JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.8.130

65.111.8.130 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.8.130

Whois 65.111.8.130

IP Abuse Reports for 65.111.8.130:

This IP address has been reported a total of 35 times from 22 distinct sources. 65.111.8.130 was first reported on June 27th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 pm33	2026-06-03 16:18:21 (3 days ago)	Wordpress login attempts	Brute-Force
🇲🇹 Malta	2026-05-29 18:16:52 (1 week ago)	65.111.8.130 - - [29/May/2026:20:16:52 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 65.111.8.130 - - [29/May/2026:20:16:52 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" show less	Hacking Web App Attack VPN IP
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-03-05 09:07:13 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.8.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.8.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 05 04:07:06.328125 2026] [security2:error] [pid 2915:tid 2940] [client 65.111.8.130:61941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.howardhallis.com"] [uri "/.git/objects/fc/c17c3cd6a0041781359c449ba035c0ef697fc6"] [unique_id "aalHumbdh7c6FWT9QFVY1wAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 [email protected]	2026-03-04 00:25:21 (3 months ago)	65.111.8.130 - - [04/Mar/2026:00:24:19 +0000] "GET /.git/objects/16/26bc59a8054b5ea889c16f4d155e3f96 ... show more 65.111.8.130 - - [04/Mar/2026:00:24:19 +0000] "GET /.git/objects/16/26bc59a8054b5ea889c16f4d155e3f962945a4 HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/16/26bc59a8054b5ea889c16f4d155e3f962945a4" "Go-http-client/1.1" 65.111.8.130 - - [04/Mar/2026:00:24:58 +0000] "GET /.git/objects/92/c483af2ee724c0bba7beac418d00949b3a55e7 HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/92/c483af2ee724c0bba7beac418d00949b3a55e7" "Go-http-client/1.1" 65.111.8.130 - - [04/Mar/2026:00:25:21 +0000] "GET /.git/objects/78/b773fb8cf4c36b75583f0f0f482d5758b24716 HTTP/1.1" 404 332 "http://academy.scotland-excel.org.uk/.git/objects/78/b773fb8cf4c36b75583f0f0f482d5758b24716" "Go-http-client/1.1" ... show less	Web App Attack
🇺🇸 nowyouknow	2026-02-08 02:18:09 (3 months ago)	(From [email protected]) Hello, My name is Charlotte Douglas, and I am ... show more (From [email protected]) Hello, My name is Charlotte Douglas, and I am with United Electrical Contractor. We are reaching out to confirm your availability for upcoming projects in Q1 and Q2 and to gauge your interest in receiving additional project details. Once availability is confirmed, we will share the project scope for your review. Thank you, and we look forward to your response. Best regards, Charlotte Douglas Project Executive United Electrical Contractor show less	Phishing Web Spam
🇫🇮 Shaik Sai Meera	2025-12-29 04:40:15 (5 months ago)	IM360 WAF: Hidden file access	Brute-Force
Anonymous	2025-12-08 07:03:19 (5 months ago)	botnet	DDoS Attack
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:10:07 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 07:26:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.8.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.8.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 02:26:50.692565 2025] [security2:error] [pid 7578:tid 7578] [client 65.111.8.130:23003] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.usaerosp.aluthienproperties.com"] [uri "/.git/HEAD"] [unique_id "aSVaOlr4L4zzoJdaPPIq6wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2025-11-25 07:20:53 (6 months ago)	Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probin ... show more Attempted access to sensitive endpoint (/.svn/wc.db) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 06:57:10 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.8.130 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.8.130 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:56:50.677327 2025] [security2:error] [pid 29618:tid 29618] [client 65.111.8.130:55413] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.largeprintjournal.com"] [uri "/.svn/wc.db"] [unique_id "aSVTMiQTRDra21IoKa4coQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-11-17 03:46:02 (6 months ago)	Malicious Traffic/Form Submission	Phishing Web Spam
Anonymous	2025-11-14 14:46:38 (6 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇺🇸 nowyouknow	2025-11-10 19:21:08 (6 months ago)	(From [email protected]) SOFTWARE: New AI Cloud-Tool Quietly Turns Simple Ideas Into Passive R ... show more (From [email protected]) SOFTWARE: New AI Cloud-Tool Quietly Turns Simple Ideas Into Passive Royalties.... ...No tech. No product. No audience. Just this one AI tool. https://www.novaai.expert/OhanashiGenAI to UNSUBSCRIBE: https://www.novaai.expert/unsubscribe?domain=chironetworkruston.com Address: 209 West Street Comstock Park, MI 49321 show less	Phishing Web Spam

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 103.229.125.106

🇯🇵 103.163.220.214

🇺🇸 54.172.217.71

🇺🇸 216.180.246.178

🇬🇧 194.50.235.142

🇧🇷 181.218.9.86

🇮🇩 180.243.253.245

🇸🇪 155.4.244.169

🇵🇱 143.20.97.113

🇷🇺 91.211.236.106

🇧🇷 45.205.1.244

🇧🇪 34.34.159.36

🇺🇸 2a02:4780:b:1919:0:17c9:c011:1

🇺🇸 216.25.89.70

🇨🇳 183.56.243.176

🇧🇷 179.228.54.137

🇺🇸 162.216.149.190

🇺🇸 152.117.119.86

🇮🇳 143.110.177.177

🇸🇬 118.194.234.189