JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.238

65.111.13.238 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 10%: ?

10%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.238

Whois 65.111.13.238

IP Abuse Reports for 65.111.13.238:

This IP address has been reported a total of 35 times from 16 distinct sources. 65.111.13.238 was first reported on June 27th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-05-22 11:40:40 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇨🇳 ThreatBook.io	2026-05-05 22:49:10 (1 month ago)	ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/65.111.13.238 2026 ... show more ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/65.111.13.238 2026-05-05 08:54:50 /examples/servlets/servlet/SessionExample 2026-05-05 17:39:14 / show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-02 22:33:48 (1 month ago)	ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/65.111.13.238 2026 ... show more ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/65.111.13.238 2026-05-02 15:44:48 /video/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
🇨🇳 ThreatBook.io	2026-04-11 22:27:48 (1 month ago)	ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/65.111.13.238 2026 ... show more ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/65.111.13.238 2026-04-11 08:54:37 /v3/api-docs 2026-04-11 08:54:37 /api/swagger.json 2026-04-11 08:54:37 /swagger/docs/v1 2026-04-11 08:54:35 /prod-api/v2/api-docs 2026-04-11 08:54:36 /v2/api-docs 2026-04-11 08:54:36 /swagger/v1/swagger.json show less	Web App Attack
🇮🇹 VHosting	2026-02-18 22:11:32 (3 months ago)	Detected attack and reported by a human	Brute-Force Web App Attack SSH DDoS Attack Exploited Host Bad Web Bot
🇩🇪 neogenius	2026-01-20 18:39:27 (4 months ago)	Web App Attack	Brute-Force Web App Attack
🇺🇸 inspectorgdgt	2025-12-26 22:00:33 (5 months ago)	Credential brute-force login attempts observed (e.g., SSLVPN/auth failures).	Brute-Force
🇨🇳 ThreatBook.io	2025-12-15 22:41:03 (5 months ago)	ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/65.111.13.238 20 ... show more ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/65.111.13.238 2025-12-15 16:21:44 /video/index.php?c=search&catid=23%20and%20(select%201%20from%20(select%20count(),concat(md5(1),floor(rand(0)2))x%20from%20information_schema.tables%20group%20by%20x)a) show less	Web App Attack
Anonymous	2025-10-27 14:27:59 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.27 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.27 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 Tha_14	2025-10-25 17:45:49 (7 months ago)	Oct 25 19:45:46 hosting sshd[303573]: Invalid user * from 65.111.13.238 port 47361 Oct 25 19:45:46 h ... show more Oct 25 19:45:46 hosting sshd[303573]: Invalid user * from 65.111.13.238 port 47361 Oct 25 19:45:46 hosting sshd[303573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.13.238 Oct 25 19:45:48 hosting sshd[303573]: Failed password for invalid user * from 65.111.13.238 port 47361 ssh2 show less	Brute-Force SSH
Anonymous	2025-10-22 18:03:45 (7 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.22 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.10.22 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-20 18:51:23 (7 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.20 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.20 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 13:16:05 (7 months ago)	GlobalProtect login attempts with user evil.	VPN IP Brute-Force
Anonymous	2025-10-16 08:09:03 (7 months ago)	WordPress Brute Force	Brute-Force
Anonymous	2025-10-16 01:46:11 (7 months ago)	Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.16 is noted in report tim ... show more Attempted brute force login to web vpn 3 time(s); last attempt for 2025.10.16 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.155.74

🇧🇷 179.221.228.244

🇧🇷 179.191.82.115

🇨🇳 113.116.35.144

🇳🇱 77.83.39.147

🇹🇿 41.59.52.154

🇩🇪 213.209.159.236

🇺🇸 209.85.217.70

🇺🇸 208.84.101.127

🇺🇸 172.203.190.135

🇩🇪 165.227.170.113

🇺🇸 162.216.150.221

🇸🇬 47.84.110.6

🇨🇳 27.11.199.159

🇸🇬 2a02:4780:3:577:0:1b48:cf02:1

🇩🇪 213.209.159.227

🇺🇸 172.203.190.128

🇨🇳 125.124.226.217

🇮🇩 103.125.103.201

🇦🇺 74.91.200.217