JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.6.141

65.111.6.141 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.6.141

Whois 65.111.6.141

IP Abuse Reports for 65.111.6.141:

This IP address has been reported a total of 23 times from 9 distinct sources. 65.111.6.141 was first reported on June 27th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-04-02 01:11:39 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.6.141 2026-04-01 18: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.6.141 2026-04-01 18:09:12 /news/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-03-10 02:44:08 (2 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.6.141 2026-03-09 13: ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/65.111.6.141 2026-03-09 13:32:50 /prod-api/v2/api-docs 2026-03-09 13:32:52 /api/swagger.json 2026-03-09 13:32:51 /swagger/v1/swagger.json 2026-03-09 13:32:50 /v2/api-docs 2026-03-09 13:32:51 /swagger/docs/v1 2026-03-09 13:32:53 /v3/api-docs show less	Web App Attack
🇩🇪 piticu iuli	2026-03-02 22:00:35 (3 months ago)	(mod_security) mod_security triggered on hostname [redacted] 65.111.6.141 (US/United States/-)	SQL Injection
🇨🇳 ThreatBook.io	2025-12-25 00:47:19 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.6.141 202 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.6.141 2025-12-24 04:58:52 /prod-api/v2/api-docs 2025-12-24 04:58:53 /swagger/v1/swagger.json 2025-12-24 04:58:54 /v3/api-docs 2025-12-24 04:58:53 /swagger/docs/v1 2025-12-24 04:58:54 /api/swagger.json 2025-12-24 04:58:52 /v2/api-docs show less	Web App Attack
🇨🇳 ThreatBook.io	2025-12-23 01:29:43 (5 months ago)	ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.6.141 202 ... show more ThreatBook Intelligence: vpn_proxy,Gateway more details on https://threatbook.io/ip/65.111.6.141 2025-12-22 12:57:09 /book/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇩🇪 stinpriza	2025-12-17 19:52:45 (5 months ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:24:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:24:01.279859 2025] [security2:error] [pid 26590:tid 26590] [client 65.111.6.141:24749] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.globalmonitoringinc.com"] [uri "/.env"] [unique_id "aSQIEdaTOkFqukYgsl6YigAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:47:57 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:47:50.972246 2025] [security2:error] [pid 7803:tid 7803] [client 65.111.6.141:45907] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elderlyassociation.org"] [uri "/.svn/wc.db"] [unique_id "aSPxhk5yC8OTMclan7HligAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:46:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.141 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:46:25.301625 2025] [security2:error] [pid 2799:tid 2799] [client 65.111.6.141:53255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.photospecialties.net"] [uri "/.svn/wc.db"] [unique_id "aSPjIT7bZRIR0DNHxKyX1AAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 22:39:42 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2025-11-08 02:02:03 (6 months ago)	WP Login Scan Activities	Web App Attack
Anonymous	2025-10-18 07:32:25 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-18 05:42:49 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-07 23:54:37 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-06 09:14:51 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.76.15.221

🇪🇬 156.209.88.84

🇮🇳 62.72.28.225

🇩🇪 195.248.243.247

🇸🇪 171.25.158.58

🇺🇸 2602:80d:1008::1f

🇧🇪 198.235.24.235

🇲🇽 189.157.45.41

🇳🇱 176.65.139.140

🇺🇸 162.216.149.54

🇩🇪 159.195.147.215

🇩🇪 45.86.202.157

🇨🇳 27.128.171.39

🇩🇪 141.11.250.239

🇺🇸 99.108.166.16

🇨🇱 216.155.93.75

🇸🇪 188.151.176.48

🇺🇸 162.216.149.233

🇲🇾 115.135.233.75

🇻🇳 103.48.83.92