JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.101

65.111.13.101 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 11%: ?

11%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.101

Whois 65.111.13.101

IP Abuse Reports for 65.111.13.101:

This IP address has been reported a total of 43 times from 19 distinct sources. 65.111.13.101 was first reported on June 26th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 voormedia	2026-04-20 00:49:47 (1 month ago)	Accessed trap at '/.env'	Web App Attack
🇧🇷 SOCBR	2026-04-19 04:59:54 (1 month ago)	IPS: Sensitive Configuration File Disclosure.	Hacking
Anonymous	2026-04-19 01:54:20 (1 month ago)	"GET /.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:48:30 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:48:23.682746 2026] [security2:error] [pid 24803:tid 24803] [client 65.111.13.101:42703] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakesideshelving.com"] [uri "/api/.env"] [unique_id "aY7lV-jE2ILYNqPi9dtnCQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 08:25:47 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:25:42.361711 2026] [security2:error] [pid 22737:tid 22737] [client 65.111.13.101:32947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ladbc.club"] [uri "/new/.git/config"] [unique_id "aY7gBlykZ2icUNOnM_9SZgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-02-13 08:10:44 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-02-13 08:06:04 (3 months ago)	Scanning/Probing (11)	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-02-13 04:36:32 (3 months ago)	(mod_security) mod_security (id:949110) triggered by 65.111.13.101 (US/United States/-): N in the la ... show more (mod_security) mod_security (id:949110) triggered by 65.111.13.101 (US/United States/-): N in the last X secs show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:46:58 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:46:51.220280 2026] [security2:error] [pid 28422:tid 28422] [client 65.111.13.101:60115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killeramps.com"] [uri "/v2/.git/config"] [unique_id "aY6eq2Zl6H_BSdWoXzVaOwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 03:08:18 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 22:08:14.147749 2026] [security2:error] [pid 20744:tid 20744] [client 65.111.13.101:61689] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystonebrass.com"] [uri "/api/.git/config"] [unique_id "aY6VnvcphlTzEf6-HbCZWAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 02:31:06 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:30:59.803066 2026] [security2:error] [pid 19649:tid 19649] [client 65.111.13.101:42741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelting.net"] [uri "/dev/.git/config"] [unique_id "aY6M4xZZEf_X3lvewbrd6AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 01:23:35 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 20:23:30.491160 2026] [security2:error] [pid 28982:tid 28982] [client 65.111.13.101:35519] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karsini-services.com"] [uri "/.git/config"] [unique_id "aY59Et1VC1bVBGSqzrPjmwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 19:18:23 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 14:18:18.699533 2026] [security2:error] [pid 15717:tid 15717] [client 65.111.13.101:63209] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "financesf.com"] [uri "/.git/config"] [unique_id "aY4nenDvHxUvPic70DKDpQAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ddw	2026-02-12 19:17:01 (3 months ago)	Access Violation Attempts - Multiple 403 Forbidden responses.	Hacking Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-11 08:06:34 (4 months ago)	Blocking for trying to access an exploit file: /app/.git/config	Hacking

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.155

🇳🇬 152.32.141.40

🇩🇪 43.157.82.252

🇳🇱 213.176.16.100

🇹🇼 198.235.24.127

🇨🇳 123.191.151.173

🇨🇦 85.217.149.45

🇫🇷 85.217.140.23

🇸🇬 47.79.11.96

🇩🇪 43.157.62.101

🇩🇪 43.157.53.115

🇨🇱 34.176.36.52

🇨🇳 14.103.34.252

🇹🇷 212.68.38.69

🇧🇷 177.152.134.88

🇭🇰 150.5.154.160

🇬🇧 87.236.176.94

🇩🇪 69.5.169.43

🇺🇸 47.134.152.155

🇩🇪 43.157.52.37