JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.52

65.111.0.52 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 20%: ?

20%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.52

Whois 65.111.0.52

IP Abuse Reports for 65.111.0.52:

This IP address has been reported a total of 47 times from 15 distinct sources. 65.111.0.52 was first reported on July 10th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 01:16:34 (2 days ago)	Web App Attack	Web App Attack
🇦🇺 MAGIC	2026-06-16 05:06:16 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇱🇻 garmtech.com	2026-05-22 21:17:35 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-17.65.111.0.52.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 00-17.65.111.0.52.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-19 13:44:34 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-44.65.111.0.52.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-44.65.111.0.52.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-05-18 22:01:35 (1 month ago)	Auto-ban: >3000 req/min op 2026-05-18	Web App Attack SSH Hacking
Anonymous	2026-04-05 21:49:40 (3 months ago)	Forum/form spam	Web Spam
Anonymous	2026-02-16 03:43:37 (4 months ago)	Forum/form spam	Web Spam
Anonymous	2026-01-24 05:31:50 (5 months ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-01-23 02:18:49 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-18.65.111.0.52.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-18.65.111.0.52.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-12-04 11:48:35 (7 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-48.65.111.0.52.web-spammers ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 13-48.65.111.0.52.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-11-27 13:52:24 (7 months ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇪🇸 10dencehispahard SL	2025-11-27 06:00:41 (7 months ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
🇺🇸 TPI-Abuse	2025-11-26 23:20:03 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 18:19:54.645970 2025] [security2:error] [pid 6833:tid 6833] [client 65.111.0.52:55415] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.cyber-matrix.org"] [uri "/.git/HEAD"] [unique_id "aSeLGsMA6oIKo2RGVKRosgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 05:55:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:55:41.446068 2025] [security2:error] [pid 19667:tid 19667] [client 65.111.0.52:31571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.stonetarot.com"] [uri "/.git/HEAD"] [unique_id "aSaWXagZeR-ylUyrACtzDAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:50:54 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.52 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.52 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:50:48.084446 2025] [security2:error] [pid 23215:tid 23215] [client 65.111.0.52:47117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thewritekellys.com"] [uri "/.svn/wc.db"] [unique_id "aSZrCHxBLtwotZRoo6wMhQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.73.18.33

🇧🇷 200.218.237.219

🇧🇷 200.199.32.174

🇺🇸 174.80.198.151

🇵🇰 103.121.25.101

🇲🇺 102.117.39.73

🇹🇷 94.154.43.177

🇺🇸 81.30.98.193

🇧🇬 78.128.114.102

🇳🇱 45.148.10.147

🇨🇳 39.154.11.195

🇨🇳 223.84.239.151

🇺🇸 205.210.31.60

🇿🇦 165.165.119.254

🇮🇳 117.211.15.93

🇨🇳 106.113.16.36

🇺🇸 104.243.37.196

🇺🇸 98.80.119.99

🇺🇸 34.193.119.44

🇨🇳 223.90.115.182