JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.21.113.248

65.21.113.248 was found in our database!

This IP was reported 441 times. Confidence of Abuse is 54%: ?

54%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	pot33.webmeup.com
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.21.113.248

Whois 65.21.113.248

IP Abuse Reports for 65.21.113.248:

This IP address has been reported a total of 441 times from 49 distinct sources. 65.21.113.248 was first reported on July 8th 2024, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-03 00:23:25 (14 hours ago)	[ThuSep0302:23:20.7769172026][security2:error][pid2150161:tid2150203][client65.21.113.248:0]ModSecur ... show more [ThuSep0302:23:20.7769172026][security2:error][pid2150161:tid2150203][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"api9-O8V1d4w_D-84tDHiQAAAEM\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-09-02 21:36:29 (17 hours ago)	apache vulnerability scan	Web App Attack
🇪🇸 masterguru	2026-09-02 17:40:30 (21 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000- ... show more BAD BOT - Detected and Blocked.. Matched phrase "awariobot" at REQUEST_HEADERS:User-Agent. (1100000-122) show less	Bad Web Bot
🇩🇪 4server	2026-09-02 09:04:27 (1 day ago)	[WedSep0211:04:21.4996222026][security2:error][pid1231193:tid1231316][client65.21.113.248:0]ModSecur ... show more [WedSep0211:04:21.4996222026][security2:error][pid1231193:tid1231316][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"apfmlSkEGJbWe_GpCAbkFQAAAQc\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-08-31 20:21:22 (2 days ago)	[MonAug3122:21:16.4853702026][security2:error][pid3171830:tid3171870][client65.21.113.248:0]ModSecur ... show more [MonAug3122:21:16.4853702026][security2:error][pid3171830:tid3171870][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"apXiPJmZQbDmbfJvm-4aHgAAAEM\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-08-31 07:53:10 (3 days ago)	apache vulnerability scan	Web App Attack
🇩🇪 4server	2026-08-30 16:00:29 (3 days ago)	[SunAug3018:00:26.3736132026][security2:error][pid1472188:tid1472281][client65.21.113.248:0]ModSecur ... show more [SunAug3018:00:26.3736132026][security2:error][pid1472188:tid1472281][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"apRTmkAh1tl8l2PSoP2LJQAAAMI\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-08-29 08:12:11 (5 days ago)	[SatAug2910:12:05.1600642026][security2:error][pid3824853:tid3824936][client65.21.113.248:0]ModSecur ... show more [SatAug2910:12:05.1600642026][security2:error][pid3824853:tid3824936][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"apKUVVXzq05EldWCKbdEIwAAAI0\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-08-28 18:10:45 (5 days ago)	[FriAug2820:10:38.9931072026][security2:error][pid2990238:tid2990264][client65.21.113.248:0]ModSecur ... show more [FriAug2820:10:38.9931072026][security2:error][pid2990238:tid2990264][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"apHPHilT9FtD--XqV2KvLgAAAA8\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-08-27 19:52:04 (6 days ago)	[ThuAug2721:52:00.7455422026][security2:error][pid1637343:tid1637462][client65.21.113.248:0]ModSecur ... show more [ThuAug2721:52:00.7455422026][security2:error][pid1637343:tid1637462][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"apCVYC_n1igUzUWTBLn0MgAAANE\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-08-26 23:25:32 (1 week ago)	[ThuAug2701:25:31.0009152026][security2:error][pid378457:tid378520][client65.21.113.248:0]ModSecurit ... show more [ThuAug2701:25:31.0009152026][security2:error][pid378457:tid378520][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"ao916jdjwGWY7vlYmzFoAQAAAII\"] show less	Port Scan Brute-Force Web App Attack
🇨🇦 dispensight	2026-08-26 12:00:00 (1 week ago)	SecureLeaf/Dispensight honeypot+origin telemetry 08-25/08-26 Aug2026 \| 3 recon req / 6 total; cats: ... show more SecureLeaf/Dispensight honeypot+origin telemetry 08-25/08-26 Aug2026 \| 3 recon req / 6 total; cats: 15=Hacking,19=Bad Web Bot,20=Exploited Host show less	Hacking Bad Web Bot Exploited Host
🇨🇦 dispensight	2026-08-25 12:00:00 (1 week ago)	SecureLeaf/Dispensight honeypot+origin telemetry 08-23/08-24/08-25 (Aug 2026) \| 6 recon-flagged requ ... show more SecureLeaf/Dispensight honeypot+origin telemetry 08-23/08-24/08-25 (Aug 2026) \| 6 recon-flagged requests over 12 total; cats: 15=Hacking,19=Bad Web Bot,20=Exploited Host show less	Hacking Bad Web Bot Exploited Host
🇩🇪 4server	2026-08-25 07:25:16 (1 week ago)	[TueAug2509:25:14.2513722026][security2:error][pid2179559:tid2179623][client65.21.113.248:0]ModSecur ... show more [TueAug2509:25:14.2513722026][security2:error][pid2179559:tid2179623][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"ao1DWqetLKz0Lmfi0BuZzAAAAIE\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-08-24 03:31:52 (1 week ago)	[MonAug2405:31:48.9580792026][security2:error][pid496460:tid496577][client65.21.113.248:0]ModSecurit ... show more [MonAug2405:31:48.9580792026][security2:error][pid496460:tid496577][client65.21.113.248:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch\"][uri\"/robots.txt\"][unique_id\"aou7JJD6SRYtEJH-K7OCgQAAANI\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 441 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 161.35.34.21

🇺🇸 144.172.103.124

🇨🇳 101.89.141.184

🇺🇸 64.62.156.64

🇬🇧 35.203.210.50

🇺🇸 34.48.175.15

🇺🇸 34.34.225.40

🇺🇸 20.172.67.160

🇫🇷 2620:171:eb:f0:9999::243

🇹🇭 182.52.183.192

🇨🇳 180.100.217.164

🇫🇷 173.249.52.138

🇯🇵 168.138.213.229

🇰🇪 154.159.238.94

🇺🇸 143.198.96.216

🇨🇳 106.32.134.56

🇹🇼 104.199.139.252

🇺🇸 64.62.156.62

🇺🇸 64.62.156.58

🇺🇸 64.62.156.56