JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.225.238.223

66.225.238.223 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 21%: ?

21%

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	iana.org
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.225.238.223

Whois 66.225.238.223

IP Abuse Reports for 66.225.238.223:

This IP address has been reported a total of 12 times from 9 distinct sources. 66.225.238.223 was first reported on August 22nd 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 A000Z	2026-10-17 01:18:07 (5 days ago)	Fail2Ban: 66.225.238.223 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 66.225.238.223 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-10-08 21:18:00 (2 weeks ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2026-09-21 06:20:01 (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-09-03 00:23:19 (1 month ago)	Web attack	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-21 15:48:04 (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Mat%C3%A9riau-Aluminium/Taille-M-49-57-53&resultsPerPage=36 show less	DDoS Attack Web App Attack
Anonymous	2026-08-06 19:56:00 (2 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
Anonymous	2026-07-08 00:18:51 (3 months ago)	Malicious activity detected	Hacking Web App Attack
🇦🇺 prologic	2026-06-12 20:52:23 (4 months ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
🇮🇹 A000Z	2026-04-05 12:11:25 (6 months ago)	Fail2Ban: 66.225.238.223 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 66.225.238.223 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇮🇹 A000Z	2026-04-02 09:38:34 (6 months ago)	Fail2Ban: 66.225.238.223 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 66.225.238.223 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-03-27 00:17:31 (6 months ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2025-08-22 15:14:14 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 66.225.238.223 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 66.225.238.223 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 22 11:14:08.412337 2025] [security2:error] [pid 8889:tid 8889] [client 66.225.238.223:52304] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vangentholding.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vangentholding.com"] [uri "/wp-json/wp/v2/users/49209"] [unique_id "aKiJQFv_oIzmUN7DayhDPgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇳🇱 192.253.248.26

🇳🇱 192.253.248.19

🇺🇸 162.158.42.15

🇳🇱 142.93.129.190

🇺🇸 20.163.10.17

🇸🇬 195.66.216.100

🇧🇷 170.81.223.94

🇨🇱 152.174.20.36

🇨🇦 85.217.149.3

🇩🇪 64.89.160.146

🇳🇱 45.148.10.152

🇫🇷 37.187.110.241

🇳🇱 23.176.184.152

🇺🇸 20.42.57.163

🇺🇸 216.73.160.72

🇺🇸 216.73.160.46

🇳🇱 193.47.62.167

🇲🇽 189.157.181.119

🇨🇦 186.247.35.27