JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.1.3

65.111.1.3 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.1.3

Whois 65.111.1.3

IP Abuse Reports for 65.111.1.3:

This IP address has been reported a total of 41 times from 20 distinct sources. 65.111.1.3 was first reported on June 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-07 00:28:15 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-05-01 09:13:45 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-26 17:40:44 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 solution.it	2026-04-25 15:07:21 (1 month ago)	[Sat Apr 25 17:07:20.661548 2026] [php7:error] [pid 2498605:tid 2498605] [client 65.111.1.3:39363] s ... show more [Sat Apr 25 17:07:20.661548 2026] [php7:error] [pid 2498605:tid 2498605] [client 65.111.1.3:39363] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 masterguru	2026-04-20 17:03:28 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-19 21:41:28 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-13 11:17:44 (2 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.1.3 (US/United States/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇦🇺 MAGIC	2026-03-11 01:14:46 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇦🇺 MAGIC	2026-02-15 00:33:49 (4 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇨🇭 backslash	2026-02-02 16:40:05 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 rh24	2025-12-21 12:06:09 (5 months ago)	(wordpress) Failed wordpress login from 65.111.1.3 (US/United States/-): (CF_ENABLE)	Brute-Force
🇦🇺 oncord	2025-12-21 11:10:23 (5 months ago)	Form spam	Web Spam
🇩🇪 paissangroup	2025-12-08 08:42:08 (6 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2025-12-04 19:03:13 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 65.111.1.3 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 65.111.1.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 04 14:03:07.354997 2025] [security2:error] [pid 15257:tid 15257] [client 65.111.1.3:59127] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|cier.xyz\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cier.xyz"] [uri "/.svn/wc.db"] [unique_id "aTHa69oQuiG6Pu6N5sYjQwAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-12-02 08:27:23 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.1.3 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.1.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:27:14.924404 2025] [security2:error] [pid 30632:tid 30632] [client 65.111.1.3:59557] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atomicmc.com"] [uri "/.git/HEAD"] [unique_id "aS6i4hWSG8triMdLX0ectAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.131.135.106

🇬🇧 185.247.137.145

🇨🇳 182.112.44.187

🇦🇹 178.165.197.134

🇧🇩 160.25.5.221

🇺🇸 147.185.132.88

🇺🇦 145.224.101.83

🇱🇹 91.224.92.17

🇨🇳 61.145.190.218

🇺🇸 20.127.200.74

🇨🇳 223.76.158.107

🇲🇩 217.19.215.17

🇺🇸 205.185.125.44

🇮🇩 202.165.33.162

🇬🇧 185.247.137.129

🇬🇧 185.247.137.127

🇷🇺 178.68.90.40

🇳🇱 176.65.139.58

172.22.0.1

🇭🇰 150.5.131.119