JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.235

65.111.13.235 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 27%: ?

27%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.235

Whois 65.111.13.235

IP Abuse Reports for 65.111.13.235:

This IP address has been reported a total of 40 times from 22 distinct sources. 65.111.13.235 was first reported on July 10th 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-09-03 04:07:11 (10 hours ago)	Wordpress malicious attack:[octaflood]	Web App Attack
🇳🇱 ipoac.nl	2026-09-03 04:04:55 (10 hours ago)	2026-09-03T06:04:52.981192+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown ... show more 2026-09-03T06:04:52.981192+02:00 ipoac.nl wordpress(-)-: XML-RPC authentication attempt for unknown user adminlin from 65.111.13.235 show less	Web App Attack
🇪🇸 librebit	2026-09-02 05:51:28 (1 day ago)	Brute force	Brute-Force
🇫🇷 Sklurk	2026-07-09 00:32:47 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 oncord	2026-06-12 17:26:56 (2 months ago)	Form spam	Web Spam
🇫🇷 masterguru	2026-03-31 12:12:48 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.235 (US/United States/-): 1 in the l ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.235 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇱🇻 garmtech.com	2026-03-29 14:27:34 (5 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇺🇸 TPI-Abuse	2026-02-03 00:14:20 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 02 19:14:17.885082 2026] [security2:error] [pid 2096824:tid 2096824] [client 65.111.13.235:56521] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aYE92ercb4S8BktyGIihxgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2026-01-23 19:50:53 (7 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST meth ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2026-01-23 19:40:04 (7 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 nowyouknow	2025-12-10 16:36:02 (8 months ago)	(From [email protected]) Upgrade your website seo with top-rated seo backlinks! BonusBacklinks.c ... show more (From [email protected]) Upgrade your website seo with top-rated seo backlinks! BonusBacklinks.com - we deliver daily backlinks and bring organic visits to your website EVERY DAY: + Use 85% OFF + Strong daily seo backlinks + Real web traffic + Prices start from $1 + Bonus coupon codes Use backlinks deals - https://tiny.cc/BonusBacklinks-Coupons Or visit directly - https://BonusBacklinks.com BonusBacklinks - daily seo backlinks and website clicks to grow your website every day show less	Phishing Web Spam
🇱🇻 garmtech.com	2025-11-30 16:06:07 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-06.65.111.13.235.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-06.65.111.13.235.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 11:09:32 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 06:09:26.600432 2025] [security2:error] [pid 14083:tid 14083] [client 65.111.13.235:27619] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lakesidedetectiveagency.com"] [uri "/.git/HEAD"] [unique_id "aSbf5nKy669mRpLl3Hg1SwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 03:02:10 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 22:02:03.289265 2025] [security2:error] [pid 2282370:tid 2282370] [client 65.111.13.235:59343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.salsberggroup.com"] [uri "/.env"] [unique_id "aSZtqzTBhp_odjEr_elwIwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-26 02:25:31 (9 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.235 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 25 21:25:22.449312 2025] [security2:error] [pid 7377:tid 7377] [client 65.111.13.235:56121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.carterindustries.net"] [uri "/.env"] [unique_id "aSZlEliu_vWUcgN-rPWNhwAAABI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4004:1002::12a

🇺🇸 66.132.195.18

🇦🇷 181.118.237.173

🇵🇰 101.53.228.115

🇫🇷 77.239.124.130

🇩🇪 69.5.169.59

🇮🇳 47.31.106.1

🇹🇷 45.136.7.77

🇬🇧 45.82.76.128

🇨🇳 42.100.24.8

🇺🇸 40.124.82.199

🇮🇩 27.131.1.45

🇳🇱 20.160.86.7

🇨🇦 4.204.224.164

🇻🇪 190.75.248.87

🇺🇸 165.154.172.8

🇨🇳 123.14.124.154

🇳🇬 102.88.137.145

🇺🇸 66.132.195.17

🇺🇸 66.132.186.247