JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.220.29.201

66.220.29.201 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	ServerOptima
Usage Type	Data Center/Web Hosting/Transit
ASN	AS401742
Hostname(s)	201.0-24.29.220.66.in-addr.arpa
Domain Name	serveroptima.com
Country	🇺🇸 United States of America
City	Fremont, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.220.29.201

Whois 66.220.29.201

IP Abuse Reports for 66.220.29.201:

This IP address has been reported a total of 20 times from 14 distinct sources. 66.220.29.201 was first reported on October 23rd 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 juutis	2025-01-18 07:24:56 (1 year ago)	66.220.29.201 - - [18/Jan/2025:07:27:52 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5 ... show more 66.220.29.201 - - [18/Jan/2025:07:27:52 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" 66.220.29.201 - - [18/Jan/2025:07:27:52 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" 66.220.29.201 - - [18/Jan/2025:08:24:55 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" show less	Web App Attack
🇩🇪 juutis	2025-01-18 03:46:50 (1 year ago)	66.220.29.201 - - [18/Jan/2025:02:14:26 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5 ... show more 66.220.29.201 - - [18/Jan/2025:02:14:26 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" 66.220.29.201 - - [18/Jan/2025:04:46:50 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" 66.220.29.201 - - [18/Jan/2025:04:46:50 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" show less	Web App Attack
🇧🇪 cmbplf	2025-01-18 01:37:53 (1 year ago)	654 POST requests to */wp-login.php	Brute-Force Bad Web Bot
🇩🇪 juutis	2025-01-18 01:14:26 (1 year ago)	66.220.29.201 - - [18/Jan/2025:01:25:32 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5 ... show more 66.220.29.201 - - [18/Jan/2025:01:25:32 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" 66.220.29.201 - - [18/Jan/2025:01:25:32 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" 66.220.29.201 - - [18/Jan/2025:02:14:26 +0100] "POST /wp-login.php HTTP/1.1" 200 7309 "-" "Mozilla/5.0" show less	Web App Attack
🇪🇸 10dencehispahard SL	2024-11-01 09:00:39 (1 year ago)	Unauthorized login attempts [ apache-4xx]	Brute-Force
🇩🇪 Petros Stefanakis	2024-10-30 12:45:40 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 66.220.29.201 (US/United States/-)	SQL Injection
Anonymous	2024-10-26 17:20:05 (1 year ago)	\| Multiple SQL injection attempts from same source ip.(multiple servers)	Hacking SQL Injection Web App Attack
🇵🇹 Information Security	2024-10-26 11:07:56 (1 year ago)	Web App Attack	Web App Attack
🇺🇸 aygabtu	2024-10-25 07:39:00 (1 year ago)	Numerous SQL Injection attacks	Hacking SQL Injection Bad Web Bot
🇮🇹 Rosh	2024-10-25 07:37:00 (1 year ago)	[10/25/24 09:36:59] 1 attack: /adminer.php (severity 8);	Web App Attack
🇩🇪 rh24	2024-10-25 07:36:45 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 66.220.29.201 (US/United States/-): (C ... show more (mod_security) mod_security triggered on hostname [redacted] 66.220.29.201 (US/United States/-): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2024-10-25 07:21:18 (1 year ago)	(mod_security) mod_security (id:212620) triggered by 66.220.29.201 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:212620) triggered by 66.220.29.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 25 03:21:14.777257 2024] [security2:error] [pid 17497:tid 17497] [client 66.220.29.201:63172] [client 66.220.29.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|www.jwwsb.jaspercity.com\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?itemid=<script>alert('xss')</script>&id=2&option=com_content&view=article"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "www.jwwsb.jaspercity.com"] [uri "/index.php"] [unique_id "ZxtG6mBQOIYoCy8OdBUaNwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-10-25 07:15:00 (1 year ago)	apache vulnerability scan	Web App Attack
🇺🇸 TPI-Abuse	2024-10-25 07:03:13 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 66.220.29.201 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 66.220.29.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 25 03:03:07.186018 2024] [security2:error] [pid 20374:tid 20374] [client 66.220.29.201:64390] [client 66.220.29.201] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furballaudio.com"] [uri "/.env"] [unique_id "ZxtCq1vMPleZcAgWX5kHmQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2024-10-25 06:44:32 (1 year ago)	2024-10-25 06:44:31 66.220.29.201 File scanning, blocking 66.220.29.201 for 5 minutes	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 42.116.73.215

🇩🇪 213.209.159.210

🇷🇺 185.108.211.35

🇬🇧 167.71.132.111

🇳🇱 152.42.128.153

🇹🇼 122.116.21.91

🇹🇳 102.158.111.64

🇷🇺 81.211.72.167

🇧🇷 45.4.179.4

🇺🇸 216.25.89.112

🇧🇷 187.18.8.14

🇺🇸 154.29.78.161

🇺🇸 91.230.168.121

🇵🇪 38.187.1.100

🇺🇸 34.23.113.18

🇨🇳 110.42.211.235

🇮🇩 103.171.185.6

🇭🇰 61.239.246.166

🇧🇷 45.238.2.37

🇺🇸 40.83.182.122