JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.13.76

65.111.13.76 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 13%: ?

13%

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.13.76

Whois 65.111.13.76

IP Abuse Reports for 65.111.13.76:

This IP address has been reported a total of 48 times from 21 distinct sources. 65.111.13.76 was first reported on June 28th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-07 01:06:47 (4 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 Lino Project	2026-05-05 21:21:41 (1 month ago)	65.111.13.76 - - [05/May/2026:23:21:40 +0200] "POST /xmlrpc.php HTTP/2.0" 403 455 "-" "Mozilla/5.0 ( ... show more 65.111.13.76 - - [05/May/2026:23:21:40 +0200] "POST /xmlrpc.php HTTP/2.0" 403 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-04-26 17:42:16 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇫🇷 masterguru	2026-04-23 11:14:08 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-18 14:05:31 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 masterguru	2026-04-15 11:02:49 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the la ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 65.111.13.76 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2026-04-12 22:56:04 (1 month ago)	Forum/form spam	Web Spam
🇬🇧 relianoid.com	2026-03-25 08:15:18 (2 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-03-23 23:19:11 (2 months ago)	Forum/form spam	Web Spam
Anonymous	2026-03-23 11:44:38 (2 months ago)	65.111.13.76 - - [23/Mar/2026:12:44:37 +0100] "GET /product/profuel-vitamin-b-komplex-forte-180-tabl ... show more 65.111.13.76 - - [23/Mar/2026:12:44:37 +0100] "GET /product/profuel-vitamin-b-komplex-forte-180-tabletten/ HTTP/1.1" 200 63527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36" show less	Bad Web Bot
🇬🇧 relianoid.com	2026-02-19 17:26:23 (3 months ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇦🇺 MAGIC	2026-02-11 01:03:41 (3 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇳🇱 jjnxpct	2025-12-31 04:47:43 (5 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.svn/wc.db (Rule ID: 920440) - URL file extension is restricted by policy show less	Hacking SQL Injection Web App Attack
🇺🇸 TPI-Abuse	2025-12-31 00:42:18 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.13.76 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.13.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 30 19:42:04.781424 2025] [security2:error] [pid 8374:tid 8374] [client 65.111.13.76:45035] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.patrickodougherty.com"] [uri "/.env"] [unique_id "aVRxXPtt-FU7EglosigwFQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇷 IgorS.zg.hr	2025-12-30 13:15:20 (5 months ago)	Web application attack detected by fail2ban	Hacking Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇱 180.189.174.146

🇺🇸 35.199.183.186

🇺🇸 2001:470:1:332::4

🇮🇳 163.53.72.120

🇺🇸 154.17.121.105

🇫🇮 147.185.133.45

🇯🇵 141.101.86.109

🇯🇵 141.101.86.65

🇨🇳 114.227.172.98

🇱🇹 81.30.98.62

🇺🇸 47.77.237.102

🇪🇸 46.6.124.216

🇺🇸 45.43.132.220

🇮🇳 4.213.160.153

🇸🇬 129.226.95.93

🇷🇺 87.228.84.215

🇳🇱 77.83.39.238

🇨🇳 58.20.236.52

🇳🇱 45.148.10.245

🇦🇺 2404:6800:4006:1001::123