JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.21.115.52

65.21.115.52 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 41%: ?

41%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	65-21-115-52.ptr
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.21.115.52

Whois 65.21.115.52

IP Abuse Reports for 65.21.115.52:

This IP address has been reported a total of 16 times from 9 distinct sources. 65.21.115.52 was first reported on September 2nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FeG Deutschland	2026-07-18 09:49:19 (1 day ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇩🇪 paissangroup	2026-07-18 05:25:38 (1 day ago)	Multiple WAF Violations	Web App Attack
🇱🇻 garmtech.com	2026-07-17 20:56:20 (2 days ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-56.65.21.115.52.web-spammer ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 23-56.65.21.115.52.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇦🇺 oncord	2026-07-17 14:54:03 (2 days ago)	Form spam	Web Spam
🇸🇬 pusathosting.com	2026-07-16 09:54:02 (3 days ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇫🇷 mrcrassi	2026-07-02 15:43:42 (2 weeks ago)	Triggered Cloudflare WAF (botFight) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.0 (GET ... show more Triggered Cloudflare WAF (botFight) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.0 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 paissangroup	2026-03-04 22:01:38 (4 months ago)	Multiple WAF Violations	Web App Attack
🇦🇺 oncord	2026-03-04 17:18:44 (4 months ago)	Form spam	Web Spam
🇫🇷 mrcrassi	2026-02-20 12:25:57 (4 months ago)	Triggered Cloudflare WAF (botFight) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.0 (GET ... show more Triggered Cloudflare WAF (botFight) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.0 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.114 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 mrcrassi	2026-02-05 14:52:02 (5 months ago)	Triggered Cloudflare WAF (botFight) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.0 (GET ... show more Triggered Cloudflare WAF (botFight) from FI. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.0 (GET method) Endpoint: /blog/descubra-as-novidades-da-garen-na-fesqua-2024/ UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 paissangroup	2026-01-08 12:29:37 (6 months ago)	Multiple WAF Violations	Web App Attack
🇧🇪 cmbplf	2025-12-10 01:27:28 (7 months ago)	106 requests with url.path */wp-comments-post.php	Brute-Force Bad Web Bot
🇪🇸 robotstxt	2025-10-30 08:00:22 (8 months ago)	65.21.115.52 - - [30/Oct/2025:07:59:07 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 127507 "- ... show more 65.21.115.52 - - [30/Oct/2025:07:59:07 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 127507 "-" rt="1.718" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/wp-login.php/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="1.718" 65.21.115.52 - - [30/Oct/2025:07:59:07 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 127482 "-" rt="1.789" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/wp-login.php/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="1.790" 65.21.115.52 - - [30/Oct/2025:07:59:07 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 127482 "-" rt="1.941" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/53 ... show less	Bad Web Bot
Anonymous	2025-10-30 03:46:35 (8 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇪🇸 robotstxt	2025-09-03 00:56:28 (10 months ago)	65.21.115.52 - - [03/Sep/2025:00:55:54 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 55317 "-" ... show more 65.21.115.52 - - [03/Sep/2025:00:55:54 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 55317 "-" rt="0.686" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1823.43" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/wp-login.php/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="0.687" 65.21.115.52 - - [03/Sep/2025:00:55:54 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 55311 "-" rt="0.640" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" "-" h="fundaciopacopuerto.cat" sn="fundaciopacopuerto.cat" ru="/wp-login.php/xmlrpc.php" u="/index.php" ucs="-" ua="unix:/var/run/php/fundacio82.sock" us="404" uct="0.000" urt="0.639" 65.21.115.52 - - [03/Sep/2025:00:55:55 +0000] "POST /wp-login.php/xmlrpc.php HTTP/1.1" 404 55308 "-" rt="0.698" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537 ... show less	Bad Web Bot

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.223.30

🇳🇱 195.178.110.217

🇦🇺 60.240.117.237

🇳🇱 213.19.205.18

🇫🇷 193.252.169.88

🇧🇷 190.89.136.228

🇷🇺 185.10.63.235

🇹🇷 149.34.210.56

🇨🇳 116.172.248.222

🇨🇳 112.241.135.209

🇺🇸 100.28.191.174

🇹🇷 94.154.43.120

🇺🇸 73.59.208.94

🇫🇷 51.159.110.167

🇫🇷 37.59.204.129

🇦🇺 14.203.66.218

🇺🇸 13.83.162.33

🇮🇩 202.65.229.2

🇨🇳 183.242.101.224

🇺🇦 176.103.4.155