JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.21.113.249

65.21.113.249 was found in our database!

This IP was reported 315 times. Confidence of Abuse is 48%: ?

48%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	pot32.webmeup.com
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.21.113.249

Whois 65.21.113.249

IP Abuse Reports for 65.21.113.249:

This IP address has been reported a total of 315 times from 40 distinct sources. 65.21.113.249 was first reported on July 8th 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-07-12 17:21:58 (3 days ago)	[SunJul1219:21:54.9745032026][security2:error][pid3590066:tid3590197][client65.21.113.249:0]ModSecur ... show more [SunJul1219:21:54.9745032026][security2:error][pid3590066:tid3590197][client65.21.113.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.specialfood.ch\"][uri\"/robots.txt\"][unique_id\"alPNMhqaxc9xSESnSYCP2wAAAQ4\"] show less	Port Scan Brute-Force Web App Attack
🇧🇪 cmbplf	2026-07-12 13:04:50 (3 days ago)	28.614 requests in 1 hour (4w2h59m)	Brute-Force Bad Web Bot
🇮🇹 mediarama.com	2026-07-10 22:21:28 (5 days ago)	Banned by Fail2Ban	Web App Attack
🇪🇸 masterguru	2026-07-10 19:29:57 (5 days ago)	Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ... show more Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122) show less	Hacking
🇺🇸 juguemosalacarioca.com	2026-07-10 18:45:49 (5 days ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇩🇪 4server	2026-07-04 19:43:29 (1 week ago)	[SatJul0421:43:27.1766082026][security2:error][pid1909661:tid1909687][client65.21.113.249:0]ModSecur ... show more [SatJul0421:43:27.1766082026][security2:error][pid1909661:tid1909687][client65.21.113.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"specialfood.ch\"][uri\"/robots.txt\"][unique_id\"akliXy3pT-aNqYTT_NU7UAAAAA8\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 bazter.pro	2026-06-29 11:27:26 (2 weeks ago)	Auto-Ban [2026-06-29 11:27:25]: CRITICAL: bot trap (hard) \| host=www.geoproceso.com \| route=/-.stn/s ... show more Auto-Ban [2026-06-29 11:27:25]: CRITICAL: bot trap (hard) \| host=www.geoproceso.com \| route=/-.stn/sync \| hits=2 \| ua=Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html) show less	Hacking Web App Attack
🇩🇪 4server	2026-06-11 05:55:42 (1 month ago)	[ThuJun1107:55:36.1389412026][security2:error][pid1540429:tid1540519][client65.21.113.249:0]ModSecur ... show more [ThuJun1107:55:36.1389412026][security2:error][pid1540429:tid1540519][client65.21.113.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.specialfood.ch\"][uri\"/robots.txt\"][unique_id\"aipN2PxRwGmazeBrf-LIKAAAAIQ\"] show less	Port Scan Brute-Force Web App Attack
🇪🇸 el-brujo	2026-06-10 02:47:16 (1 month ago)	[Wed Jun 10 04:40:12.665537 2026] [proxy_fcgi:error] [pid 516805:tid 517230] [remote 65.21.113.249:0 ... show more [Wed Jun 10 04:40:12.665537 2026] [proxy_fcgi:error] [pid 516805:tid 517230] [remote 65.21.113.249:0] AH01071: Got error 'Primary script unknown\n' [Wed Jun 10 04:47:15.580218 2026] [proxy_fcgi:error] [pid 518952:tid 520973] [remote 65.21.113.249:0] AH01071: Got error 'Primary script unknown\n' ... show less	Hacking Web App Attack
🇫🇮 YF	2026-06-07 13:00:24 (1 month ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇫🇷 Rom74	2026-06-07 07:11:40 (1 month ago)	[Sun Jun 07 09:07:35.604842 2026] [security2:error] [pid 2423060:tid 134019714885312] [client 65.21. ... show more [Sun Jun 07 09:07:35.604842 2026] [security2:error] [pid 2423060:tid 134019714885312] [client 65.21.113.249:43838] [client 65.21.113.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.teslogiciels.com"] [uri "/robots.txt"] [unique_id "aiUYtxGb32VKgVUcmzT3DgAAAE4"] [Sun Jun 07 09:07:35.888564 2026] [security2:error] [pid 2423060:tid 134020302014144] [client 65.21.113.249:36372] [client 65.21.113.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exc ... show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-03 15:08:01 (1 month ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02]	Hacking SQL Injection Web App Attack
🇪🇸 masterguru	2026-06-03 14:56:53 (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000- ... show more BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-06-03 14:23:30 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 65.21.113.249 (FI/Finland/pot32.webmeup.com): N ... show more (mod_security) mod_security (id:949110) triggered by 65.21.113.249 (FI/Finland/pot32.webmeup.com): N in the last X secs show less	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-03 13:05:02 (1 month ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack

Showing 1 to 15 of 315 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac1:76c0:460::5e:77

🇬🇧 193.32.209.229

🇺🇸 143.244.178.70

🇻🇳 103.45.234.143

🇺🇸 65.49.1.126

🇬🇧 35.203.210.201

🇺🇸 20.29.23.176

🇯🇵 207.56.227.172

🇺🇸 195.184.76.49

🇳🇱 195.178.110.26

🇬🇧 195.96.139.228

🇧🇷 186.237.76.13

🇧🇷 177.1.121.67

🇨🇳 116.177.172.64

🇮🇳 103.176.139.23

🇳🇱 81.19.216.97

🇩🇪 69.5.169.88

🇺🇸 66.132.186.203

🇱🇹 62.60.130.219

🇻🇳 14.225.173.146