JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

65.21.157.72

Neutral Activity

Abuse confidence score ?

0% Low Risk

16 reports

9 reporters · latest 2 years ago

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.72.157.21.65.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

65.21.157.72 has been reported 16 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 65.21.157.72

This IP address has been reported a total of 16 times from 9 distinct sources. 65.21.157.72 was first reported on November 17th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2023-11-20 00:50:33 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 19:50:29.349172 2023] [security2:error] [pid 19532] [client 65.21.157.72:49857] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arriagarealestate.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVqtVSNVrD6eJr-Rz8xZzgAAAB4"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2023-11-19 20:28:24 (2 years ago)	LF_APACHE_403: 65.21.157.72 (FI/Finland/static.72.157.21.65.clients.your-server.de), more than 10 Ap ... show more LF_APACHE_403: 65.21.157.72 (FI/Finland/static.72.157.21.65.clients.your-server.de), more than 10 Apache 403 hits in the last 3600 secs show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-11-19 19:49:55 (2 years ago)	65.21.157.72 - - [19/Nov/2023:21:48:08 +0200] "GET /wp-admin/style.php HTTP/1.1" 404 492 "www.bing.c ... show more 65.21.157.72 - - [19/Nov/2023:21:48:08 +0200] "GET /wp-admin/style.php HTTP/1.1" 404 492 "www.bing.com" "wp_is_mobile" 65.21.157.72 - - [19/Nov/2023:21:49:54 +0200] "GET /wp-content/export.php HTTP/1.1" 404 492 "www.bing.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 19:49:50 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 14:49:45.810024 2023] [security2:error] [pid 2559] [client 65.21.157.72:57843] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVpm2XHPdv0sBUTX79uEKwAAABg"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 17:51:21 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 12:51:15.422790 2023] [security2:error] [pid 16989] [client 65.21.157.72:61256] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aridscapes.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVpLE6mvwWNiwCVFoKDHKgAAAA0"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 15:34:01 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 10:33:57.418074 2023] [security2:error] [pid 18519] [client 65.21.157.72:57360] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "areafinancieratf.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVoq5aIWYXqvulvdchpjXQAAAAg"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2023-11-19 14:04:48 (2 years ago)	Too many Status 40X (50) Request Overload (125)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 13:05:58 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 08:05:52.717340 2023] [security2:error] [pid 10297] [client 65.21.157.72:61343] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aurumlending.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVoIML3Kxxs_SVBGFVzFDwAAAA8"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 12:48:11 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 07:48:06.498512 2023] [security2:error] [pid 10583:tid 47846573274880] [client 65.21.157.72:62362] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arcontractingservices.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVoEBmi0eXX-cGDQAmfg6AAAAJM"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-19 12:32:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your- ... show more (mod_security) mod_security (id:210492) triggered by 65.21.157.72 (static.72.157.21.65.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 19 07:32:01.837102 2023] [security2:error] [pid 21090] [client 65.21.157.72:51618] [client 65.21.157.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aschmitz.ewingmissouri.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZVoAQfVgkZfUjUCkF0XaugAAABg"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2023-11-19 12:19:12 (2 years ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 65.21.157.72 (FI/Finland ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 65.21.157.72 (FI/Finland/static.72.157.21.65.clients.your-server.de) show less	Port Scan
🇧🇷 Maison da Silva	2023-11-18 14:57:09 (2 years ago)	Multiple WAF	DDoS Attack FTP Brute-Force Web Spam Port Scan Brute-Force Bad Web Bot Exploited Host Web App Attack
🇲🇾 Rizzy	2023-11-17 15:21:26 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2023-11-17 15:07:05 (2 years ago)	Probing for non-installed web apps or current vulnerabilities.	Hacking Web App Attack
🇺🇸 mnsf	2023-11-17 15:04:56 (2 years ago)	Too many Status 40X (51) Request Overload (124)	Brute-Force Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:303:31c0::1

🇨🇳 221.229.220.180

🇩🇪 213.209.159.41

🇺🇸 198.46.85.213

🇬🇧 188.240.59.43

🇲🇽 187.212.43.1

🇷🇴 92.55.145.43

🇫🇷 91.231.89.2

🇺🇸 66.132.186.182

🇺🇸 45.148.233.113

🇺🇸 40.77.167.58

🇧🇷 189.125.111.177

🇧🇷 187.9.247.58

🇨🇳 183.167.234.154

🇵🇰 156.238.86.2

🇮🇳 141.148.207.84

🇳🇬 102.88.137.80

🇺🇦 80.73.14.213

🇮🇷 5.200.224.88

🇷🇴 2.57.122.209