JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.108.99.173

65.108.99.173 was found in our database!

This IP was reported 160 times. Confidence of Abuse is 31%: ?

31%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	crawl1-144.oi.tb.007ac9.net
Domain Name	hetzner.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.108.99.173

Whois 65.108.99.173

IP Abuse Reports for 65.108.99.173:

This IP address has been reported a total of 160 times from 44 distinct sources. 65.108.99.173 was first reported on April 25th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-20 05:59:30 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 65.108.99.173 (crawl1-144.oi.tb.007ac9.net): 1 ... show more (mod_security) mod_security (id:210730) triggered by 65.108.99.173 (crawl1-144.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 01:59:25.831301 2026] [security2:error] [pid 3779:tid 3779] [client 65.108.99.173:44786] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|borzoi-pedigree.info\|F\|2"] [data ".webped.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "borzoi-pedigree.info"] [uri "/www.webped.com"] [unique_id "aoaXvY9cuMWlFDuzHMVLIAAAAAI"], referer: http://borzoi-pedigree.info/Borzoimain.html show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-18 19:00:06 (4 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 SCHAPPY	2026-08-17 21:36:02 (5 days ago)	Bad bot identified by user agent	Bad Web Bot
🇩🇪 grassau.com	2026-08-03 07:31:43 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.108.99.173 (FI/Fi ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 65.108.99.173 (FI/Finland/Uusimaa/Helsinki/crawl1-144.oi.tb.007ac9.net) show less	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-07-13 19:59:00 (1 month ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇧🇪 cmbplf	2026-06-09 19:06:04 (2 months ago)	18.982 requests in 1 hour (3d2h59m)	Brute-Force Bad Web Bot
🇧🇪 cmbplf	2026-05-25 09:05:47 (2 months ago)	35.292 requests in 1 hour (3d12h59m)	Brute-Force Bad Web Bot
🇩🇪 BlueWire Hosting	2026-05-14 06:00:23 (3 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 BlueWire Hosting	2026-04-25 21:17:00 (3 months ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇩🇪 SCHAPPY	2026-04-15 10:50:14 (4 months ago)	Bad bot identified by user agent	Bad Web Bot
🇧🇪 cmbplf	2026-04-07 14:03:35 (4 months ago)	16.427 requests in 1 hour (6d10h59m)	Brute-Force Bad Web Bot
🇸🇮 extremevital	2026-04-04 04:00:06 (4 months ago)	65.108.99.173 [04/Apr/2026:06:00:02 +0200] LOCAL: "GET /en/ski/ski-pants-picture-naikoon-p-33941.htm ... show more 65.108.99.173 [04/Apr/2026:06:00:02 +0200] LOCAL: "GET /en/ski/ski-pants-picture-naikoon-p-33941.html HTTP/1.1" 302 12 0.165 "Mozilla/5.0 (compatible; SeekportBot; +https://bot.seekport.com)" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-03-23 16:43:33 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 65.108.99.173 (crawl1-144.oi.tb.007ac9.net): 1 ... show more (mod_security) mod_security (id:210730) triggered by 65.108.99.173 (crawl1-144.oi.tb.007ac9.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 12:43:29.304772 2026] [security2:error] [pid 12919:tid 12919] [client 65.108.99.173:37100] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nlc-calumet.org\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nlc-calumet.org"] [uri "/SON/pics/Thumbs.db"] [unique_id "acFtsfbxoAo4zL1Ygpy0MQAAAAA"], referer: http://www.nlc-calumet.org/SON/pics/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-03-11 10:23:47 (5 months ago)	HTTP vulnerability scanning	Web App Attack
🇧🇪 cmbplf	2026-03-10 13:08:04 (5 months ago)	23.083 requests in 1 hour (4d13h59m)	Brute-Force Bad Web Bot

Showing 1 to 15 of 160 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 184.174.37.90

🇵🇭 165.154.59.118

🇺🇸 162.214.101.10

🇷🇺 147.45.211.139

🇵🇰 111.92.157.208

🇺🇸 104.152.52.110

🇺🇸 65.49.1.129

🇿🇦 41.0.95.7

🇰🇷 221.161.235.168

🇺🇦 176.104.7.98

🇺🇸 104.152.52.109

🇺🇸 104.152.52.108

🇺🇸 84.37.241.68

🇬🇧 45.145.138.204

🇺🇸 23.26.84.20

🇨🇳 223.66.197.210

🇯🇵 205.234.228.34

🇧🇷 205.210.31.207

🇹🇼 198.235.24.113

🇹🇼 198.235.24.35