JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

65.21.199.133

Activity Trending Down

Abuse Confidence Score

24% Elevated

164 reports

44 reporters · latest 1 week ago

ISP: Hetzner Online GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS24940
Hostname(s): crawl1-183.oi.tb.007ac9.net
Domain Name: hetzner.com
Country: 🇫🇮 Finland
City: Helsinki, Uusimaa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

164 from 44 distinct reporters

First reported

April 24th 2022

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 2 🇨🇿 Czechia 1

Most common categories Bad Web Bot 6 Web App Attack 4 Brute-Force 4 Hacking 1 Web Spam 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SCHAPPY	2026-10-31 03:19:03 UTC · (1 week ago)	Bad bot identified by user agent	Bad Web Bot
Anonymous	2026-10-19 06:28:57 UTC · (2 weeks ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-15 13:18:39 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 65.21.199.133 (crawl1-183.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:18:32.030725 2026] [security2:error] [pid 2444:tid 2444] [clien ... show more (mod_security) mod_security (id:210730) triggered by 65.21.199.133 (crawl1-183.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:18:32.030725 2026] [security2:error] [pid 2444:tid 2444] [client 65.21.199.133:47248] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.lloydprins.com\|F\|2"] [data ".nealcitron.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lloydprins.com"] [uri "/www.nealcitron.com"] [unique_id "atDSqOXX5XNlRSzqG3oG4AAAAAI"], referer: http://www.lloydprins.com/n_citron.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-13 05:18:08 UTC · (3 weeks ago)	(mod_security) mod_security (id:210730) triggered by 65.21.199.133 (crawl1-183.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:18:03.534170 2026] [security2:error] [pid 3959:tid 3959] [clien ... show more (mod_security) mod_security (id:210730) triggered by 65.21.199.133 (crawl1-183.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 01:18:03.534170 2026] [security2:error] [pid 3959:tid 3959] [client 65.21.199.133:51764] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.bigchus.com\|F\|2"] [data ".wordpress.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bigchus.com"] [uri "/caleidoscopia/amescua.wordpress.com"] [unique_id "as2_C6TInthRAF53LjPoxgAAAAg"], referer: http://www.bigchus.com/caleidoscopia/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-10-09 07:56:10 UTC · (4 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.21.199.133 (FI/Finland/Uusimaa/Helsinki/crawl1-183.oi.tb.007ac9.net)	Bad Web Bot
🇩🇪 grassau.com	2026-09-24 14:14:08 UTC · (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.21.199.133 (FI/Finland/Uusimaa/Helsinki/crawl1-183.oi.tb.007ac9.net)	Bad Web Bot
🇩🇪 grassau.com	2026-09-22 12:42:14 UTC · (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.21.199.133 (FI/Finland/Uusimaa/Helsinki/crawl1-183.oi.tb.007ac9.net)	Bad Web Bot
Anonymous	2026-09-14 10:03:26 UTC · (1 month ago)	65.21.199.133 - - [14/Sep/2026:12:02:09 +0200] "GET /robots.txt HTTP/1.1" 403 5501 "-" "Mozilla/5.0 (compatible; SeekportBot; +https://bot.seekport.com)"	Web Spam Blog Spam Brute-Force Web App Attack
🇩🇪 grassau.com	2026-09-08 07:59:03 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.21.199.133 (FI/Finland/Uusimaa/Helsinki/crawl1-183.oi.tb.007ac9.net)	Bad Web Bot
🇩🇪 mwgbr	2026-09-08 06:28:42 UTC · (2 months ago)	65.21.199.133 (FI/Finland/crawl1-183.oi.tb.007ac9.net), more than 60 Apache 403 hits	Hacking
🇩🇪 grassau.com	2026-09-01 14:43:58 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.21.199.133 (FI/Finland/Uusimaa/Helsinki/crawl1-183.oi.tb.007ac9.net)	Bad Web Bot
🇳🇱 Roderic	2026-08-28 05:51:27 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇩🇪 grassau.com	2026-08-19 11:17:30 UTC · (2 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.21.199.133 (FI/Finland/Uusimaa/Helsinki/crawl1-183.oi.tb.007ac9.net)	Bad Web Bot
🇧🇪 cmbplf	2026-08-11 06:01:34 UTC · (2 months ago)	7.291 requests in 1 hour (6d15h59m)	Brute-Force Bad Web Bot
🇮🇹 Progetto1	2026-08-03 13:40:02 UTC · (3 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇪 200.106.124.68

🇺🇸 185.191.171.3

🇺🇸 151.240.47.40

🇫🇮 144.31.185.241

🇨🇳 124.74.97.18

🇮🇩 103.158.121.21

🇪🇨 45.229.16.153

🇵🇱 2400:cb00:923:1000:a9d3:bf1d:4749:55fd

🇰🇷 211.251.245.88

🇺🇸 207.49.220.47

🇲🇽 187.190.206.92

🇩🇪 185.220.100.244

🇺🇸 178.128.150.50

🇿🇦 165.16.186.24

🇺🇸 162.216.149.10

🇨🇳 123.121.109.57

🇧🇩 122.99.101.155

🇧🇩 103.147.230.238

🇧🇬 79.124.56.254

🇺🇸 68.225.58.251