JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.21.113.201

65.21.113.201 was found in our database!

This IP was reported 197 times. Confidence of Abuse is 52%: ?

52%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	pot18.webmeup.com
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.21.113.201

Whois 65.21.113.201

IP Abuse Reports for 65.21.113.201:

This IP address has been reported a total of 197 times from 43 distinct sources. 65.21.113.201 was first reported on July 9th 2024, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-06-09 13:18:40 (3 hours ago)	59.583 requests in 1 hour (1mo1d5h)	Brute-Force Bad Web Bot
🇩🇪 4server	2026-06-08 23:45:34 (17 hours ago)	[TueJun0901:45:32.7648112026][security2:error][pid2019588:tid2019666][client65.21.113.201:0]ModSecur ... show more [TueJun0901:45:32.7648112026][security2:error][pid2019588:tid2019666][client65.21.113.201:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"federicorella.ch\"][uri\"/robots.txt\"][unique_id\"aidUHDAFYZfK51XbNg2uOAAAAIY\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 bius.dev	2026-06-04 04:37:13 (5 days ago)	Too many comments via the contact form at https://bius.dev/contact. Thursday 4th of June 2026 02:37: ... show more Too many comments via the contact form at https://bius.dev/contact. Thursday 4th of June 2026 02:37:13 PM - 65.21.113.201 show less	Web Spam
🇬🇧 poundawebsiteltd	2026-06-03 16:19:45 (6 days ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 65.21.113.201 - - [03/Jun/2026:1 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 65.21.113.201 - - [03/Jun/2026:17:19:41 +0100] GET /robots.txt HTTP/1.1 403 2830 - Mozilla/5.0 (compatible; AwarioBot/1.0; +https://[REDACTED_DOMAIN]/bots.html) show less	Web App Attack
🇪🇸 masterguru	2026-06-03 14:31:18 (6 days ago)	BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000- ... show more BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-06-03 09:36:30 (6 days ago)	[Wed Jun 03 19:36:29.735763 2026] [security2:error] [pid 367931] [client 65.21.113.201:34394] [clien ... show more [Wed Jun 03 19:36:29.735763 2026] [security2:error] [pid 367931] [client 65.21.113.201:34394] [client 65.21.113.201] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/robots.txt"] [unique_id "ah_1ncbiX3rzc-Jcxj0qhwAAAAQ"] ... show less	Web App Attack
🇧🇪 taivas.nl	2026-06-01 07:02:10 (1 week ago)	Bad_requests	Bad Web Bot
🇪🇸 masterguru	2026-05-31 19:28:29 (1 week ago)	BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000- ... show more BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000-123) show less	Bad Web Bot
🇧🇪 cmbplf	2026-05-18 00:01:56 (3 weeks ago)	10.576 requests in 1 hour (1w21h59m)	Brute-Force Bad Web Bot
🇨🇭 YF	2026-05-15 17:05:32 (3 weeks ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇬🇧 WebNiraj	2026-05-13 18:17:28 (3 weeks ago)	(mod_security) mod_security (id:949110) triggered by 65.21.113.201 (FI/Finland/pot18.webmeup.com): 5 ... show more (mod_security) mod_security (id:949110) triggered by 65.21.113.201 (FI/Finland/pot18.webmeup.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇧🇪 cmbplf	2026-05-09 00:01:20 (1 month ago)	15.693 requests in 1 hour (6d20h59m)	Brute-Force Bad Web Bot
🇪🇸 masterguru	2026-04-25 21:30:08 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000- ... show more BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇳🇱 jjnxpct	2026-04-21 03:48:59 (1 month ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /robots.txt (Rule ID: 920600) - Illegal Accept header: charset parameter show less	Web App Attack
🇮🇩 Burayot	2026-04-20 05:27:09 (1 month ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 65.21.113.201 (FI/Finland/pot18.webm ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 65.21.113.201 (FI/Finland/pot18.webmeup.com): 1 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 197 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.16.96.250

🇺🇸 143.198.143.161

🇺🇸 136.118.228.162

🇮🇳 122.164.233.253

🇳🇱 5.61.209.96

🇳🇱 176.65.139.130

🇺🇸 172.96.182.111

🇸🇪 170.168.30.13

🇺🇸 136.56.34.147

🇭🇰 104.208.108.166

🇳🇬 102.93.12.169

🇺🇸 45.38.249.56

🇺🇸 8.230.97.101

🇺🇸 193.202.81.251

🇳🇱 193.176.31.203

🇺🇸 172.86.114.38

🇺🇸 162.217.167.57

🇺🇸 147.185.132.21

🇺🇸 137.184.25.34

🇺🇸 66.132.172.114