172.86.66.111

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
64 reports
58 reporters · latest 1 hour ago
ISP
RouterHosting LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14956
Hostname(s)
111.66.86.172.static.cloudzy.com
Domain Name
cloudzy.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
64 from 58 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 31 🇫🇷 France 9 🇺🇸 United States of America 5
Most common categories Web App Attack 43 Hacking 20 Brute-Force 13 Bad Web Bot 11 Port Scan 10
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇫🇷 COMAITE
Suspicious URL access.
Web App Attack
🇫🇷 Kejult
Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 62 request event(s), 62 distinct path(s), 42 request(s) to suspicious path(s). Examples: /.env, /.env.backup, /.env.bak, /.env.default, /.env.dev.
Hacking Bad Web Bot Web App Attack
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇬🇧 G4zabus3r
(mod_security) mod_security triggered on hostname [redacted] 172.86.66.111 (DE/Germany/111.66.86.172.static.cloudzy.com)
SQL Injection
🇩🇪 maxpower
(PERMBLOCK) 172.86.66.111 (DE/Germany/111.66.86.172.static.cloudzy.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇩🇪 Roper123
Web exploits
Web App Attack
🇩🇪 Lunix
Brute-Force Web App Attack
🇳🇱 tpjg
Web App Attack
🇩🇪 maxpower
Port Scan
🇩🇪 jotoma.de
Web Spam Brute-Force
🇩🇪 loveprod
Bad Web Bot
🇩🇪 MarkGGN
Web App Attack
🇩🇪 raulns
HTTP probing by raw IP address against a customer-facing web application. Window (UTC): 2026-11-09T14:34:55.015Z to 2026-11-09T14:34:57.153Z. Events: 2. Paths: /.env , /.env.local.
Port Scan Hacking
🇩🇪 enjoyably
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.156.128.103
🇨🇳 182.244.5.153
🇵🇰 175.107.0.96
🇨🇮 160.120.50.157
🇺🇸 140.235.171.195
🇳🇱 64.205.72.154
🇳🇱 45.156.128.104
🇳🇱 45.156.128.101
🇺🇦 195.137.185.7
🇦🇷 179.0.242.229
🇯🇵 177.2.185.91
🇨🇳 114.244.211.247
🇺🇸 43.153.54.14
🇺🇸 24.234.247.161
🇺🇸 164.152.26.28
🇸🇬 129.226.146.146
🇺🇬 102.203.209.64
🇬🇧 78.153.140.236
🇦🇷 38.254.119.126
🇺🇸 4.227.154.22
feedback