JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.12.53

65.111.12.53 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 30%: ?

30%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.12.53

Whois 65.111.12.53

IP Abuse Reports for 65.111.12.53:

This IP address has been reported a total of 51 times from 20 distinct sources. 65.111.12.53 was first reported on July 11th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-09 01:26:34 (1 day ago)	Web App Attack	Web App Attack
🇫🇷 MatStef132	2026-07-01 22:35:05 (1 week ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇪🇸 librebit	2026-06-24 02:04:33 (2 weeks ago)	Brute force	Brute-Force
🇩🇪 anycast_ac	2026-06-18 16:14:52 (3 weeks ago)	[DDoS Attacker] This IP was attacking website anycast.ac and sent 308 requests on port 443	DDoS Attack Web App Attack
🇩🇪 ghostwarriors	2026-06-13 22:20:06 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇫🇷 MatStef132	2026-05-19 21:11:03 (1 month ago)	MatShield L7: blocked on mathost.eu (ua-quarantined)	Bad Web Bot
🇳🇱 MatStef132	2026-05-19 20:59:02 (1 month ago)	MatShield L7: blocked on dstat.selify.io (ua-quarantined)	Bad Web Bot
🇫🇷 MatStef132	2026-05-14 21:32:37 (1 month ago)	[mathost.eu] ua-q	DDoS Attack Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-04-17 22:40:33 (2 months ago)	[Sat Apr 18 00:40:32.978821 2026] [authz_core:error] [pid 560720:tid 560767] [remote 65.111.12.53:43 ... show more [Sat Apr 18 00:40:32.978821 2026] [authz_core:error] [pid 560720:tid 560767] [remote 65.111.12.53:43577] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/wp-login.php ... show less	Brute-Force Web App Attack
🇨🇭 4server	2026-04-05 23:21:28 (3 months ago)	[MonApr0601:21:22.7214932026][security2:error][pid601307:tid601329][client65.111.12.53:0]ModSecurity ... show more [MonApr0601:21:22.7214932026][security2:error][pid601307:tid601329][client65.111.12.53:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"200\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"giuristifriburgo.ch\"][uri\"/xmlrpc.php\"][unique_id\"adLucqAix8aUd0bdl3VlywAAABA\"] show less	Hacking Web App Attack
🇫🇷 masterguru	2026-04-02 06:35:49 (3 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.12.53 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.12.53 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇮🇹 VHosting	2025-12-22 22:54:45 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 TPI-Abuse	2025-11-27 05:53:48 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.53 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 27 00:53:43.211405 2025] [security2:error] [pid 28234:tid 28234] [client 65.111.12.53:14517] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.happyvalleynh.org"] [uri "/.svn/wc.db"] [unique_id "aSfnZz2auaXB9KUOpiOykgAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 19:22:53 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.53 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:22:47.776182 2025] [security2:error] [pid 12703:tid 12703] [client 65.111.12.53:25537] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.limoelpaso.com"] [uri "/.svn/wc.db"] [unique_id "aSdTh7K2V0dlgay6s_qDjwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 19:01:43 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.12.53 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.12.53 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 14:01:38.624348 2025] [security2:error] [pid 28504:tid 28504] [client 65.111.12.53:24475] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.trispeccorp.com"] [uri "/.git/HEAD"] [unique_id "aSdOkorxsjkUPSBBH3M-oAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.36.21.111

🇺🇸 162.216.149.220

🇨🇳 116.31.255.217

🇺🇸 107.173.255.82

🇺🇸 45.33.7.4

🇭🇰 199.45.154.184

🇺🇸 184.105.139.112

🇧🇷 168.196.61.140

🇺🇸 162.216.149.153

🇵🇪 161.132.54.218

🇵🇪 148.102.115.34

🇱🇹 141.98.10.205

🇧🇷 118.26.105.52

🇫🇷 89.93.68.149

🇲🇦 81.192.46.29

🇧🇬 78.128.114.162

🇺🇸 66.132.172.111

🇺🇸 65.49.20.74

🇳🇱 45.153.34.151

🇺🇸 45.33.14.5