JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.5.141

65.111.5.141 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.5.141

Whois 65.111.5.141

IP Abuse Reports for 65.111.5.141:

This IP address has been reported a total of 23 times from 14 distinct sources. 65.111.5.141 was first reported on July 18th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-06-01 05:42:50 (3 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-42.65.111.5.141.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 08-42.65.111.5.141.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Hazzard	2026-05-21 20:01:16 (2 weeks ago)	(wordpress) Failed wordpress login from 65.111.5.141 (US/United States/Virginia/Ashburn/-/[redacted] ... show more (wordpress) Failed wordpress login from 65.111.5.141 (US/United States/Virginia/Ashburn/-/[redacted]): (CF_ENABLE) show less	Brute-Force
🇱🇻 garmtech.com	2026-02-28 17:38:52 (3 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-38.65.111.5.141.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-38.65.111.5.141.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 04:19:32 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 23:19:25.375604 2026] [security2:error] [pid 908:tid 908] [client 65.111.5.141:10449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.coolcustomproducts.com"] [uri "/.env"] [unique_id "aWsNzWQdsYBtDwwhylUrKAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 SOC Blue Team	2026-01-16 18:12:40 (4 months ago)	Tatic: TA0006 \| Technique: T1110 \| Source: TAP \| Country Destination: BR	Brute-Force
🇺🇸 TPI-Abuse	2026-01-16 03:22:23 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.5.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 65.111.5.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 22:22:19.106090 2026] [security2:error] [pid 29542:tid 29542] [client 65.111.5.141:60837] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sangalgano.info\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sangalgano.info"] [uri "/s3cmd.ini"] [unique_id "aWmu64rWq_OPP91bAfZPUgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇺 bcsaba	2025-12-27 20:49:58 (5 months ago)	Joomla spam 65.111.5.141 - - [27/Dec/2025:21:49:54 +0100] "GET /index.php?option=com_easyblog&view=d ... show more Joomla spam 65.111.5.141 - - [27/Dec/2025:21:49:54 +0100] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 789 "https://REDACTED" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0" show less	Web App Attack
Anonymous	2025-12-04 01:04:27 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-11-14 03:50:56 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 17:40:01 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:34:54	Port Scan Brute-Force Exploited Host Web App Attack
🇨🇦 wil.com	2025-10-29 01:10:13 (7 months ago)	GlobalProtect login attempts with user mboudoin.	VPN IP Brute-Force
Anonymous	2025-10-17 05:06:13 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-07 08:35:02 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-05 16:37:41 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.05 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-04 16:15:13 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.04 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 100.29.192.29

🇩🇪 213.209.159.231

🇰🇷 211.223.107.86

🇺🇸 208.89.60.61

🇺🇸 207.90.244.3

🇳🇱 195.178.110.26

🇩🇪 193.36.84.162

🇳🇱 192.142.24.39

🇧🇼 168.167.228.123

🇺🇸 162.216.149.248

🇩🇪 161.35.198.116

🇨🇳 125.124.149.14

🇨🇳 118.145.164.82

🇹🇼 101.13.5.88

🇷🇴 80.94.92.177

🇺🇸 64.62.197.110

🇺🇸 64.62.156.153

🇮🇩 43.157.242.235

🇨🇳 36.27.180.206

🇬🇧 35.203.211.47