JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.9.146

65.111.9.146 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.9.146

Whois 65.111.9.146

IP Abuse Reports for 65.111.9.146:

This IP address has been reported a total of 39 times from 19 distinct sources. 65.111.9.146 was first reported on July 5th 2024, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-31 14:56:30 (5 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇷 ELYAZ	2026-07-31 02:29:15 (17 hours ago)	(wordpress) Failed wordpress login from 65.111.9.146 (US/United States/-): (CF_ENABLE)	Brute-Force
🇫🇷 Sklurk	2026-07-31 01:03:30 (19 hours ago)	Web App Attack	Web App Attack
🇳🇿 billyborsht	2026-07-30 03:48:35 (1 day ago)	2026-07-30T15:48:34.313713+12:00 southern wordpress(nzangels.com)[303323]: Authentication attempt fo ... show more 2026-07-30T15:48:34.313713+12:00 southern wordpress(nzangels.com)[303323]: Authentication attempt for unknown user admin from 65.111.9.146 ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-02-13 13:37:54 (5 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 07:54:19 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 02:54:16.406195 2026] [security2:error] [pid 13815:tid 13815] [client 65.111.9.146:53001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "meliaethelwoodard.com"] [uri "/admin/.git/config"] [unique_id "aY7YqFKBP82jZqBZ1wFXFwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:07:04 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:06:56.407763 2026] [security2:error] [pid 1230:tid 1230] [client 65.111.9.146:12205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mccachren.org"] [uri "/.git/config"] [unique_id "aY6_gAt123DllBNM7pLrEwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:58:51 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:58:47.861477 2026] [security2:error] [pid 9696:tid 9696] [client 65.111.9.146:56087] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mastersonsmotel.ca"] [uri "/admin/.git/config"] [unique_id "aY6vhy5KiZwZQVXGpB0CoAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:49:55 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:49:50.475882 2026] [security2:error] [pid 2227562:tid 2227562] [client 65.111.9.146:50295] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mairslair.com"] [uri "/api/.env"] [unique_id "aY6DPmxb0MWsFMYt9qvFyQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:29:58 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:29:51.476041 2026] [security2:error] [pid 1711809:tid 1711813] [client 65.111.9.146:22651] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magusincognito.com"] [uri "/.env"] [unique_id "aY5-j7HtU3YytcFNay1CSQAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 17:17:15 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 12:17:10.005267 2026] [security2:error] [pid 30404:tid 30404] [client 65.111.9.146:19035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dansplans.com"] [uri "/.env"] [unique_id "aY4LFkvt77wJyh3Brfe59wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 16:59:41 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.146 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 11:59:37.745078 2026] [security2:error] [pid 29950:tid 29950] [client 65.111.9.146:36767] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crixbot.com"] [uri "/.env"] [unique_id "aY4G-Wl6t8I9MYsoollJMgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-12 15:51:58 (5 months ago)	65.111.9.146 - - [12/Feb/2026:16:51:57 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ( ... show more 65.111.9.146 - - [12/Feb/2026:16:51:57 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack
🇦🇺 2000cn.com.au	2026-02-11 20:18:24 (5 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Hacking Web App Attack
🇱🇻 garmtech.com	2025-12-04 17:12:45 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-12.65.111.9.146.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 19-12.65.111.9.146.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.64

🇺🇸 162.216.150.41

🇬🇧 89.37.172.131

🇺🇸 66.132.172.38

🇺🇸 34.106.22.198

🇵🇱 176.53.159.197

🇺🇸 172.236.228.111

🇺🇸 162.216.149.64

🇹🇭 159.192.137.133

🇨🇳 123.245.85.109

🇫🇷 91.231.89.53

🇰🇷 61.76.112.4

🇳🇱 45.148.10.141

🇬🇧 35.203.210.134

🇮🇳 20.193.152.133

🇭🇰 199.45.155.84

🇧🇬 193.24.211.76

🇸🇪 192.36.137.45

🇧🇷 187.126.105.42

🇧🇷 187.50.194.182