AbuseIPDB » 66.220.149.19

66.220.149.19 was found in our database!

This IP was reported 453 times. Confidence of Abuse is 0%: ?

ISP	Facebook, Inc.
Usage Type	Commercial
ASN	AS32934
Hostname(s)	fwdproxy-prn-019.fbsv.net
Domain Name	facebook.com
Country	United States of America
City	Prineville, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Important Note: 66.220.149.19 is an IP address from within our whitelist belonging to the subnet 66.220.144.0/20, which we identify as: "Facebook".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Important Note: 66.220.149.19 is an IP address from within our benign crawler whitelist. We confidently believe it is not a bad bot. If you disagree, please provide us with compelling evidence.

Report 66.220.149.19

Whois 66.220.149.19

IP Abuse Reports for 66.220.149.19:

This IP address has been reported a total of 453 times from 58 distinct sources. 66.220.149.19 was first reported on November 22nd 2020, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Sklurk	2024-08-16 23:21:37 (10 months ago)	Web App Attack	Web App Attack
TPI-Abuse	2024-08-16 18:55:07 (10 months ago)	(mod_security) mod_security (id:225170) triggered by 66.220.149.19 (fwdproxy-prn-019.fbsv.net): 1 in ... show more(mod_security) mod_security (id:225170) triggered by 66.220.149.19 (fwdproxy-prn-019.fbsv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 14:54:59.112983 2024] [security2:error] [pid 19044:tid 19044] [client 66.220.149.19:37592] [client 66.220.149.19] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/252244"] [unique_id "Zr-gg0SFtrTa8Dpz6rAH4wAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-16 04:01:57 (10 months ago)	(mod_security) mod_security (id:210381) triggered by 66.220.149.19 (fwdproxy-prn-019.fbsv.net): 1 in ... show more(mod_security) mod_security (id:210381) triggered by 66.220.149.19 (fwdproxy-prn-019.fbsv.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 16 00:01:51.410234 2024] [security2:error] [pid 19668:tid 19692] [client 66.220.149.19:53284] [client 66.220.149.19] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.lawyerlouisiana.com\|F\|4"] [data "REQUEST_URI=/%stripbasekeyword%/"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.lawyerlouisiana.com"] [uri "/%stripbasekeyword%/"] [unique_id "Zr7PL2OKr-Qf9mzyTvaH_wAAARY"] show less	Brute-Force Bad Web Bot Web App Attack
Sklurk	2024-08-15 21:04:07 (10 months ago)	Web App Attack	Web App Attack
Mendip_Defender	2024-08-14 21:19:04 (10 months ago)	66.220.149.19 - - [14/Aug/2024:22:19:07 +0100] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww. ... show more66.220.149.19 - - [14/Aug/2024:22:19:07 +0100] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.wessex4x4response.org.uk%2Fabout-us%2Fresponder-bill%2F HTTP/1.0" 200 3419 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" ... show less	Bad Web Bot
Sklurk	2024-08-14 21:01:15 (10 months ago)	Web App Attack	Web App Attack
Sklurk	2024-08-13 21:00:17 (10 months ago)	Web App Attack	Web App Attack
pa4080	2024-08-13 19:22:29 (10 months ago)	Detected by ModSecurity. Request URI: /wp-json/wp/v2/posts/9510	Web App Attack
Sklurk	2024-08-12 20:52:29 (10 months ago)	Web App Attack	Web App Attack
Sklurk	2024-08-11 19:28:22 (10 months ago)	Web App Attack	Web App Attack
Sklurk	2024-08-10 19:02:23 (10 months ago)	Web App Attack	Web App Attack
polido	2024-08-10 03:14:36 (10 months ago)	Unauthorized connection attempt to port 443 from 66.220.149.19	Port Scan
Sklurk	2024-08-09 18:34:17 (10 months ago)	Web App Attack	Web App Attack
Mendip_Defender	2024-08-09 16:02:24 (10 months ago)	66.220.149.19 - - [09/Aug/2024:17:02:26 +0100] "GET /?p=108 HTTP/1.0" 301 953 "-" "facebookexternalh ... show more66.220.149.19 - - [09/Aug/2024:17:02:26 +0100] "GET /?p=108 HTTP/1.0" 301 953 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" ... show less	Bad Web Bot
Sklurk	2024-08-08 18:00:27 (10 months ago)	Web App Attack	Web App Attack

Showing 196 to 210 of 453 reports

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩

Recently Reported IPs:

184.168.114.7

91.196.152.177

40.69.207.77

91.230.168.31

91.205.219.185

80.94.95.112

190.202.186.236

91.196.152.179

165.154.206.250

49.72.110.235

123.234.101.235

162.213.253.10

134.199.147.82

64.62.156.186

220.246.46.144

20.115.90.12

216.24.210.49

66.249.72.199

97.145.70.103

77.90.185.61