JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.109.13.57

65.109.13.57 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.57.13.109.65.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.109.13.57

Whois 65.109.13.57

IP Abuse Reports for 65.109.13.57:

This IP address has been reported a total of 9 times from 5 distinct sources. 65.109.13.57 was first reported on January 5th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-05-06 07:42:45 (1 month ago)	[WedMay0609:42:42.4990672026][security2:error][pid2941137:tid2941229][client65.109.13.57:0]ModSecuri ... show more [WedMay0609:42:42.4990672026][security2:error][pid2941137:tid2941229][client65.109.13.57:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"alfagamma.ch.136-243-54-122.cpanel.site\"][uri\"/\"][unique_id\"afrw8uPWEuTHPFAz43WOjgAAAMY\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Octopuce	2026-04-19 06:21:51 (2 months ago)	Aggressive web search of vulnerable pages: /image/ /text/ /admin_/ /admin1/ /admin2/ /admin2.old/ /a ... show more Aggressive web search of vulnerable pages: /image/ /text/ /admin_/ /admin1/ /admin2/ /admin2.old/ /admin3/ /admin4_account/ /admin5/ /admin4_co ... show less	Web App Attack
🇩🇪 Prepaid-Host.com	2026-04-18 20:53:43 (2 months ago)	SSH Bruteforce detected \| Events: 6 \| First seen: 2026-04-18 20:53 UTC \| Last seen: 2026-04-18 20:53 ... show more SSH Bruteforce detected \| Events: 6 \| First seen: 2026-04-18 20:53 UTC \| Last seen: 2026-04-18 20:53 UTC \| Sample: 65.109.13.57 - - [18/Apr/2026:22:48:04 +0200] "GET /skins/elastic/styles/styles.min.css?s=1775475273 HTTP/2.0" 200 22377 "https://webmail.south-service.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 65.109.13.57 - - [18/Apr/2026:22:48:04 +0200] "GET /plugins/jqueryui/js/jquery-ui.min.js?s=1775475273 HTTP/2.0" 200 70381 "https://webmail.south-service.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (K show less	SSH Brute-Force
🇩🇪 ReporTR	2026-03-17 08:25:16 (3 months ago)	Fail2Ban plesk-modsecurity: 3 attempts from 65.109.13.57 (Country: <country>, <rdns>)	Hacking Web App Attack
🇩🇪 ReporTR	2026-03-09 07:38:38 (3 months ago)	Fail2Ban plesk-modsecurity: 3 attempts from 65.109.13.57 (Country: <country>, <rdns>)	Hacking Web App Attack
🇩🇪 ReporTR	2026-02-28 07:04:57 (3 months ago)	Fail2Ban plesk-modsecurity: 3 attempts from 65.109.13.57 (Country: <country>, <rdns>)	Hacking Web App Attack
🇳🇱 ReporTR	2026-02-09 18:10:42 (4 months ago)	Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. ... show more Repeated malicious activity detected by Fail2Ban jail 'plesk-modsecurity'. TCP connection completed. IP banned. show less	Hacking Web App Attack
🇷🇴 ReporTR	2026-02-05 16:21:41 (4 months ago)	Repeated malicious activity detected by Fail2Ban jail 'plesk-apache'. TCP connection completed. IP b ... show more Repeated malicious activity detected by Fail2Ban jail 'plesk-apache'. TCP connection completed. IP banned. show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-01-05 21:36:24 (5 months ago)	(mod_security) mod_security (id:210492) triggered by 65.109.13.57 (static.57.13.109.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.109.13.57 (static.57.13.109.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 05 16:36:17.671984 2026] [security2:error] [pid 26161:tid 26161] [client 65.109.13.57:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.chip18.cc"] [uri "/.htaccesscb3019c9d9c841549d8cec48b4441176"] [unique_id "aVwu0YhDlgAnzQJpjW8X9wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.91.26.168

🇩🇪 213.209.159.11

🇹🇼 198.235.24.60

🇮🇳 147.93.152.181

🇷🇴 141.98.83.48

🇫🇷 141.11.18.59

🇶🇦 135.136.47.211

🇵🇭 120.29.88.180

🇻🇳 103.28.36.122

🇫🇮 80.223.192.131

🇺🇸 65.49.1.170

🇨🇳 39.64.106.56

🇧🇷 206.43.126.45

🇨🇭 178.197.195.227

🇳🇱 176.65.148.29

🇳🇱 176.65.132.24

🇷🇴 80.94.92.130

🇺🇸 44.221.58.50

🇮🇷 5.233.100.239

🇩🇿 154.241.55.115