JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.7.180

65.111.7.180 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.7.180

Whois 65.111.7.180

IP Abuse Reports for 65.111.7.180:

This IP address has been reported a total of 19 times from 9 distinct sources. 65.111.7.180 was first reported on July 13th 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MusicLibrary	2026-03-20 09:30:39 (2 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇺🇸 oncord	2026-03-05 19:05:53 (3 months ago)	Form spam	Web Spam
Anonymous	2025-12-14 23:01:40 (5 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-12-02 18:09:21 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 13:09:16.810011 2025] [security2:error] [pid 11459:tid 11459] [client 65.111.7.180:56819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedenzers.com"] [uri "/.env"] [unique_id "aS8rTK8I6bFuuLjMFNWpBQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 15:26:43 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 10:26:37.739476 2025] [security2:error] [pid 32241:tid 32241] [client 65.111.7.180:41063] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfgardening.com"] [uri "/.svn/wc.db"] [unique_id "aS8FLXtDiZS0rDti7df6LgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 12:07:11 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:07:04.328111 2025] [security2:error] [pid 24717:tid 24717] [client 65.111.7.180:21695] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silalaw.com"] [uri "/.svn/wc.db"] [unique_id "aS7WaDLeDoGE8WrWFv0bkAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:24:06 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:23:59.560348 2025] [security2:error] [pid 26855:tid 26855] [client 65.111.7.180:53683] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partyblockbaby.com"] [uri "/.git/HEAD"] [unique_id "aS6iH7klBCBhxZG6WqrnbgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 05:49:40 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:49:31.902294 2025] [security2:error] [pid 18446:tid 18446] [client 65.111.7.180:21659] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antoniocobo.com"] [uri "/.svn/wc.db"] [unique_id "aS596-bVPVI6xcqoTislcwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 04:35:14 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.7.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 23:35:08.356182 2025] [security2:error] [pid 32307:tid 32307] [client 65.111.7.180:58465] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "etudesoftware.com"] [uri "/.git/HEAD"] [unique_id "aS5sfLKXFwNol_So5FrZFgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 06:38:29 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-11-02 13:14:29 (7 months ago)	This IP was involved in an brute force and password spray attack on 2025/11/02 07:09:08	Port Scan Brute-Force Exploited Host Web App Attack
Anonymous	2025-10-17 19:52:31 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
Anonymous	2025-10-06 08:56:13 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-01 17:04:25 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.01 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-09-27 08:22:29 (8 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.09.27 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a02:4780:27:1036:0:15dd:228d:1

🇭🇰 154.221.17.137

🇮🇳 120.57.127.22

🇲🇾 49.124.152.254

🇹🇼 34.81.67.11

🇮🇷 5.114.243.211

🇨🇦 198.50.202.93

🇺🇸 170.187.165.134

🇮🇳 168.144.95.137

🇮🇳 123.108.206.19

🇵🇭 112.202.62.92

🇺🇸 107.20.0.215

🇺🇸 65.49.1.130

🇨🇳 58.240.17.66

🇫🇮 34.88.77.195

🇳🇱 5.61.209.33

🇬🇧 2a06:4880:2000::31

🇪🇹 196.190.43.162

🇳🇱 185.223.235.39

🇻🇳 171.244.143.209