JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.4.144

65.111.4.144 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.4.144

Whois 65.111.4.144

IP Abuse Reports for 65.111.4.144:

This IP address has been reported a total of 33 times from 16 distinct sources. 65.111.4.144 was first reported on April 25th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-04-13 08:33:37 (1 month ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇺🇸 TPI-Abuse	2026-03-05 08:16:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 03:16:32.214321 2026] [security2:error] [pid 5952:tid 6020] [client 65.111.4.144:59233] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/b0/79d1f0a4c82da6544cc4679905f0a482319386"] [unique_id "aak74KwuXG4acSOhQRYDNgAAAVc"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 relianoid.com	2026-01-28 13:17:33 (4 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2025-12-23 19:26:30 (5 months ago)	wordpress-trap	Web App Attack
Anonymous	2025-12-04 03:24:06 (6 months ago)	2025-12-04T05:24:06.001691+02:00 zanati wp(www.sahpa.co.za)[382619]: Blocked authentication attempt ... show more 2025-12-04T05:24:06.001691+02:00 zanati wp(www.sahpa.co.za)[382619]: Blocked authentication attempt for [email protected] from 65.111.4.144 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 08:33:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 03:33:53.429865 2025] [security2:error] [pid 2608:tid 2608] [client 65.111.4.144:54913] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.blackjobsnetwork.com"] [uri "/.env"] [unique_id "aSa7cdXj46OQqcDrKUPrNAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:13:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:13:54.173958 2025] [security2:error] [pid 21741:tid 21741] [client 65.111.4.144:17769] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deepseasugar.com.lakesidedetectiveagency.com"] [uri "/.env"] [unique_id "aSZUUjjNJEgIlt7qg_YYFgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:21:55 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:21:49.812151 2025] [security2:error] [pid 25832:tid 25832] [client 65.111.4.144:50947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nsdorganogram.org"] [uri "/.git/HEAD"] [unique_id "aSUu3Wqh8Od_Ok43Osfi3wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 04:05:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 23:05:49.267281 2025] [security2:error] [pid 28063:tid 28063] [client 65.111.4.144:56119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.esad.com"] [uri "/.svn/wc.db"] [unique_id "aSUrHcOnlDXSgVXEALLWhQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 03:20:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 22:20:03.318060 2025] [security2:error] [pid 6019:tid 6019] [client 65.111.4.144:27203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ilandman.com"] [uri "/.git/HEAD"] [unique_id "aSUgYxX0KTDiCvcNKosEkgAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:35:47 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:35:40.464052 2025] [security2:error] [pid 7528:tid 7528] [client 65.111.4.144:59869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.tt-w.com"] [uri "/.env"] [unique_id "aSP8vD1Zm_l8kb4YT-XXEwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 17:38:57 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-11-11 08:31:44 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.4.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 03:31:40.663776 2025] [security2:error] [pid 13910:tid 13910] [client 65.111.4.144:42291] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.snickerifabrik.com"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aRL0bPFZuINzzP94CaxPMQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-07 08:26:09 (7 months ago)	[redacted] 65.111.4.144 - - [07/Nov/2025:09:25:52 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mo ... show more [redacted] 65.111.4.144 - - [07/Nov/2025:09:25:52 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_2_6 like Mac OS X) AppleWebKit/604.1.34 (KHTML, like Gecko) CriOS/65.0.3325.152 Mobile/15D100 Safari/604.1" [redacted] 65.111.4.144 - - [07/Nov/2025:09:25:54 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_1 like Mac OS X) AppleWebKit/537.51.2 (KHTML, like Gecko) Version/7.0 Mobile/11D167 Safari/9537.53" [redacted] 65.111.4.144 - - [07/Nov/2025:09:25:56 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (Android 6.0.1; Mobile; rv:57.0) Gecko/57.0 Firefox/57.0" [redacted] 65.111.4.144 - - [07/Nov/2025:09:25:57 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_5) AppleWebKit/601.6.17 (KHTML, like Gecko) Version/9.1.1 Safari/537.86.6" [redacted] 65.111.4.144 - - [07/Nov/2025:09:26:00 +0100] "POST /xmlrpc.php HTTP/2.0" 200 446 "-" "Mozi ... show less	Hacking Web App Attack
Anonymous	2025-11-02 15:28:34 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:27:47	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.161

🇮🇳 103.252.168.4

🇷🇴 80.94.95.115

🇻🇳 14.191.142.27

🇺🇸 2600:1702:6dc1:3f80:2501:4b4c:8716:c165

🇹🇼 198.235.24.118

🇹🇼 198.235.24.117

🇺🇸 192.178.66.90

🇧🇷 187.49.163.223

🇰🇷 158.180.79.132

🇮🇳 103.206.139.172

🇺🇸 74.7.241.42

🇸🇬 68.183.191.68

🇺🇸 66.225.209.55

🇳🇱 45.148.10.151

🇸🇳 41.82.50.218

🇺🇸 2001:470:2cc:1::180

🇰🇷 211.254.212.59

🇺🇸 209.205.218.26

🇹🇼 198.235.24.115