AbuseIPDB » 66.249.73.197

66.249.73.197 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 0%: ?

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	crawl-66-249-73-197.googlebot.com
Domain Name	google.com
Country	United States of America
City	Tulsa, Oklahoma

Important Note: 66.249.73.197 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 66.249.73.197

Whois 66.249.73.197

IP Abuse Reports for 66.249.73.197:

This IP address has been reported a total of 17 times from 13 distinct sources. 66.249.73.197 was first reported on November 1st 2022, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Andrew	2024-12-02 01:06:13 (5 days ago)	Blocked by UFW (TCP on port 443). Source port: 38821 TTL: 122 Packet length: 60<br ... show moreBlocked by UFW (TCP on port 443). Source port: 38821 TTL: 122 Packet length: 60 TOS: 0x00 This report (for 66.249.73.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Andrew	2024-11-30 19:20:20 (1 week ago)	Blocked by UFW (TCP on port 443). Source port: 55180 TTL: 122 Packet length: 60<br ... show moreBlocked by UFW (TCP on port 443). Source port: 55180 TTL: 122 Packet length: 60 TOS: 0x00 This report (for 66.249.73.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Andrew	2024-11-29 14:46:27 (1 week ago)	Blocked by UFW (TCP on port 443). Source port: 41918 TTL: 122 Packet length: 60<br ... show moreBlocked by UFW (TCP on port 443). Source port: 41918 TTL: 122 Packet length: 60 TOS: 0x00 This report (for 66.249.73.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
roki.ovh	2024-11-22 07:32:32 (2 weeks ago)	66.249.73.197 - - [22/Nov/2024:08:32:29 +0100] "GET /robots.txt HTTP/1.1" 404 492 "-" "Mozilla/5.0 ( ... show more66.249.73.197 - - [22/Nov/2024:08:32:29 +0100] "GET /robots.txt HTTP/1.1" 404 492 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Bad Web Bot
TPI-Abuse	2024-11-09 07:39:29 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 66.249.73.197 (crawl-66-249-73-197.googlebot.co ... show more(mod_security) mod_security (id:210730) triggered by 66.249.73.197 (crawl-66-249-73-197.googlebot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 09 02:39:23.588774 2024] [security2:error] [pid 12881:tid 12881] [client 66.249.73.197:40889] [client 66.249.73.197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.doctorc.net\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.doctorc.net"] [uri "/Labs/Lab15/IMAGES/FINDER.DAT"] [unique_id "Zy8RqxgoZahZcanfJ_ZGjgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
kk_it_man	2024-11-05 04:50:04 (1 month ago)		Port Scan
MSZ	2024-10-19 07:00:09 (1 month ago)	Blocked by Fail2Ban (recidive)	Brute-Force
MSZ	2024-10-12 04:00:09 (1 month ago)	Blocked by Fail2Ban (plesk-modsecurity)	Hacking Brute-Force Web App Attack
Anonymous	2024-10-02 10:00:08 (2 months ago)	$f2bV_matches	Web App Attack
TPI-Abuse	2024-08-06 22:32:28 (4 months ago)	(mod_security) mod_security (id:210730) triggered by 66.249.73.197 (crawl-66-249-73-197.googlebot.co ... show more(mod_security) mod_security (id:210730) triggered by 66.249.73.197 (crawl-66-249-73-197.googlebot.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 06 18:32:21.516870 2024] [security2:error] [pid 2065565:tid 2065565] [client 66.249.73.197:61646] [client 66.249.73.197] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.garyandthegroove.com\|F\|2"] [data ".barebonesgrill.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.garyandthegroove.com"] [uri "/www.barebonesgrill.com"] [unique_id "ZrKkdSyBY7lvMWo8peUlzwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
dpinse	2024-08-03 05:31:38 (4 months ago)	teler detected Bad Crawler against resource /theme_head.4cb181fc19f2a308ba73.js from 66.249.73.197	Bad Web Bot
Anonymous	2023-12-18 05:26:00 (11 months ago)	"ASM Cookie Hijacking"	Brute-Force
Wizzeh	2023-11-18 15:27:48 (1 year ago)	WebApp Probe attempt (/pwr-poppge.php?t=\|NLD\|be-pangolincomics\|100\|100-a\|pop\|105_021\|105_021)	Hacking Bad Web Bot Web App Attack
penjaga BRIN	2023-10-01 03:01:22 (1 year ago)	Common web attack.-111	Brute-Force
IrisFlower	2023-04-16 23:09:50 (1 year ago)	Unauthorized connection attempt detected from IP address 66.249.73.197 to port 443 [J]	Port Scan Hacking