JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.4.141

65.111.4.141 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 31%: ?

31%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.4.141

Whois 65.111.4.141

IP Abuse Reports for 65.111.4.141:

This IP address has been reported a total of 35 times from 21 distinct sources. 65.111.4.141 was first reported on June 1st 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Bedios GmbH	2026-07-09 03:13:11 (7 hours ago)	Wordpress hacking attempt	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-08 17:14:17 (17 hours ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇦🇺 screwlooseit.com.au	2026-07-07 13:42:01 (1 day ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN US/United States/-	Web App Attack
🇫🇷 dynamix	2026-07-03 06:02:17 (6 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 4server	2026-07-01 07:20:22 (1 week ago)	[WedJul0109:20:17.5304282026][security2:error][pid1252276:tid1252323][client65.111.4.141:0]ModSecuri ... show more [WedJul0109:20:17.5304282026][security2:error][pid1252276:tid1252323][client65.111.4.141:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"ggarchitetti.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"akS_sZlftBtigLHcJwUrmAAAAEg\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 MAGIC	2026-05-20 02:08:28 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 nowyouknow	2026-05-05 16:04:21 (2 months ago)	(From [email protected]) Hello there, Quick note… I recently launched a FREE giveaway, a ... show more (From [email protected]) Hello there, Quick note… I recently launched a FREE giveaway, and made sure you’ve got a spot. Jump in here before it closes: https://suniljaindvg.systeme.io/6850adaf Someone’s going to win… why not you? To opt out of any further messages from me, please submit the form on my site show less	Phishing Web Spam
🇱🇻 garmtech.com	2026-04-26 02:59:41 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-59.65.111.4.141.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-59.65.111.4.141.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
Anonymous	2026-04-18 22:09:03 (2 months ago)	Forum/form spam	Web Spam
Anonymous	2026-02-06 10:27:54 (5 months ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-01-26 04:10:47 (5 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2026-01-02 19:00:48 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 02 14:00:41.748224 2026] [security2:error] [pid 6814:tid 6814] [client 65.111.4.141:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nursetammytalks.com"] [uri "/.svn/wc.db"] [unique_id "aVgV2VhNE5q_CI9l_UPFDAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:14:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:14:47.936305 2025] [security2:error] [pid 22259:tid 22259] [client 65.111.4.141:37667] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.vintagetejas.com"] [uri "/.env"] [unique_id "aSVJV-2vzbkGEOU-daK9egAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 IROK	2025-11-25 05:40:08 (7 months ago)	25/Nov/2025:06:40:03.446266 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client ... show more 25/Nov/2025:06:40:03.446266 +0100Apache-Error: [file "apache2_util.c"] [line 273] [level 3] [client 65.111.4.141] ModSecurity: Access denied with code 403 (phase 2). String match ".aws/credentials" at REQUEST_URI. [file "remote server"] [line "-1"] [id "430069"] [msg "Malware.Expert - request_uri: AWS Credentials"] [tag "MEWAF"] [hostname "elblag.it"] [uri "/.aws/credentials"] [unique_id "aSVBM6rqJzg6kidRXbnsbAAAAEE"] ... show less	Hacking
🇺🇸 TPI-Abuse	2025-11-25 02:53:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 21:53:50.695754 2025] [security2:error] [pid 1975:tid 1975] [client 65.111.4.141:32515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daveewalker.bz"] [uri "/.env"] [unique_id "aSUaPok3KdNGz3BGQUJxGwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 185.100.212.141

🇺🇸 184.105.247.244

🇵🇱 176.53.159.198

🇺🇸 146.190.164.135

🇫🇷 85.217.140.42

🇬🇳 41.79.236.50

🇩🇪 213.209.159.225

🇧🇷 129.121.42.131

🇹🇷 213.142.156.224

🇩🇪 195.201.169.60

🇦🇴 193.163.125.101

🇩🇪 88.214.25.121

🇳🇱 45.148.10.240

🇺🇸 216.73.217.21

🇻🇳 160.250.133.77

🇫🇮 147.185.133.73

🇺🇬 129.205.2.18

🇻🇳 103.221.220.62

🇲🇦 102.78.189.214

🇷🇴 92.118.39.77