JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.73.180.3

165.73.180.3 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 56%: ?

56%

ISP	HERO TELECOMS (PTY) LTD
Usage Type	Fixed Line ISP
ASN	AS328471
Domain Name	herotel.com
Country	🇿🇦 South Africa
City	Benoni, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.73.180.3

Whois 165.73.180.3

IP Abuse Reports for 165.73.180.3:

This IP address has been reported a total of 24 times from 18 distinct sources. 165.73.180.3 was first reported on April 4th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-15 00:28:40 (2 days ago)	Calendar filter flood (L7 DDoS) \| host: escrime-auvergnerhonealpes.fr \| path: http://escrime-auvergn ... show more Calendar filter flood (L7 DDoS) \| host: escrime-auvergnerhonealpes.fr \| path: http://escrime-auvergnerhonealpes.fr/calendrier-2/action~agenda/tag_ids~653,230,717,579,638,445/request_format~json/cat_ids~124/ \| src_port: 28879 show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 04:43:40 (5 days ago)	(mod_security) mod_security (id:210350) triggered by 165.73.180.3 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 165.73.180.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 00:43:36.911963 2026] [security2:error] [pid 16087:tid 16087] [client 165.73.180.3:25195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|securityzonepr.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "securityzonepr.com"] [uri "/"] [unique_id "asxlePUB2ia2dSuKjN0B3wAAABA"], referer: https://addurl.in/redirect.php?ref_host=evolus-dev.com show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 security.rdmc.fr	2026-10-09 04:20:20 (1 week ago)	Port Scan Attack proto:TCP src:13564 dst:23	Port Scan
🇺🇸 xmission.com	2026-10-09 02:03:20 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 6772 TTL: 46 Packet length: 60 TOS: 0x00 This report (for 1 ... show more Blocked by UFW (TCP on 23) Source port: 6772 TTL: 46 Packet length: 60 TOS: 0x00 This report (for 165.73.180.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇷🇸 Scan	2026-10-09 00:35:51 (1 week ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-10-08 05:13:24 (1 week ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇺🇸 copyyy	2026-10-08 05:06:48 (1 week ago)	sshd[191984]: Connection attempt from 165.73.180.3 port 52725 ssh2; SSH honeypot on TCP/22.	Brute-Force SSH
Anonymous	2026-10-08 02:25:25 (1 week ago)	1791426325 - 10/08/2026 04:25:25 Host: 165.73.180.3/165.73.180.3 Port: 23 TCP Blocked ...	Port Scan
🇺🇸 鬼影233	2026-09-22 08:56:43 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-22 07:42:23 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 10:54:35 (3 weeks ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 VHosting	2026-08-31 18:15:04 (1 month ago)	Detected mail brute force attack from different servers	Brute-Force
🇦🇹 AustrianSimon	2026-08-31 07:19:47 (1 month ago)	31 Aug 2026 07:19:47UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 31 Aug 2026 07:19:47UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 165.73.180.3 show less	Brute-Force
🇺🇸 kosada.com	2026-08-25 02:29:08 (1 month ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 mailox	2026-08-18 17:45:08 (1 month ago)	Unauthorized SSH connection on tarpit ...	SSH

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.186.13.130

🇬🇧 217.146.80.117

🇧🇷 205.210.31.246

🇳🇱 195.178.110.26

🇧🇷 187.103.219.79

🇹🇼 110.25.101.75

🇯🇵 107.155.15.218

🇺🇸 66.249.84.38

🇲🇻 43.231.28.132

🇩🇿 41.101.241.212

🇨🇳 36.159.157.203

🇬🇧 35.203.210.18

🇧🇪 23.251.128.237

🇭🇰 219.79.4.2

🇺🇸 216.25.89.70

🇧🇪 198.235.24.170

🇨🇦 195.63.16.234

🇵🇾 181.91.85.125

🇦🇹 152.53.46.2

🇮🇳 103.212.121.163