JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.198

65.111.13.198 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.198

Whois 65.111.13.198

IP Abuse Reports for 65.111.13.198:

This IP address has been reported a total of 30 times from 17 distinct sources. 65.111.13.198 was first reported on July 11th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Octopuce	2026-07-07 00:39:41 (10 hours ago)	Aggressive web search of vulnerable pages: /.env.local /.env /info.php /wp-content/uploads/wc-logs/ ... show more Aggressive web search of vulnerable pages: /.env.local /.env /info.php /wp-content/uploads/wc-logs/ /backup.zip /db.sql ... show less	Web App Attack
🇲🇽 octageeks.com	2026-06-18 04:23:23 (2 weeks ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇺🇸 TPI-Abuse	2026-01-17 09:42:00 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 17 04:41:57.169329 2026] [security2:error] [pid 2202:tid 2202] [client 65.111.13.198:26873] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.alccontractorsllc.com"] [uri "/.env"] [unique_id "aWtZZXxPYESoKsfniN110wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-16 10:31:16 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 05:31:11.333470 2026] [security2:error] [pid 31778:tid 31778] [client 65.111.13.198:20373] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salkindsectzerproductions.starrmail.net"] [uri "/config.php%7C/.env%7Csettings.py"] [unique_id "aWoTb8D2NsZiXKWoqtT6OAAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2025-12-23 16:35:15 (6 months ago)	Detected attack and reported by a human	DDoS Attack Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
Anonymous	2025-12-14 20:18:10 (6 months ago)	botnet	DDoS Attack
🇺🇸 TPI-Abuse	2025-11-24 09:26:27 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 04:26:19.389395 2025] [security2:error] [pid 13869:tid 13869] [client 65.111.13.198:18577] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kangen-agua.com.player-care.com"] [uri "/.svn/wc.db"] [unique_id "aSQku7hbOj7CoV_G8RG3VAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:55:24 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:55:16.433014 2025] [security2:error] [pid 22178:tid 22178] [client 65.111.13.198:10353] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fantasyfootballing.chavarri.com"] [uri "/.env"] [unique_id "aSQddHRAy0WqGkE0QsEcUgAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 06:38:37 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 01:38:30.755085 2025] [security2:error] [pid 28999:tid 29002] [client 65.111.13.198:30495] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "angelssanchez.com"] [uri "/.env"] [unique_id "aSP9ZhHUG1yMWqoCx_DoagAAAIA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 05:54:51 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 00:54:43.865397 2025] [security2:error] [pid 32307:tid 32307] [client 65.111.13.198:46271] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-ketab.net"] [uri "/.env"] [unique_id "aSPzI65K1XqXx0zGhWb3QAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:13:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:13:16.421178 2025] [security2:error] [pid 587:tid 587] [client 65.111.13.198:28035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.farmers123.com"] [uri "/.svn/wc.db"] [unique_id "aSPbXMA7I5wARBJOmjXxFgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-17 11:19:04 (7 months ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-11-14 22:54:21 (7 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 14 17:54:15.027452 2025] [security2:error] [pid 20699:tid 20699] [client 65.111.13.198:36305] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.isleofcain.com"] [uri "/.env"] [unique_id "aRezFykkZwGSVFUn8V_okQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-11-13 22:57:05 (7 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇭🇺 zolav8	2025-11-10 01:17:05 (7 months ago)	SQL injection / web attack attempt	Hacking SQL Injection

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 172.253.5.29

🇨🇳 121.11.96.13

🇨🇳 106.13.122.214

🇳🇱 45.148.10.157

🇸🇦 2a02:9b0:402a:282f:f9d0:8e40:d503:24

🇺🇸 152.32.235.69

🇺🇸 148.135.151.190

🇺🇸 147.185.132.127

🇧🇷 136.248.121.226

🇹🇼 111.248.43.54

🇫🇷 91.231.89.174

🇳🇱 85.11.167.228

🇭🇳 45.166.92.37

🇺🇸 23.168.216.185

🇺🇸 20.150.194.114

🇩🇪 216.26.252.148

🇺🇸 193.37.33.27

🇳🇱 191.96.11.219

🇨🇳 171.109.111.69

🇬🇧 161.35.162.136