JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

65.21.196.149

Neutral Activity

Abuse confidence score ?

0% Low Risk

56 reports

23 reporters · latest 3 years ago

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.149.196.21.65.clients.your-server.de
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

65.21.196.149 has been reported 56 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 65.21.196.149

Export CSV

This IP address has been reported a total of 56 times from 23 distinct sources. 65.21.196.149 was first reported on January 7th 2023, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 security.yc3a.com	2023-02-12 05:29:59 (3 years ago)	65.21.196.149 - - [12/Feb/2023:05:29:58 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String. ... show more 65.21.196.149 - - [12/Feb/2023:05:29:58 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String.fromCharCode(88,83,83))</script> HTTP/1.1" 200 30494 "https://proteushop.com/es/?controllerUri=\x22><script >alert(String.fromCharCode(88,83,83))</script>" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" show less	Brute-Force Web App Attack
🇬🇧 Steve	2023-02-11 20:52:21 (3 years ago)	Too many 4xx responses in a short time	Brute-Force
🇳🇱 Savvii	2023-02-11 20:50:02 (3 years ago)	10 attempts against mh-misc-ban on cedar	Web App Attack
🇺🇦 URAN Publishing Service	2023-02-11 20:47:51 (3 years ago)	65.21.196.149 - - [11/Feb/2023:22:47:49 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 196 " ... show more 65.21.196.149 - - [11/Feb/2023:22:47:49 +0200] "GET /wp-includes/ID3/license.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 65.21.196.149 - - [11/Feb/2023:22:47:50 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" ... show less	Web App Attack
🇪🇸 10dencehispahard SL	2023-02-11 18:25:32 (3 years ago)	Suspicious activity detected by Modsecurity [Suspicious IP found on 7 servers 12 times. Reincident b ... show more Suspicious activity detected by Modsecurity [Suspicious IP found on 7 servers 12 times. Reincident by 5. Rules:] show less	Hacking Web App Attack
🇳🇱 WebNiraj	2023-02-11 17:43:50 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 65.21.196.149 (US/United States/static.149.196. ... show more (mod_security) mod_security (id:949110) triggered by 65.21.196.149 (US/United States/static.149.196.21.65.clients.your-server.de): 5 in the last 3600 secs show less	Brute-Force
🇳🇱 security.yc3a.com	2023-02-06 19:49:12 (3 years ago)	65.21.196.149 - - [06/Feb/2023:19:49:11 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String. ... show more 65.21.196.149 - - [06/Feb/2023:19:49:11 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String.fromCharCode(88,83,83))</script> HTTP/1.1" 200 31366 "https://proteushop.com/es/?controllerUri=\x22><script >alert(String.fromCharCode(88,83,83))</script>" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" show less	Brute-Force Web App Attack
🇧🇷 AC - Team	2023-01-30 19:09:05 (3 years ago)	65.21.196.149 - - [30/Jan/2023:16:09:20 -0300] "GET /catalogo.php?cod=/etc/passwd&categoria=cosmetic ... show more 65.21.196.149 - - [30/Jan/2023:16:09:20 -0300] "GET /catalogo.php?cod=/etc/passwd&categoria=cosmeticos HTTP/1.1" 200 3729 "http://www.beautbio.com/catalogo.php?cod=/etc/passwd&categoria=cosmeticos" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... show less	Hacking Web App Attack
🇳🇱 Savvii	2023-01-29 23:01:49 (3 years ago)	20 attempts against mh-misbehave-ban on cedar	Brute-Force Bad Web Bot Web App Attack
🇨🇭 chr70	2023-01-29 10:07:11 (3 years ago)	Scanning for vulnerabilities	Web App Attack
🇫🇷 bigorre.org	2023-01-29 01:55:55 (3 years ago)	suspicious query, XSS attemp log:/aero/aeroports_extremes.php?recherche="><script%20>alert(String.fr ... show more suspicious query, XSS attemp log:/aero/aeroports_extremes.php?recherche="><script%20>alert(String.fromCharCode(88,83,83))</script>&lang=es show less	SQL Injection
🇳🇱 security.yc3a.com	2023-01-29 00:35:19 (3 years ago)	65.21.196.149 - - [29/Jan/2023:00:35:18 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String. ... show more 65.21.196.149 - - [29/Jan/2023:00:35:18 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String.fromCharCode(88,83,83))</script> HTTP/1.1" 200 31365 "https://proteushop.com/es/?controllerUri=\x22><script >alert(String.fromCharCode(88,83,83))</script>" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" show less	Brute-Force Web App Attack
🇳🇱 security.yc3a.com	2023-01-28 09:48:15 (3 years ago)	65.21.196.149 - - [28/Jan/2023:09:48:15 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String. ... show more 65.21.196.149 - - [28/Jan/2023:09:48:15 +0000] "GET /es/?controllerUri=\x22><script%20>alert(String.fromCharCode(88,83,83))</script> HTTP/1.1" 200 32491 "https://proteushop.com/es/?controllerUri=\x22><script >alert(String.fromCharCode(88,83,83))</script>" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" show less	Brute-Force Web App Attack
🇧🇷 AC - Team	2023-01-28 04:05:18 (3 years ago)	65.21.196.149 - - [28/Jan/2023:01:05:30 -0300] "GET /catalogo.php?cod=/etc/passwd&categoria=cosmetic ... show more 65.21.196.149 - - [28/Jan/2023:01:05:30 -0300] "GET /catalogo.php?cod=/etc/passwd&categoria=cosmeticos HTTP/1.1" 200 3729 "http://www.beautbio.com/catalogo.php?cod=/etc/passwd&categoria=cosmeticos" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... show less	Hacking Web App Attack
🇳🇱 security.yc3a.com	2023-01-28 03:17:14 (3 years ago)	65.21.196.149 - - [28/Jan/2023:03:17:14 +0000] "GET /en/?controllerUri=\x22><script%20>alert(String. ... show more 65.21.196.149 - - [28/Jan/2023:03:17:14 +0000] "GET /en/?controllerUri=\x22><script%20>alert(String.fromCharCode(88,83,83))</script> HTTP/1.1" 200 31612 "https://proteushop.com/en/?controllerUri=\x22><script >alert(String.fromCharCode(88,83,83))</script>" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" show less	Brute-Force Web App Attack

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.42

🇪🇸 194.156.155.240

🇨🇴 186.159.16.2

🇸🇬 172.71.82.120

🇬🇧 77.67.26.66

🇨🇳 61.171.94.96

🇫🇷 2001:41d0:303:5883::1

🇨🇳 220.197.85.96

🇨🇳 218.81.131.111

🇺🇦 185.115.37.59

🇨🇳 119.249.100.179

🇬🇧 77.67.26.185

🇺🇸 73.65.156.211

🇺🇸 70.184.75.32

🇫🇷 51.75.27.218

🇰🇷 221.162.3.55

🇺🇦 195.211.255.178

🇬🇧 195.96.139.13

🇷🇺 188.134.69.129

🇲🇽 187.190.229.112