JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.6.195

65.111.6.195 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.6.195

Whois 65.111.6.195

IP Abuse Reports for 65.111.6.195:

This IP address has been reported a total of 34 times from 17 distinct sources. 65.111.6.195 was first reported on July 11th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-06 15:29:16 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-29.65.111.6.195.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-29.65.111.6.195.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 nowyouknow	2026-04-18 05:12:05 (2 months ago)	(From [email protected]) Hi Egan Family Chiropractic, I’ve built and trained an AI empl ... show more (From [email protected]) Hi Egan Family Chiropractic, I’ve built and trained an AI employee specifically for Egan Family Chiropractic. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/schedule-a-call/ or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/schedule-a-call/ Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇺🇸 nowyouknow	2026-04-16 17:18:00 (2 months ago)	(From [email protected]) Hi Marshfield Chiropractic and Wellness, I’ve built and traine ... show more (From [email protected]) Hi Marshfield Chiropractic and Wellness, I’ve built and trained an AI employee specifically for Marshfield Chiropractic and Wellness. It’s already been trained on 6+ hours worth of your publicly available data — your website, Google Business Profile, and more. It knows how to answer customer questions, capture leads, and even follow up — just like a team member would. This isn’t a sales call. It’s a 20-minute demo where you can actually interact with the AI employee and see what it can do. Would today or tomorrow work for a quick walkthrough? Schedule a time on my calendar to meet the agent I trained for you and see what she can do here: getdandy.com/ff-trained-agent or call me at (949)-755-7782 Talk soon, Thank you, Jennifer O'Brien \| Director of Operations GetDandy getdandy.com/ff-trained-agent Unsubscribe here: bit.ly/42wnUsa show less	Phishing Web Spam
🇨🇭 backslash	2026-01-24 14:40:05 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2025-12-22 14:42:36 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-12-08 11:56:51 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-26 05:33:33 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:33:31.283226 2025] [security2:error] [pid 2186:tid 2186] [client 65.111.6.195:11495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.brandsmedia.com"] [uri "/.env"] [unique_id "aSaRK5n4eLwg4ZcwSgHxCgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:08:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:08:34.462582 2025] [security2:error] [pid 9153:tid 9153] [client 65.111.6.195:13463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.xplustchad.com"] [uri "/.svn/wc.db"] [unique_id "aSaLUnO_j4qxHuvjryau1AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:51:58 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:51:53.708378 2025] [security2:error] [pid 30007:tid 30007] [client 65.111.6.195:11469] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.petcareconfessions.com"] [uri "/.env"] [unique_id "aSZdObSVZMxoiFgKKTwVcQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 01:13:50 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 20:13:42.436044 2025] [security2:error] [pid 3365545:tid 3365687] [client 65.111.6.195:54747] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.creativefamily.net"] [uri "/.env"] [unique_id "aSZURia0-q0nx5VbsSBwXAAAAks"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:52:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:52:16.429721 2025] [security2:error] [pid 6802:tid 6802] [client 65.111.6.195:57663] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mukau.com"] [uri "/.svn/wc.db"] [unique_id "aSQcwKoxrAU9arlzCWW6YQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2025-11-16 10:53:25 (7 months ago)	Form spam	Web Spam
Anonymous	2025-11-14 04:32:59 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇭🇺 zolav8	2025-11-10 01:17:29 (7 months ago)	SQL injection / web attack attempt	Hacking SQL Injection
Anonymous	2025-11-02 22:13:16 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:42:24	Port Scan Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 207.154.251.80

🇷🇴 80.94.92.182

🇺🇸 50.6.228.32

🇺🇸 206.81.4.2

🇨🇳 182.138.158.48

🇨🇦 172.253.91.18

🇺🇸 152.32.207.21

🇺🇸 141.11.88.4

🇩🇪 135.220.49.157

🇰🇷 110.10.176.51

🇳🇱 88.151.33.203

🇫🇷 82.64.174.41

🇲🇾 47.250.55.117

🇺🇸 45.156.129.165

🇺🇸 43.135.182.43

🇦🇲 38.191.248.41

🇬🇧 35.203.211.78

🇬🇧 35.203.210.172

🇮🇹 2.33.239.68

🇺🇸 2001:470:1:c84::197