JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.12.20

65.111.12.20 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.12.20

Whois 65.111.12.20

IP Abuse Reports for 65.111.12.20:

This IP address has been reported a total of 33 times from 16 distinct sources. 65.111.12.20 was first reported on July 4th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-24 02:33:17 (1 month ago)	Banned by SPAMHAUS ASN-DROP list (ASN: 200373)	DDoS Attack Hacking Bad Web Bot Web App Attack
🇪🇸 librebit	2026-06-24 02:11:31 (2 months ago)	Brute force	Brute-Force
🇺🇸 TRoden	2026-02-14 02:08:37 (6 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇦🇺 MAGIC	2026-01-04 01:06:21 (7 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇩🇪 Packets-Decreaser.NET	2025-11-30 13:09:54 (8 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 TPI-Abuse	2025-11-25 06:25:22 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 01:24:21.494219 2025] [security2:error] [pid 18634:tid 18634] [client 65.111.12.20:46579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.dimensional-solutions.com"] [uri "/.git/HEAD"] [unique_id "aSVLldnH_WsBTf8l_qx-0wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-25 00:20:52 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 19:20:43.812870 2025] [security2:error] [pid 7370:tid 7370] [client 65.111.12.20:33145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.capecodbeachfront.com"] [uri "/.git/HEAD"] [unique_id "aST2WxKITwzVKm8aEjxl6AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 09:40:00 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:39:57.297263 2025] [security2:error] [pid 30208:tid 30265] [client 65.111.12.20:16383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.providencetheological.com"] [uri "/.svn/wc.db"] [unique_id "aSQn7eGeg246dVFfHKuGfQAAAQg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 07:11:18 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 02:11:12.780789 2025] [security2:error] [pid 16987:tid 16987] [client 65.111.12.20:20489] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rochesterhistorical.org"] [uri "/.svn/wc.db"] [unique_id "aSQFEC5WbBOyPrmv4yJGcQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:25:19 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:25:08.108772 2025] [security2:error] [pid 3347463:tid 3347463] [client 65.111.12.20:39793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.fiasdesigns.com"] [uri "/.svn/wc.db"] [unique_id "aSPsNHAqa5Ixy3kUDJ7ZLgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-24 05:15:01 (9 months ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:08:00 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:07:55.155868 2025] [security2:error] [pid 30884:tid 30884] [client 65.111.12.20:42327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.kaplankrew.com"] [uri "/.git/HEAD"] [unique_id "aSPoK7mXdEGt6XF9WeicRgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:08:28 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:08:22.142550 2025] [security2:error] [pid 24082:tid 24082] [client 65.111.12.20:45959] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.dietzengineers.com"] [uri "/.git/HEAD"] [unique_id "aSPaNjzb7JoLZJrHY7ymAgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 03:20:32 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 22:20:20.563062 2025] [security2:error] [pid 18934:tid 18934] [client 65.111.12.20:32657] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.joepeters.org"] [uri "/.env"] [unique_id "aSPO9DMnAWhxzfnhMUT7PQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 22:29:04 (9 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 104.196.133.53

🇷🇺 2a02:6b8:c42:dccd:0:492c:aabd:0

🇧🇷 205.210.31.245

🇺🇸 195.210.112.191

🇬🇧 185.247.137.77

🇸🇪 185.209.198.84

🇺🇦 185.70.18.173

🇲🇽 158.23.184.117

🇫🇮 146.19.140.43

🇺🇸 146.19.91.162

🇺🇸 136.64.73.204

🇫🇮 122.8.93.177

🇹🇼 106.105.48.59

🇺🇸 67.52.95.38

🇹🇼 60.199.224.2

🇨🇳 42.248.129.234

🇺🇸 23.234.111.85

🇰🇷 210.99.106.136

🇳🇱 193.47.62.69

🇵🇱 176.53.159.198