JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.5.37

65.111.5.37 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 45%: ?

45%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.5.37

Whois 65.111.5.37

IP Abuse Reports for 65.111.5.37:

This IP address has been reported a total of 34 times from 20 distinct sources. 65.111.5.37 was first reported on July 9th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-21 04:16:35 (5 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
Anonymous	2026-06-20 13:39:53 (20 hours ago)	[ssd5.kdns.gr] httpd-login-spray-site: sites=kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspri ... show more [ssd5.kdns.gr] httpd-login-spray-site: sites=kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspriftis.gr.log; samples=site_wide=true \| distinct_ips=11 \| /wp-login.php show less	Hacking Web App Attack
🇺🇸 lostswordfish.com	2026-06-20 10:42:04 (23 hours ago)	Wordfence waf block on wp20190711M4	Web App Attack
🇦🇺 HJ5Ss4Ju	2026-06-20 10:10:11 (23 hours ago)	Blocked by Wordfence (SID 6)	Web App Attack
🇫🇷 tilellit.pro	2026-06-19 11:13:51 (1 day ago)	Fail2Ban banned 65.111.5.37 for security violations in jail wp-armour. Log: 2026/06/19 11:13:50 [err ... show more Fail2Ban banned 65.111.5.37 for security violations in jail wp-armour. Log: 2026/06/19 11:13:50 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 65.111.5.37 \| Target: wplogin" , client: 65.111.5.37, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇲🇹 Malta	2026-06-16 12:17:38 (4 days ago)	65.111.5.37 - - [16/Jun/2026:14:17:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 65.111.5.37 - - [16/Jun/2026:14:17:38 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇬🇧 PeravixGroup	2026-05-21 11:37:26 (4 weeks ago)	Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran. ... show more Honeypot detection: FTP brute-force or anonymous access attempt on port 21. Severity: MEDIUM. Aaran.cloud show less	FTP Brute-Force Brute-Force
🇺🇸 kosada.com	2026-01-03 15:47:08 (5 months ago)	Web password guessing	Brute-Force
🇺🇸 TPI-Abuse	2025-11-24 08:37:28 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.37 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:21.119984 2025] [security2:error] [pid 16172:tid 16172] [client 65.111.5.37:50411] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.catsandtentacles.com"] [uri "/.env"] [unique_id "aSQZQXq13KUztxpddgJeDQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:48:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.37 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.37 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:48:51.755288 2025] [security2:error] [pid 15315:tid 15315] [client 65.111.5.37:46725] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.vigants.com"] [uri "/.git/HEAD"] [unique_id "aSPjs8Z4k46MfFPZ5xy7ywAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 12:33:20 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-12 22:26:44 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.12 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.12 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-11-06 18:31:28 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.06 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.11.06 is noted in report timestamp show less	Hacking Brute-Force
🇧🇷 hostseries	2025-10-24 23:49:03 (7 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-10-18 01:12:25 (8 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.139.102

🇨🇳 116.1.179.117

🇻🇳 113.173.163.89

🇧🇬 78.128.113.74

🇵🇹 176.53.223.165

🇺🇸 172.238.171.10

🇩🇪 151.242.147.40

🇺🇸 147.185.132.193

🇺🇸 136.118.110.142

🇺🇸 136.29.52.7

🇺🇸 38.212.60.142

🇺🇸 20.124.91.101

🇺🇸 5.78.193.0

🇬🇧 2a05:d01c:68f:ef02:f0da:db9f:d503:7866

🇮🇳 2406:b400:b5:71e4:b04e:1351:1286:b3f2

🇧🇬 185.255.215.4

🇩🇪 167.94.146.50

🇨🇳 121.229.156.91

🇨🇳 117.50.119.132

🇨🇳 114.100.48.120