JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.20

65.111.13.20 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 0%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.20

Whois 65.111.13.20

IP Abuse Reports for 65.111.13.20:

This IP address has been reported a total of 47 times from 22 distinct sources. 65.111.13.20 was first reported on June 26th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-07 15:08:02 (1 month ago)	Web App Attack	Web App Attack
Anonymous	2026-06-06 12:17:43 (2 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 nowyouknow	2026-05-02 19:56:09 (3 months ago)	(From [email protected]) Hey, I’m offering something real value for free No catch. Hit ... show more (From [email protected]) Hey, I’m offering something real value for free No catch. Hit this link to enter now before it fills: https://suniljaindvg.systeme.io/6850adaf Takes like 10 sec. Could end up yours. Join now. If you don’t want to receive messages from me, please submit the form on my website show less	Phishing Web Spam
🇦🇺 oncord	2026-04-30 10:23:35 (3 months ago)	Form spam	Web Spam
🇦🇺 RedBear IT	2026-03-26 10:00:37 (4 months ago)	"DDoS against public endpoint"	DDoS Attack
🇺🇸 TPI-Abuse	2026-02-10 15:12:30 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 10:12:24.801959 2026] [security2:error] [pid 27149:tid 27149] [client 65.111.13.20:54447] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthraxbooks.info"] [uri "/api/.git/config"] [unique_id "aYtK2Ao13rAXLIiI4gam0QAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 myagent.site	2026-02-10 03:58:18 (6 months ago)	Blocking for trying to access an exploit file: /backend/.env	Hacking
🇺🇸 TPI-Abuse	2026-02-10 00:38:52 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:38:46.945099 2026] [security2:error] [pid 18799:tid 18799] [client 65.111.13.20:28219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kewlkarz.com"] [uri "/api/.env"] [unique_id "aYp-FvazsW6yamaLXjedMQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 23:20:13 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 18:20:05.568874 2026] [security2:error] [pid 13965:tid 13994] [client 65.111.13.20:29629] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keetons.net"] [uri "/.env.production"] [unique_id "aYprpblkEMzYEW1K1FcOXQAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 oncord	2026-01-11 14:47:18 (7 months ago)	Form spam	Web Spam
🇺🇸 findlab	2026-01-09 01:20:02 (7 months ago)	Backdrop CMS module - malicious activity detected	Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2026-01-01 11:23:04 (7 months ago)	(From [email protected]) Hello there, For just $250/month, you can add a dedicated Digital M ... show more (From [email protected]) Hello there, For just $250/month, you can add a dedicated Digital Marketing Assistant to your team—managing SEO, ad campaigns, social media, email marketing, and daily operational tasks. The first month is free, allowing you to start without any commitment. Simply complete the form to begin. Direct Google link: https://docs.google.com/forms/d/e/1FAIpQLSdfVsEbHZ8ONCILtiWxC8Nz4dMDX4XytsWbDm9ZehvJq0dshA/viewform GLE Link to Google Forms: https://forms.gle/hUcK6pGk3DeYNonL7 Short link: https://shorturl.at/sIc0l show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-12-13 10:48:26 (8 months ago)	(From [email protected]) Want to see how automated emails can generate passive income for you? ... show more (From [email protected]) Want to see how automated emails can generate passive income for you? Check https://rb.gy/uxe0l2 show less	Phishing Web Spam
🇮🇩 Burayot	2025-12-09 19:49:14 (8 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.13.20 (US/United States/-): ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 65.111.13.20 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇺🇸 TPI-Abuse	2025-12-09 03:44:01 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 08 22:43:57.160807 2025] [security2:error] [pid 24286:tid 24365] [client 65.111.13.20:59221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earthlink-internet.com"] [uri "/.git/HEAD"] [unique_id "aTea_WV3T8fnX4PRj8Hz1QAAANE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.26

🇮🇳 203.145.143.163

🇩🇪 193.32.248.168

🇳🇱 160.119.71.123

🇧🇬 79.124.58.198

🇨🇳 47.121.139.13

🇨🇳 220.178.246.43

🇺🇸 216.25.89.106

🇺🇸 205.210.31.78

🇨🇳 203.56.198.45

🇭🇰 199.45.154.64

🇲🇽 187.141.71.166

🇦🇷 186.57.113.250

🇨🇱 181.43.201.37

🇷🇺 178.23.150.164

🇫🇷 85.217.140.37

🇱🇹 46.29.234.126

🇧🇷 187.94.24.234

🇺🇸 162.216.150.106

🇨🇳 117.50.220.119