanted to bump this in case you missed it — I built an AI agent just for Lampe Chiropractic, trained on your website, Google info, and everything I could find. It’s ready to answer customer questions, book appointments, and even follow up automatically. On average, our agents help increase leads by 17% without any work needed on your part. Again, this isn’t a pitch — just 20 minutes to test-drive your new AI employee. Here’s the link to book a time: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
Anonymous	2026-05-12 20:53:27 (3 weeks ago)	RdpGuard detected brute-force attempt on RD-WEB	Brute-Force
🇺🇸 nowyouknow	2026-03-09 12:09:35 (2 months ago)	(From [email protected]) No experience is necessary and full training is provided. But before yo ... show more (From [email protected]) No experience is necessary and full training is provided. But before you apply, you need to see which role you’re best suited for. Go here to take the Writing Job Quiz. ---> http://PaidToWrite.Online/ Once you finish the quiz, you’ll get a breakdown of the best opportunities available for you right now. Visit -----> http://PaidToWrite.Online/ show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-03-03 16:19:11 (3 months ago)	(From [email protected]) No experience is necessary and full training is provided. But before yo ... show more (From [email protected]) No experience is necessary and full training is provided. But before you apply, you need to see which role you’re best suited for. Go here to take the Writing Job Quiz. ---> http://PaidToWrite.Online/ Once you finish the quiz, you’ll get a breakdown of the best opportunities available for you right now. Visit -----> http://PaidToWrite.Online/ show less	Phishing Web Spam
🇵🇱 sefinek.net	2025-12-27 12:55:13 (5 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-24 05:45:16 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.89 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:45:06.981804 2025] [security2:error] [pid 26807:tid 26807] [client 65.111.3.89:55187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiamur.photo"] [uri "/.svn/wc.db"] [unique_id "aSPw4qlHnp9RQCPLtRgt0gAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:36:18 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.89 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:36:10.773379 2025] [security2:error] [pid 6412:tid 6419] [client 65.111.3.89:58521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7sons.net"] [uri "/.env"] [unique_id "aSPgukyDoMLJzUy1IP56FgAAAMU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:46:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.89 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:46:47.079560 2025] [security2:error] [pid 3965260:tid 3965376] [client 65.111.3.89:34455] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.boatservicesgroup.com"] [uri "/.svn/wc.db"] [unique_id "aSPVJ6yiyKH59MCrZuHpJQAAAhg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 17:32:43 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-27 11:17:56 (7 months ago)	wordpress-trap	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-26 20:29:49 (7 months ago)	WP Admin Scan Activities	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-10-26 12:38:11 (7 months ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-10-25 22:44:36 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-25 16:51:51 (7 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-10-22 11:12:14 (7 months ago)	wordpress-trap	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 49.51.39.209

🇮🇳 152.32.158.219

🇨🇳 120.224.15.67

🇰🇷 115.94.228.75

🇨🇳 106.13.114.161

🇵🇱 87.251.64.158

🇮🇹 83.224.159.245

🇨🇦 67.71.55.209

🇺🇸 18.144.236.177

🇨🇳 14.103.127.2

🇬🇧 195.96.139.185

🇨🇭 153.75.80.77

🇵🇭 119.92.76.210

🇸🇬 103.189.234.85

🇱🇹 81.30.98.62

🇺🇸 20.169.105.52

🇳🇱 2a02:4780:8:1848:0:2a7d:345e:1

🇩🇪 192.109.200.215

🇮🇳 165.140.164.99

🇳🇬 155.93.96.210