JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.111.3.133

65.111.3.133 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 7%: ?

ISP	3xK Tech GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS200373
Domain Name	3xktech.cloud
Country	🇺🇸 United States of America
City	Ashburn, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.111.3.133

Whois 65.111.3.133

IP Abuse Reports for 65.111.3.133:

This IP address has been reported a total of 51 times from 21 distinct sources. 65.111.3.133 was first reported on June 27th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-04-29 17:05:46 (1 month ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
Anonymous	2026-04-17 22:05:48 (1 month ago)	Forum/form spam	Web Spam
Anonymous	2026-04-09 02:39:02 (1 month ago)	Forum/form spam	Web Spam
🇱🇻 garmtech.com	2026-04-06 00:45:31 (1 month ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-30 06:07:43 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
🇱🇻 garmtech.com	2026-03-28 11:37:46 (2 months ago)	IM360 WAF: WordPress plugin/theme auto install block	Web App Attack
Anonymous	2026-02-26 06:49:05 (3 months ago)	Forum/form spam	Web Spam
🇺🇸 mnsf	2026-02-16 02:06:18 (3 months ago)	Scanning/Probing (26)	Brute-Force Web App Attack
Anonymous	2026-02-15 13:18:09 (3 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:25:59 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:25:55.984105 2026] [security2:error] [pid 1348:tid 1348] [client 65.111.3.133:12617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfholidayrentals.com"] [uri "/.env"] [unique_id "aZG7U1o9c3IGdHWqj0aqDAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 12:01:59 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:01:53.355182 2026] [security2:error] [pid 28068:tid 28068] [client 65.111.3.133:10319] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamelaweisberg.com"] [uri "/app/.git/config"] [unique_id "aZG1sRh3b9Pq5Ca1YrqZNgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 10:54:45 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 05:54:38.374647 2026] [security2:error] [pid 7055:tid 7055] [client 65.111.3.133:64395] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seebeexee.com"] [uri "/dev/.git/config"] [unique_id "aZGl7kNbKAxw43jRLX-s1QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-02-15 06:41:51 (3 months ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-02-15 06:27:56 (3 months ago)	(mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 65.111.3.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:27:52.493481 2026] [security2:error] [pid 1836:tid 1860] [client 65.111.3.133:60723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oohrah.us"] [uri "/admin/.env"] [unique_id "aZFnaPaxUwTOactKDP5ElAAAAJI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-15 06:00:40 (3 months ago)	65.111.3.133 - - [15/Feb/2026:07:00:39 +0100] "GET /wp/.git/config HTTP/1.1" 301 169 "-" "Mozilla/5. ... show more 65.111.3.133 - - [15/Feb/2026:07:00:39 +0100] "GET /wp/.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 2620:171:f4:f0:9999::237

🇬🇧 185.216.145.179

🇳🇱 176.65.148.215

🇷🇺 147.45.48.17

🇮🇳 122.177.246.203

🇩🇪 109.91.4.177

🇮🇳 103.55.106.206

🇫🇷 94.176.161.165

🇧🇾 86.57.173.115

🇺🇸 45.156.129.136

🇺🇸 45.79.162.187

🇦🇪 132.243.121.237

🇳🇱 91.92.42.242

🇳🇱 45.148.10.240

🇺🇸 13.219.1.233

🇷🇺 5.3.149.246

🇰🇷 203.142.160.143

🇮🇷 193.151.140.91

🇺🇸 184.105.139.98

🇨🇳 115.190.253.92