JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.108.103.114

65.108.103.114 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 26%: ?

26%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	crawl1-015.oi.tb.007ac9.net
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.108.103.114

Whois 65.108.103.114

IP Abuse Reports for 65.108.103.114:

This IP address has been reported a total of 143 times from 37 distinct sources. 65.108.103.114 was first reported on April 27th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-07-16 08:13:28 (2 days ago)	12.346 requests in 1 hour (4d23h59m)	Brute-Force Bad Web Bot
🇩🇪 grassau.com	2026-07-07 17:52:03 (1 week ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.108.103.114 (FI/F ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.108.103.114 (FI/Finland/Uusimaa/Helsinki/crawl1-015.oi.tb.007ac9.net) show less	Bad Web Bot
🇩🇪 mwgbr	2026-07-06 05:52:51 (1 week ago)	65.108.103.114 (FI/Finland/crawl1-015.oi.tb.007ac9.net), more than 10 Apache 403 hits	Hacking
🇧🇪 cmbplf	2026-06-22 21:05:18 (3 weeks ago)	41.184 requests in 1 hour (4d3h59m)	Brute-Force Bad Web Bot
🇺🇸 ipblock.com	2026-06-10 08:06:00 (1 month ago)	IPBlock protected site ID [4055-d][s=07]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇩🇪 Carsten	2026-06-01 23:52:27 (1 month ago)	Bad web bot [Mozilla/5.0 (compatible; SeekportBot; +https://bot.seekport.com)]	Bad Web Bot
🇧🇪 cmbplf	2026-05-29 19:00:29 (1 month ago)	9.607 requests in 1 hour (4d8h59m)	Brute-Force Bad Web Bot
🇧🇪 cmbplf	2026-05-16 17:02:49 (2 months ago)	62.760 requests in 1 hour (5d4h59m)	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-11 09:52:12 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 65.108.103.114 (crawl1-015.oi.tb.007ac9.net): 1 ... show more (mod_security) mod_security (id:210730) triggered by 65.108.103.114 (crawl1-015.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 05:52:04.769039 2026] [security2:error] [pid 31418:tid 31418] [client 65.108.103.114:58418] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.genesis-castle.com\|F\|2"] [data ".ini.ea3.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.genesis-castle.com"] [uri "/php.ini.ea3.bak"] [unique_id "agGmxG65S1gvCS4KRlwXwgAAAB4"], referer: http://www.genesis-castle.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-05-04 14:40:00 (2 months ago)	IPBlock protected site ID [4055-d][s=01]. Persistent 404, vulnerability scanner	Hacking Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-04-12 14:34:15 (3 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇧🇪 cmbplf	2026-04-09 08:58:51 (3 months ago)	39.146 requests in 1 hour (6d5h59m)	Brute-Force Bad Web Bot
🇩🇪 BlueWire Hosting	2026-04-03 15:47:31 (3 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇳🇱 Roderic	2026-03-21 08:42:12 (3 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted])	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-21 00:50:34 (3 months ago)	(mod_security) mod_security (id:210730) triggered by 65.108.103.114 (crawl1-015.oi.tb.007ac9.net): 1 ... show more (mod_security) mod_security (id:210730) triggered by 65.108.103.114 (crawl1-015.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 20 20:50:27.589428 2026] [security2:error] [pid 22750:tid 22750] [client 65.108.103.114:60964] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.lloydprins.com\|F\|2"] [data ".nealcitron.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lloydprins.com"] [uri "/www.nealcitron.com"] [unique_id "ab3rUz9acZFzq0qpk_OzvQAAABg"], referer: http://www.lloydprins.com/n_citron.html show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 143 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.96.139.214

🇧🇴 190.129.122.12

🇻🇳 157.66.26.151

🇺🇸 147.185.132.32

🇰🇷 121.131.220.154

🇨🇳 111.17.213.162

🇺🇸 109.105.210.74

🇷🇴 92.118.39.78

🇧🇬 91.92.47.120

🇬🇧 87.236.176.203

🇫🇷 85.217.140.41

🇧🇬 78.128.112.6

🇩🇪 77.36.38.237

🇺🇸 66.132.172.108

🇩🇪 64.89.163.133

🇱🇹 62.60.130.219

🇵🇭 49.147.192.69

🇬🇧 35.203.211.20

🇬🇧 35.203.210.151

🇷🇴 2.57.121.112