JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.99.172.73

167.99.172.73 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 24%: ?

24%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	prod-meitnerium-us-sfo2-187.do.binaryedge.ninja
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.99.172.73

Whois 167.99.172.73

IP Abuse Reports for 167.99.172.73:

This IP address has been reported a total of 6 times from 4 distinct sources. 167.99.172.73 was first reported on May 21st 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-25 15:48:54 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 167.99.172.73 (prod-meitnerium-us-sfo2-187.do.b ... show more (mod_security) mod_security (id:210492) triggered by 167.99.172.73 (prod-meitnerium-us-sfo2-187.do.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 11:48:49.779173 2026] [security2:error] [pid 21448:tid 21448] [client 167.99.172.73:57048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.209"] [uri "/sftp-config.json"] [unique_id "aj1N4exDF0qvvKN844xLAQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-15 23:35:26 (1 week ago)	[16/Jun/2026:09:35:25 +1000] "GET /Remote HTTP/1.1" 301 287 "Mozilla/5.0 (Macintosh; Intel Mac OS X ... show more [16/Jun/2026:09:35:25 +1000] "GET /Remote HTTP/1.1" 301 287 "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" show less	Hacking Web App Attack
🇺🇸 xmission.com	2026-06-08 08:05:11 (2 weeks ago)	Blocked by UFW (TCP on 18483) Source port: 44864 TTL: 245 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 18483) Source port: 44864 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 167.99.172.73) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-08 07:48:39 (2 weeks ago)	Blocked by UFW (TCP on 26853) Source port: 44880 TTL: 245 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 26853) Source port: 44880 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 167.99.172.73) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 nyt	2026-05-27 21:37:26 (4 weeks ago)	Auth Page Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-05-21 02:31:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 167.99.172.73 (prod-meitnerium-us-sfo2-187.do.b ... show more (mod_security) mod_security (id:210492) triggered by 167.99.172.73 (prod-meitnerium-us-sfo2-187.do.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 22:30:56.305364 2026] [security2:error] [pid 15759:tid 15759] [client 167.99.172.73:38106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rblep.com"] [uri "/sftp-config.json"] [unique_id "ag5uYMA1BWMH2b_JPb825AAAAE8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.226

🇬🇷 2a02:587:4986:5b00:710e:117f:702e:9c00

🇺🇸 216.25.89.118

🇸🇪 213.66.197.199

🇩🇪 167.94.146.63

🇮🇳 103.234.243.78

🇨🇳 101.96.220.237

🇺🇸 64.62.156.182

🇺🇸 20.98.166.209

🇷🇴 2.57.121.25

🇨🇳 221.228.203.3

🇭🇰 152.32.216.70

🇺🇸 147.185.132.219

🇺🇸 109.105.209.5

🇫🇷 91.231.89.223

🇫🇷 91.231.89.219

🇧🇾 81.30.98.142

🇺🇸 66.132.186.210

🇺🇸 66.132.172.152

🇺🇸 20.46.226.34