JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.5.120

65.111.5.120 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.5.120

Whois 65.111.5.120

IP Abuse Reports for 65.111.5.120:

This IP address has been reported a total of 40 times from 24 distinct sources. 65.111.5.120 was first reported on July 7th 2024, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Ben Schoolland	2026-09-15 12:14:41 (4 days ago)	Requested known WordPress backdoor/scanner-only paths. No legitimate use.	Bad Web Bot Web App Attack
🇪🇸 librebit	2026-09-02 13:00:43 (2 weeks ago)	Brute force	Brute-Force
Anonymous	2026-08-04 06:13:58 (1 month ago)	65.111.5.120 - - [04/Aug/2026:03:13:57 -0300] "GET /mysql_backup.sql HTTP/1.1" 404 826 "-" "Mozilla/ ... show more 65.111.5.120 - - [04/Aug/2026:03:13:57 -0300] "GET /mysql_backup.sql HTTP/1.1" 404 826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" ... show less	Port Scan
🇺🇸 mnsf	2026-06-04 19:06:59 (3 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇫🇷 solution.it	2026-06-02 07:34:06 (3 months ago)	[Tue Jun 02 09:34:05.963546 2026] [php7:error] [pid 409456:tid 409456] [client 65.111.5.120:20907] s ... show more [Tue Jun 02 09:34:05.963546 2026] [php7:error] [pid 409456:tid 409456] [client 65.111.5.120:20907] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-02-18 01:04:48 (7 months ago)	65.111.5.120 - - [18/Feb/2026:03:04:47 +0200] "GET /api/.env HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Win ... show more 65.111.5.120 - - [18/Feb/2026:03:04:47 +0200] "GET /api/.env HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 65.111.5.120 - - [18/Feb/2026:03:04:47 +0200] "GET /admin/.env HTTP/1.1" 404 357 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 01:01:34 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.120 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:01:27.740547 2026] [security2:error] [pid 26802:tid 26802] [client 65.111.5.120:31835] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pc-rack.com"] [uri "/.env"] [unique_id "aZUPZxVbriVi1l5VPh8eLAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 SSH-Admin	2026-02-07 17:12:28 (7 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-31 00:57:51 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇦 SSH-Admin	2025-12-27 13:45:08 (8 months ago)	Probing for Exploits	Exploited Host Web App Attack
🇱🇻 garmtech.com	2025-12-14 22:30:00 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-29.65.111.5.120.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-29.65.111.5.120.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇫🇮 Shaik Sai Meera	2025-12-09 22:20:10 (9 months ago)	IM360 WAF: Hidden file access	Brute-Force
🇺🇸 myagent.site	2025-12-08 15:21:46 (9 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
🇺🇸 TPI-Abuse	2025-12-08 01:41:52 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.120 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 20:41:47.736475 2025] [security2:error] [pid 29185:tid 29193] [client 65.111.5.120:14619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dpscsde.com"] [uri "/.svn/wc.db"] [unique_id "aTYs215uOw4Rt_ZAP1FCSQAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-07 15:57:40 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.120 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.120 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 07 10:57:33.036366 2025] [security2:error] [pid 24880:tid 24880] [client 65.111.5.120:37587] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingdombuilderschurchmd.org"] [uri "/.git/HEAD"] [unique_id "aTWj7c8T6Lg-smT3efxYRgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.204.56.94

🇺🇿 213.230.93.116

🇺🇦 188.130.177.80

🇮🇳 103.248.120.6

🇮🇩 103.154.179.151

🇭🇰 101.36.119.247

🇷🇺 93.171.102.105

🇭🇺 89.134.212.83

🇬🇧 89.37.172.136

🇫🇷 85.217.140.29

🇸🇦 79.72.3.119

🇺🇸 70.169.11.219

🇳🇱 45.148.10.35

🇹🇼 35.221.197.38

🇯🇵 34.97.235.30

🇱🇹 213.176.26.74

🇺🇸 209.194.41.71

🇺🇸 162.216.150.45

🇺🇸 162.216.149.149

🇮🇳 103.88.76.27