JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.4

65.111.13.4 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 1%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.4

Whois 65.111.13.4

IP Abuse Reports for 65.111.13.4:

This IP address has been reported a total of 26 times from 12 distinct sources. 65.111.13.4 was first reported on July 3rd 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Sklurk	2026-07-17 05:32:59 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-16 02:28:07 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-23 03:52:49 (1 month ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-06-20 02:39:07 (2 months ago)	Web App Attack	Web App Attack
🇪🇸 librebit	2026-05-17 04:25:45 (3 months ago)	Brute force	Brute-Force
🇵🇱 sefinek.net	2026-01-23 12:11:55 (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-12-02 08:29:06 (8 months ago)	(mod_security) mod_security (id:210740) triggered by 65.111.13.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210740) triggered by 65.111.13.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:29:00.899578 2025] [security2:error] [pid 27188:tid 27188] [client 65.111.13.4:46389] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy\|\|studiopilates.net\|F\|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "studiopilates.net"] [uri "/contact/Guestbook.php"] [unique_id "aS6jTEKC5WCLhBiYJnuyKgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:55:22 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:54:54.403129 2025] [security2:error] [pid 9303:tid 9303] [client 65.111.13.4:48947] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.schmerzfrei-und-bewegt.eu"] [uri "/.svn/wc.db"] [unique_id "aSPlHknWqGFYbzmSjSwuzgAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 04:33:08 (8 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.4 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 23:32:58.511943 2025] [security2:error] [pid 29220:tid 29220] [client 65.111.13.4:31235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nue18.com"] [uri "/.git/HEAD"] [unique_id "aSPf-ubWq_RUJGiR6NINFAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-29 05:01:59 (9 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack
🇧🇷 hostseries	2025-10-25 03:25:16 (9 months ago)	Trigger: LF_DISTATTACK	Brute-Force
Anonymous	2025-10-18 10:02:15 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.18 is noted in report timestamp show less	Hacking Brute-Force
🇨🇦 wil.com	2025-10-17 15:39:19 (10 months ago)	GlobalProtect login attempts with user mwicks.	VPN IP Brute-Force
Anonymous	2025-10-07 09:08:54 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.07 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-10-06 13:49:21 (10 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.10.06 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2400:cb00:987:1000:40cb:8963:5d4a:ff4a

🇧🇴 181.115.171.104

🇹🇷 176.42.137.209

🇩🇪 172.105.76.7

🇯🇵 124.156.225.181

🇵🇰 110.38.2.165

🇺🇸 107.21.191.211

🇮🇳 103.194.243.199

🇺🇿 95.46.66.43

🇨🇭 89.249.196.127

🇺🇸 82.38.69.175

🇩🇪 81.20.94.211

🇧🇬 79.124.56.102

🇺🇸 66.249.73.232

🇰🇷 64.110.90.250

🇩🇪 64.89.163.153

🇱🇹 62.60.130.242

🇲🇷 41.188.117.51

🇨🇳 39.104.64.139

🇺🇸 35.229.104.41