This IP address has been reported a total of
373
times from
49 distinct
sources.
65.21.113.243 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[ThuSep0316:16:38.6039552026][security2:error][pid3008260:tid3008388][client65.21.113.243:0]ModSecur ...
show more[ThuSep0316:16:38.6039552026][security2:error][pid3008260:tid3008388][client65.21.113.243:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rvengineering.ch\"][uri\"/robots.txt\"][unique_id\"apmBRtDdNl_DEsBFXQkzowAAAM8\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
IP matched detection query 20 more in short time bad rqs.
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5 ...
show moreAbusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html) | path: /robots.txt (+1 more) | 2026-08-30 03:53 UTC
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5 ...
show moreAbusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html) | path: /robots.txt (+1 more) | 2026-08-26 12:55 UTC
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
[TueAug2507:55:06.8777442026][security2:error][pid2082378:tid2082475][client65.21.113.243:0]ModSecur ...
show more[TueAug2507:55:06.8777442026][security2:error][pid2082378:tid2082475][client65.21.113.243:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"beyondsecurity.ch\"][uri\"/robots.txt\"][unique_id\"ao0uOl8K6DJGCOGjG8lHXQAAAQI\"]
show less
Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5 ...
show moreAbusive crawler: User-Agent on the known-bad list or claiming a placeholder identity | ua: Mozilla/5.0 (compatible; AwarioBot/1.0; +https://awario.com/bots.html) | path: /robots.txt | 2026-08-24 09:10 UTC
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this ad ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 65.21.113.243: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Showing 1 to
15
of 373 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩