JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.6.90

65.111.6.90 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.6.90

Whois 65.111.6.90

IP Abuse Reports for 65.111.6.90:

This IP address has been reported a total of 40 times from 23 distinct sources. 65.111.6.90 was first reported on July 12th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 inlink.ltd	2026-06-05 13:23:58 (1 day ago)	Known malicious PHP file or CMS probe	Web App Attack
🇬🇧 PeravixGroup	2026-05-09 14:58:47 (4 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 masterguru	2026-03-27 11:09:58 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.6.90 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.6.90 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇱🇻 garmtech.com	2026-03-23 09:51:41 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
Anonymous	2026-03-21 01:33:05 (2 months ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-03-14 23:50:16 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-14 09:59:16 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2026-03-13 00:47:16 (2 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2026-03-13 00:47:08 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇩🇪 Lino Project	2026-01-02 15:57:16 (5 months ago)	65.111.6.90 - - [02/Jan/2026:16:57:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3926 "-" "Mozilla/5.0 ( ... show more 65.111.6.90 - - [02/Jan/2026:16:57:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3926 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 65.111.6.90 - - [02/Jan/2026:16:57:15 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3926 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 65.111.6.90 - - [02/Jan/2026:16:57:15 +0100] "POST /xmlrpc.php HTTP/1.1" 403 3926 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-12-14 23:04:13 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 08:23:56 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:23:49.257674 2025] [security2:error] [pid 2825:tid 2825] [client 65.111.6.90:10039] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capitallawgroup.progressivefileshare.org"] [uri "/.env"] [unique_id "aSQWFVcXl-N-JDb0x1R31wAAADA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-24 07:13:11 (6 months ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:12:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.6.90 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.6.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:12:34.391140 2025] [security2:error] [pid 14819:tid 14819] [client 65.111.6.90:21023] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mywheatgrass.com"] [uri "/.git/HEAD"] [unique_id "aSP3UjlBH3K3sDyNfxUYvgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2a09:bac5:398c:2646::3d0:16

🇨🇳 106.53.10.16

🇮🇹 87.10.235.249

🇸🇬 47.128.126.59

🇸🇬 47.128.16.125

🇫🇷 185.177.72.38

🇵🇭 165.154.58.251

🇨🇳 120.221.233.40

🇨🇳 115.190.63.151

🇸🇬 47.128.126.58

🇸🇬 47.128.126.53

🇺🇸 34.135.200.178

🇺🇸 18.212.68.99

🇷🇴 2.57.122.238

🇹🇷 176.88.141.100

🇩🇪 159.223.18.77

🇨🇳 120.238.23.168

🇺🇸 103.143.231.24

🇷🇴 80.94.92.164

🇸🇬 47.128.126.48