JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.179.190.202

66.179.190.202 was found in our database!

This IP was reported 64 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip66-179-190-202.pbiaas.com
Domain Name	ionos.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.179.190.202

Whois 66.179.190.202

IP Abuse Reports for 66.179.190.202:

This IP address has been reported a total of 64 times from 43 distinct sources. 66.179.190.202 was first reported on September 11th 2026, and the most recent report was 26 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-10-22 07:07:15 (26 minutes ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: auth.sweetpuddingtrap.xyz \| URI: /.env.swp \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"Accept-Encoding":"gzip, br","Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"66.179.190.202","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e6a9fb9e99d1ad-MCI","Accept":"\/","X-Forwarded-For":"66.179.190.202 show less	Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk	2026-10-22 05:15:14 (2 hours ago)	13 attacks on env grabbing URLs, VC URLs: GET /.env.local HTTP/1.1 GET /.git/HEAD HTTP/1.1	Hacking
🇺🇸 TAY	2026-10-22 03:05:43 (4 hours ago)	66.179.190.202 - - [22/Oct/2026:10:59:55 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6099 "-" "Mozilla ... show more 66.179.190.202 - - [22/Oct/2026:10:59:55 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:11:00:30 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:11:00:36 +0800] "GET /wp-config.php.save HTTP/1.1" 404 43879 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:11:01:01 +0800] "GET /wp-config.php.orig HTTP/1.1" 301 6103 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:11:05:27 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l ... show less	Brute-Force
🇩🇪 raph	2026-10-22 03:01:34 (4 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇩🇪 webanyone	2026-10-21 22:42:24 (8 hours ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /index.php, /wp-json/gravitysmtp ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /index.php, /wp-json/gravitysmtp/v1/tests/mock-data, / \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 chronos	2026-10-21 22:04:55 (9 hours ago)	[AUTORAVALT][[21/10/2026 - 19:04:55 -03:00 UTC] Attack from [IONOS Inc.] [66.179.190.202][ip66-179-1 ... show more [AUTORAVALT][[21/10/2026 - 19:04:55 -03:00 UTC] Attack from [IONOS Inc.] [66.179.190.202][ip66-179-190-202.pbiaas.com] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attac] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇳🇱 homeshowdomain.nl	2026-10-21 22:00:31 (9 hours ago)	Auto-ban: >3000 req/min op 2026-10-21	Web App Attack SSH Hacking
🇫🇷 AGEPCom	2026-10-21 21:43:46 (9 hours ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
Anonymous	2026-10-21 20:36:01 (10 hours ago)	(caddyscan) Scanner path probe from 66.179.190.202 (US/United States/ip66-179-190-202.pbiaas.com): 5 ... show more (caddyscan) Scanner path probe from 66.179.190.202 (US/United States/ip66-179-190-202.pbiaas.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 66.179.190.202 - - [21/Oct/2026:20:35:59 +0000] "GET /.env.save HTTP/1.1" [REDACTED] 200 2627 66.179.190.202 - - [21/Oct/2026:20:35:59 +0000] "GET /.env.swp HTTP/1.1" [REDACTED] 200 2627 66.179.190.202 - - [21/Oct/2026:20:35:59 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 66.179.190.202 - - [21/Oct/2026:20:35:59 +0000] "GET /.git/HEAD HTTP/1.1" [REDACTED] 200 2627 66.179.190.202 - - [21/Oct/2026:20:35:59 +0000] "GET /.env.dev HTTP/1.1" show less	Port Scan
🇵🇱 lns.bz	2026-10-21 19:06:44 (12 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 TAY	2026-10-21 18:07:32 (13 hours ago)	66.179.190.202 - - [22/Oct/2026:02:06:54 +0800] "GET /wp-config.php~ HTTP/1.1" 404 53637 "-" "Mozill ... show more 66.179.190.202 - - [22/Oct/2026:02:06:54 +0800] "GET /wp-config.php~ HTTP/1.1" 404 53637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:02:06:54 +0800] "GET /wp-config.php.save HTTP/1.1" 404 53615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:02:07:00 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 53615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:02:07:20 +0800] "GET /wp-config.php.old HTTP/1.1" 404 53615 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:02:07:25 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 53637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ... show less	Brute-Force
🇺🇸 TAY	2026-10-21 16:15:00 (15 hours ago)	66.179.190.202 - - [22/Oct/2026:00:13:41 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6132 "-" "Mozilla ... show more 66.179.190.202 - - [22/Oct/2026:00:13:41 +0800] "GET /wp-config.php~ HTTP/1.1" 301 6132 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:00:13:42 +0800] "GET /wp-config.php~ HTTP/1.1" 404 46387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:00:13:42 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6136 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:00:14:38 +0800] "GET /wp-config.php.orig HTTP/1.1" 301 6136 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.179.190.202 - - [22/Oct/2026:00:14:54 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 46387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-10-21 15:51:21 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 66.179.190.202 (ip66-179-190-202.pbiaas.com): 1 ... show more (mod_security) mod_security (id:210492) triggered by 66.179.190.202 (ip66-179-190-202.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:51:13.638357 2026] [security2:error] [pid 13973:tid 14007] [client 66.179.190.202:35378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crosscountry.ahsdistance.org"] [uri "/.env.txt"] [unique_id "atjfcSZa3MbFGGLrMaN0QgAAARc"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇷 ICS Labs	2026-10-21 14:41:19 (16 hours ago)	ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-21 UTC.	Brute-Force
🇷🇺 Albram	2026-10-21 14:27:09 (17 hours ago)	HTTP automated scanner flood ...	Bad Web Bot

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 77.239.124.44

🇿🇦 41.181.156.205

🇹🇼 198.235.24.77

🇩🇪 193.233.254.105

🇰🇷 183.109.124.136

🇮🇳 168.144.70.60

🇮🇳 122.187.229.197

🇮🇷 92.119.70.229

🇺🇸 66.132.159.43

🇳🇱 45.148.10.240

🇳🇱 45.148.10.157

🇬🇧 35.203.210.164

🇰🇷 211.200.11.218

🇬🇧 209.97.183.43

🇧🇪 198.235.24.185

🇧🇪 198.235.24.134

🇦🇷 190.96.127.50

🇦🇷 190.30.56.103

🇨🇱 190.20.64.227

🇺🇸 162.216.150.134