JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.9.40

65.111.9.40 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.9.40

Whois 65.111.9.40

IP Abuse Reports for 65.111.9.40:

This IP address has been reported a total of 37 times from 16 distinct sources. 65.111.9.40 was first reported on January 16th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-05-01 14:21:00 (1 month ago)		Web Spam
Anonymous	2026-04-12 05:48:59 (2 months ago)	Attempt to scan vulnerabilities	Hacking
🇺🇸 mnsf	2026-03-27 02:05:38 (2 months ago)	Too many Status 40X (11) Scanning/Probing (11)	Brute-Force Web App Attack
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 myagent.site	2026-01-15 08:40:44 (5 months ago)	Blocking for trying to access an exploit file: /.env	Hacking
Anonymous	2025-12-09 14:03:40 (6 months ago)	botnet	DDoS Attack
Anonymous	2025-12-04 10:11:55 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:40:46 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:40:40.929515 2025] [security2:error] [pid 15876:tid 15876] [client 65.111.9.40:37011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.uraniumjewelry.com"] [uri "/.svn/wc.db"] [unique_id "aSQoGKgsXjfcqv2cNDPdUwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:32:04 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:32:00.782144 2025] [security2:error] [pid 15239:tid 15239] [client 65.111.9.40:15661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baystreet.news"] [uri "/.git/HEAD"] [unique_id "aSQYAEkojOsdXX4THHmpGgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:05:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:05:09.830536 2025] [security2:error] [pid 12500:tid 12500] [client 65.111.9.40:20895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.bridgenevercrossed.com"] [uri "/.git/HEAD"] [unique_id "aSQDpfKepLkf1JNqmGthowAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:04:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:04:25.666081 2025] [security2:error] [pid 11281:tid 11281] [client 65.111.9.40:32145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.beckersystems.com"] [uri "/.env"] [unique_id "aSPnWVGn-H_D-Jg6koj6RAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:13:15 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:13:06.593071 2025] [security2:error] [pid 29306:tid 29306] [client 65.111.9.40:49509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infiniteliving.org"] [uri "/.env"] [unique_id "aSPbUu6VxPThNbexkaL7QwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-17 00:16:52 (7 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 19:16:47.121807 2025] [security2:error] [pid 5183:tid 5183] [client 65.111.9.40:54211] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.accsbg.org\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.accsbg.org"] [uri "/s3cmd.ini"] [unique_id "aRppb7sRQRJgmYUoei3_OgAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-16 13:46:12 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.9.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 16 08:46:07.533931 2025] [security2:error] [pid 246494:tid 246494] [client 65.111.9.40:49313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.outsourceitinc.com"] [uri "/.env"] [unique_id "aRnVn6RnQHGDc6z_YzCQ3gAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-14 12:52:37 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 203.25.124.49

🇨🇳 120.48.106.205

🇷🇺 80.249.180.57

🇷🇴 80.94.92.182

🇻🇳 180.93.52.137

🇷🇺 176.120.22.240

🇦🇺 58.84.103.149

🇮🇱 34.165.190.46

🇨🇱 190.114.41.97

🇰🇷 158.247.200.150

🇨🇳 140.206.195.68

🇸🇦 94.98.134.73

🇺🇸 35.188.112.111

🇦🇹 213.225.9.147

🇪🇹 196.189.126.17

🇰🇷 193.123.235.181

🇲🇽 189.203.190.153

🇨🇱 181.160.59.32

🇦🇷 181.15.220.155

🇭🇷 149.102.247.242