JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.5.180

65.111.5.180 was found in our database!

This IP was reported 49 times. Confidence of Abuse is 25%: ?

25%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.5.180

Whois 65.111.5.180

IP Abuse Reports for 65.111.5.180:

This IP address has been reported a total of 49 times from 19 distinct sources. 65.111.5.180 was first reported on July 5th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-08-18 20:18:32 (3 days ago)	WordPress probing \| req: /xmlrpc.php \| UA: PHP/6.3.75	Brute-Force Web App Attack
🇫🇷 Sklurk	2026-07-31 02:25:38 (3 weeks ago)	Web App Attack	Web App Attack
🇮🇹 [email protected]	2026-07-21 18:59:26 (1 month ago)	2026-07-21 20:58:31,616 fail2ban.actions [1143]: NOTICE [apache-auth] Ban 65.111.5.1802026-0 ... show more 2026-07-21 20:58:31,616 fail2ban.actions [1143]: NOTICE [apache-auth] Ban 65.111.5.1802026-07-21 20:58:43,636 fail2ban.actions [1143]: NOTICE [wordpress] Ban 65.111.5.180 show less	Brute-Force
🇲🇽 octageeks.com	2026-07-09 04:18:35 (1 month ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇩🇪 FeG Deutschland	2026-07-06 21:11:57 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 lostswordfish.com	2026-07-05 20:58:03 (1 month ago)	Wordfence waf block on decarcerationnation	Web App Attack
🇩🇪 LRob	2026-06-24 01:45:08 (1 month ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
Anonymous	2026-04-05 17:13:25 (4 months ago)	Forum/form spam	Web Spam
Anonymous	2026-03-04 13:04:50 (5 months ago)	Forum/form spam	Web Spam
🇺🇸 TPI-Abuse	2026-02-13 08:56:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:56:19.396396 2026] [security2:error] [pid 5220:tid 5220] [client 65.111.5.180:64575] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lambdaclimateresearch.com"] [uri "/.env.staging"] [unique_id "aY7nMyW7bZY0vV7I_n48bgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:36:01 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:35:53.229387 2026] [security2:error] [pid 9848:tid 9868] [client 65.111.5.180:10297] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lagifthouse.com"] [uri "/app/.git/config"] [unique_id "aY7iaQNSj6L_UZomF0GWFgAAAVI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:12:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:12:08.404298 2026] [security2:error] [pid 13964:tid 13964] [client 65.111.5.180:36181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.env"] [unique_id "aY7c2MNb2Qb7PASU1ZRO1gAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 06:13:26 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:13:17.904804 2026] [security2:error] [pid 18553:tid 18553] [client 65.111.5.180:36699] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koshland.org"] [uri "/new/.git/config"] [unique_id "aY7A_aS9SKQpvGu2r7AbSwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 05:53:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 00:53:27.919242 2026] [security2:error] [pid 31962:tid 31962] [client 65.111.5.180:38509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konahawaiirealty.com"] [uri "/backup/.git/config"] [unique_id "aY68V1Xx0BvUtnCt6dF4fQAAACQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:50:54 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.5.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:50:50.488244 2026] [security2:error] [pid 2525978:tid 2525978] [client 65.111.5.180:20487] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kerrywood.com"] [uri "/.env.production"] [unique_id "aY6RingTZkU4grurXJ0X9QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 220.246.183.78

🇩🇪 213.209.159.108

🇧🇪 198.235.24.220

🇺🇸 136.144.35.187

🇮🇩 125.162.226.7

🇨🇳 123.164.4.62

🇰🇷 121.183.249.159

🇷🇺 83.167.19.121

🇨🇿 78.44.192.210

🇺🇸 54.219.110.76

🇨🇳 27.155.92.28

🇮🇳 203.192.207.38

🇳🇱 178.16.55.94

🇭🇰 118.193.32.119

🇻🇳 116.110.17.76

🇻🇳 113.160.180.106

🇨🇳 111.40.31.235

🇧🇫 102.179.48.232

🇷🇴 92.118.39.14

🇸🇬 85.203.21.130