JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.73.170.42

165.73.170.42 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 39%: ?

39%

ISP	HERO TELECOMS (PTY) LTD
Usage Type	Fixed Line ISP
ASN	AS328471
Domain Name	herotel.com
Country	🇿🇦 South Africa
City	Pretoria, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.73.170.42

Whois 165.73.170.42

IP Abuse Reports for 165.73.170.42:

This IP address has been reported a total of 9 times from 7 distinct sources. 165.73.170.42 was first reported on June 29th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Tsumugi Kotobuki	2026-10-23 07:36:02 (2 hours ago)	Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Events: 1 \| F2B/ssh-honeypot-scan@2026-10-23 ... show more Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Events: 1 \| F2B/ssh-honeypot-scan@2026-10-23T07:36:02Z show less	Port Scan Hacking
🇩🇪 LRob	2026-10-22 18:07:36 (16 hours ago)	WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; W ... show more WordPress attack-tool calls \| method: POST \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 show less	Web App Attack Hacking
Anonymous	2026-10-22 02:01:39 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇺🇸 RAP	2026-10-21 22:24:47 (1 day ago)	2026-10-21 22:24:47 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 TPI-Abuse	2026-10-09 17:28:04 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 165.73.170.42 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 165.73.170.42 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 13:27:51.146036 2026] [security2:error] [pid 24364:tid 24364] [client 165.73.170.42:47260] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|herrell.net.utilis.net\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "herrell.net.utilis.net"] [uri "/web/site.db"] [unique_id "askkF-W50WSiBIDcqKczKAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-08-30 04:05:44 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-22 22:07:28 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-02 16:34:19 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-06-29 09:12:12 (3 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.190.35.163

🇳🇱 91.108.9.249

🇹🇷 78.135.111.65

🇩🇪 185.204.171.55

🇮🇳 185.100.212.141

🇲🇩 176.123.5.6

🇳🇬 165.154.11.37

🇺🇸 162.216.149.230

🇩🇪 104.248.132.98

🇮🇳 103.189.89.196

🇧🇩 103.159.2.113

🇫🇷 91.196.152.127

🇳🇱 77.239.124.66

🇳🇱 45.142.193.169

🇺🇸 43.135.133.30

🇧🇷 35.199.125.49

🇶🇦 34.18.110.93

🇦🇷 186.158.183.66

🇨🇴 186.29.228.105

🇧🇷 179.184.218.49