JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 83.99.206.152

83.99.206.152 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 25%: ?

25%

ISP	JSC BALTICOM
Usage Type	Fixed Line ISP
ASN	AS24651
Hostname(s)	product-search-83-99-206-152.geedo.com
Domain Name	balticom.info
Country	🇱🇻 Latvia
City	Riga, Riga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 83.99.206.152

Whois 83.99.206.152

IP Abuse Reports for 83.99.206.152:

This IP address has been reported a total of 42 times from 9 distinct sources. 83.99.206.152 was first reported on December 30th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 nodepile	2026-06-12 02:31:14 (1 hour ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-07 06:36:33 (4 days ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-06-05 00:47:51 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-30 06:17:30 (1 week ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/productalert/add/price/prod ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/productalert/add/price/product_id/6494/uenc/aHR0cHM6Ly91bW5pdHphLmNvbS96a3cteGVub24tZm9yLWJtdy1mMzAtMzE4LTMyMC0zMjUtMzI4LTMzMC0zMzUtaGVhZGxpZ2h0LW9lbS1vZS1hZnMuaHRtbA~~/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-26 07:18:15 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-23 20:43:50 (2 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/productalert/add/price/prod ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/productalert/add/price/product_id/7976/uenc/aHR0cHM6Ly91bW5pdHphLmNvbS9icm93c2UtYnktY2FyLW1vZGVsL2FsZmEtcm9tZW8vMTUtMTgtYWxmYS1yb21lby00Yy1yZWFyLWJ1bXBlci1yZWZsZWN0b3Itc2lkZS1tYXJrZXItbGlnaHRzLXJlZC5odG1s/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 SYSMarshal	2026-05-22 14:04:47 (2 weeks ago)	SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port: ... show more SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152] show less	Port Scan Web App Attack Bad Web Bot
🇺🇸 nodepile	2026-05-19 18:41:37 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-17 16:54:29 (3 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-05-15 00:17:44 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 83.99.206.152 (product-search-83-99-206-152.gee ... show more (mod_security) mod_security (id:210730) triggered by 83.99.206.152 (product-search-83-99-206-152.geedo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 20:17:37.656042 2026] [security2:error] [pid 11684:tid 11807] [client 83.99.206.152:32619] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|aafm.org\|F\|2"] [data ".gafm.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.org"] [uri "/www.GAFM.com"] [unique_id "agZmIRhVjHK9-dCV78X0hwAAAkM"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 Anytech	2026-05-13 23:56:49 (4 weeks ago)	Blocked by Conn-Monitor: Automated bot activity	Web App Attack
🇺🇸 nodepile	2026-05-12 22:16:13 (4 weeks ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-05-06 23:35:21 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/exterior-tail-turn-side-lig ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/exterior-tail-turn-side-lights/audi-exterior-lighting/1996-1998-audi-a4-s4-b5-97-99-a8-d2-depo-clear-or-smoke-fender-side-marker-light.html ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 nodepile	2026-04-28 18:12:31 (1 month ago)	Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua= ... show more Requests denied due to active blacklist hits (tenant=82 method=GET path=/customer/account/login/ ua='Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36') show less	Web App Attack Exploited Host
🇺🇸 TPI-Abuse	2026-04-28 13:17:49 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 83.99.206.152 (product-search-83-99-206-152.gee ... show more (mod_security) mod_security (id:210730) triggered by 83.99.206.152 (product-search-83-99-206-152.geedo.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Apr 28 09:17:43.239356 2026] [security2:error] [pid 3913:tid 3913] [client 83.99.206.152:7401] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.coolwebsites.org\|F\|2"] [data ".djstore.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.coolwebsites.org"] [uri "/www.djstore.com"] [unique_id "afCzd5PgwaLTTCrn8zbysQAAACE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.222.50

🇰🇪 156.0.232.51

🇮🇳 154.221.35.72

🇸🇬 101.47.158.137

🇳🇱 89.21.67.139

🇫🇷 82.208.22.35

🇱🇹 77.90.185.64

🇺🇸 54.240.9.36

🇮🇳 49.207.243.206

🇳🇱 45.148.10.147

🇺🇸 3.143.68.180

🇺🇸 216.25.89.148

🇲🇰 188.44.20.30

🇳🇱 176.65.131.215

🇱🇷 168.253.0.214

🇧🇷 168.194.167.10

🇭🇰 150.5.169.138

🇫🇷 91.196.152.122

🇩🇪 91.92.240.42

🇨🇦 85.217.149.25