JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.0.56

65.111.0.56 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 14%: ?

14%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.0.56

Whois 65.111.0.56

IP Abuse Reports for 65.111.0.56:

This IP address has been reported a total of 43 times from 16 distinct sources. 65.111.0.56 was first reported on July 7th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-12 11:54:36 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-05-10 14:16:33 (4 weeks ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇫🇷 masterguru	2026-05-09 06:41:46 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-05-09 06:02:09 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:44:32 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇨🇭 4server	2026-04-25 09:59:46 (1 month ago)	[SatApr2511:59:39.4516342026][security2:error][pid701011:tid701075][client65.111.0.56:0]ModSecurity: ... show more [SatApr2511:59:39.4516342026][security2:error][pid701011:tid701075][client65.111.0.56:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"367\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"prodotti.comarcosa.com\"][uri\"/xmlrpc.php\"][unique_id\"aeyQixl3gBvUtk3OvxGbVwAAAAE\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-04-19 22:27:11 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2026-04-16 13:45:11 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-13 09:21:22 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the las ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.0.56 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇦🇺 RedBear IT	2026-03-26 10:00:37 (2 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2025-12-31 00:53:25 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 19:53:12.310058 2025] [security2:error] [pid 4327:tid 4327] [client 65.111.0.56:56851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lsd36.com"] [uri "/.svn/wc.db"] [unique_id "aVRz-AH6QHLfvJ5YbtlfbwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 09:20:53 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 04:20:48.409190 2025] [security2:error] [pid 2993:tid 2993] [client 65.111.0.56:23107] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rlarms.com"] [uri "/.git/HEAD"] [unique_id "aVJH8MSr3Kx59z1FVMnC-wAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 08:36:59 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 03:36:54.883827 2025] [security2:error] [pid 22042:tid 22049] [client 65.111.0.56:57507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "randycameron.com"] [uri "/.git/HEAD"] [unique_id "aVI9pkmRwzpQwAGXZVB1-AAAAEA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 06:47:21 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 01:47:14.081985 2025] [security2:error] [pid 2149:tid 2149] [client 65.111.0.56:17631] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twilighthackers.com"] [uri "/.git/HEAD"] [unique_id "aVIj8sr0vnCGTxEuvQ7bcAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-29 05:21:49 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.0.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 00:21:43.763021 2025] [security2:error] [pid 30915:tid 30915] [client 65.111.0.56:52949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tankservicesinc.com"] [uri "/.env"] [unique_id "aVIP5-YKbNWTT22fdYNSDQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.199.172.161

🇪🇹 196.189.236.216

🇱🇹 188.69.225.188

🇺🇸 146.88.240.103

🇦🇪 139.185.55.154

🇬🇧 86.172.75.255

🇷🇺 83.246.133.16

🇩🇪 34.185.214.41

🇸🇬 34.126.183.172

🇸🇬 34.87.132.231

🇺🇸 34.53.84.130

🇷🇴 2.57.121.112

🇧🇪 198.235.24.195

🇻🇳 113.161.39.122

🇮🇳 103.204.167.14

🇵🇱 95.214.53.157

🇫🇷 92.103.134.183

🇺🇸 71.6.199.65

🇬🇧 35.189.113.164

🇮🇹 5.89.75.194