JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.4.136

65.111.4.136 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.4.136

Whois 65.111.4.136

IP Abuse Reports for 65.111.4.136:

This IP address has been reported a total of 28 times from 15 distinct sources. 65.111.4.136 was first reported on June 28th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-21 21:12:38 (2 months ago)	Forum/form spam	Web Spam
🇮🇩 sockominfo	2026-02-18 20:01:00 (3 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-18 05:00:40 (3 months ago)	Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 5. ... show more Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 5.1/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-17 23:00:09 (3 months ago)	Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 7. ... show more Administrative account creation during non-business hours - Jakarta timezone (WIB). Threat Score: 7.9/10 (HIGH). CVSS: 7/10 (High). Bayesian: 86%. MITRE: T1566. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇨🇭 backslash	2025-12-31 11:30:05 (5 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2025-12-18 18:06:19 (5 months ago)	wordpress-trap	Web App Attack
🇺🇸 myagent.site	2025-12-12 08:13:43 (5 months ago)	Blocking for trying to access an exploit file: /wordpress//kickstart.php	Hacking
🇦🇺 MAGIC	2025-12-07 00:05:09 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 homeshowdomain.nl	2025-11-25 23:03:58 (6 months ago)	Auto-ban: >3000 req/min op 2025-11-25	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-25 07:35:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:35:25.041664 2025] [security2:error] [pid 17018:tid 17018] [client 65.111.4.136:33907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.xtrl.com"] [uri "/.env"] [unique_id "aSVcPW-k7nZRT-rtBfZuaAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 07:06:24 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:06:17.255545 2025] [security2:error] [pid 23953:tid 23953] [client 65.111.4.136:17667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.gmacguffin.com"] [uri "/.git/HEAD"] [unique_id "aSVVaXumGigc5QtdCBw7GwAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:55:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.136 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:55:50.026267 2025] [security2:error] [pid 1817001:tid 1817051] [client 65.111.4.136:44143] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dulemba.com"] [uri "/.git/HEAD"] [unique_id "aSU21mR1ttxeyDpsCa9gvwAAAYw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-10 21:04:34 (6 months ago)	2025-11-10T23:04:34.403079+02:00 zanati wp(www.sahpa.co.za)[2464480]: Blocked authentication attempt ... show more 2025-11-10T23:04:34.403079+02:00 zanati wp(www.sahpa.co.za)[2464480]: Blocked authentication attempt for [email protected] from 65.111.4.136 ... show less	Web App Attack
Anonymous	2025-10-28 22:04:59 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇬🇧 openstrike.co.uk	2025-10-19 10:59:22 (7 months ago)	12 packets to port 22	Brute-Force SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 183.171.158.232

🇺🇸 162.144.238.147

🇺🇸 66.132.172.138

🇳🇱 176.65.139.173

🇧🇬 79.124.58.130

🇻🇳 27.71.230.31

🇰🇷 220.80.66.168

🇧🇷 187.72.128.177

🇺🇸 134.122.118.134

🇸🇬 101.47.156.170

🇺🇸 69.12.64.60

🇺🇸 67.207.86.226

🇸🇬 43.163.81.180

🇹🇼 35.201.130.161

🇨🇳 222.222.168.9

🇬🇧 193.163.125.50

🇺🇸 162.216.149.18

🇺🇸 138.91.105.36

🇵🇰 116.71.136.125

🇺🇸 64.95.9.250