JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.228.37.238

66.228.37.238 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 2%: ?

ISP	Linode
Usage Type	Data Center/Web Hosting/Transit
ASN	AS63949
Hostname(s)	scanners.hostedscan.com
Domain Name	linode.com
Country	🇺🇸 United States of America
City	Cedar Knolls, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.228.37.238

Whois 66.228.37.238

IP Abuse Reports for 66.228.37.238:

This IP address has been reported a total of 14 times from 7 distinct sources. 66.228.37.238 was first reported on April 20th 2022, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Duggy_Tuxy🧱	2026-07-04 18:21:38 (1 week ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Web Attack)	Web App Attack Port Scan Hacking
Anonymous	2024-08-27 18:10:37 (1 year ago)	66.228.37.238 - sliver85.eu - [27/Aug/2024:20:10:36 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Window ... show more 66.228.37.238 - sliver85.eu - [27/Aug/2024:20:10:36 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Aug/2024:20:10:36 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Aug/2024:20:10:36 +0200] "GET / HTTP/1.1" 444 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇮🇩 hermawan	2024-07-21 09:01:49 (1 year ago)	[Sun Jul 21 16:01:11.367406 2024] [security2:error] [pid 37617:tid 126689814251072] [client 66.228.3 ... show more [Sun Jul 21 16:01:11.367406 2024] [security2:error] [pid 37617:tid 126689814251072] [client 66.228.37.238:53268] [client 66.228.37.238] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "160"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 66.228.37.238 request_line = GET / HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZpzOV5jE7h2FANLUpIcrvQAAABk"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[37684] [lpKAK06yI5s] [ZpzOV5jE7h2FANLUpIcrvQAAABk] keep_alive=[0] [2024-07-21 16:01:11.367409] [R:ZpzOV5jE7h2FANLUpIcrvQAAABk] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html, application/xhtml+xml, application/xml;q=0.9, image/webp, /; ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-06-21 09:18:27 (2 years ago)	[Fri Jun 21 16:01:05.915864 2024] [security2:error] [pid 260493:tid 129376693782080] [client 66.228. ... show more [Fri Jun 21 16:01:05.915864 2024] [security2:error] [pid 260493:tid 129376693782080] [client 66.228.37.238:48324] [client 66.228.37.238] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "160"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 66.228.37.238 request_line = GET / HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZnVBUeqTaB2wKWsFnbhawAAAAKE"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[260568] [v+Xvq0oHSFM] [ZnVBUeqTaB2wKWsFnbhawAAAAKE] keep_alive=[0] [2024-06-21 16:01:05.915870] [R:ZnVBUeqTaB2wKWsFnbhawAAAAKE] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html, application/xhtml+xml, application/xml;q=0.9, image/webp, */ ... show less	Hacking Web App Attack
🇮🇩 hermawan	2024-05-21 09:00:14 (2 years ago)	[Tue May 21 16:00:09.180814 2024] [security2:error] [pid 962517:tid 128144275146304] [client 66.228. ... show more [Tue May 21 16:00:09.180814 2024] [security2:error] [pid 962517:tid 128144275146304] [client 66.228.37.238:36944] [client 66.228.37.238] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "121"] [id "440006"] [msg "Connection Close Header"] [data "Matched Data: close found within REMOTE_ADDR: 66.228.37.238 request_line = GET / HTTP/1.1"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/"] [unique_id "ZkximaaLWcy8xWIYppK2zQAAAQo"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[962569] [W2x5C8NWnTI] [ZkximaaLWcy8xWIYppK2zQAAAQo] keep_alive=[0] [2024-05-21 16:00:09.180818] [R:ZkximaaLWcy8xWIYppK2zQAAAQo] UA:'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html, application/xhtml+xml, application/xml;q=0.9, image/webp, */ ... show less	Hacking Web App Attack
Anonymous	2023-02-27 18:01:57 (3 years ago)	66.228.37.238 - sliver85.eu - [27/Feb/2023:19:01:56 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; L ... show more 66.228.37.238 - sliver85.eu - [27/Feb/2023:19:01:56 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Feb/2023:19:01:57 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Feb/2023:19:01:57 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" ... show less	Brute-Force Web App Attack
🇷🇸 R S	2023-02-17 21:49:02 (3 years ago)	Blocked for multiple malicious, but failed expoit attempts	Web App Attack
Anonymous	2023-01-27 18:01:52 (3 years ago)	66.228.37.238 - sliver85.eu - [27/Jan/2023:19:01:51 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; L ... show more 66.228.37.238 - sliver85.eu - [27/Jan/2023:19:01:51 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Jan/2023:19:01:51 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Jan/2023:19:01:51 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2022-12-27 13:01:11 (3 years ago)	66.228.37.238 - sliver85.eu - [27/Dec/2022:19:01:10 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; L ... show more 66.228.37.238 - sliver85.eu - [27/Dec/2022:19:01:10 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Dec/2022:19:01:10 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Dec/2022:19:01:10 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" 66.228.37.238 - sliver85.eu - [27/Dec/2022:19:01:11 +0100] "GET / HTTP/1.1" 444 "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36" ... show less	Brute-Force Web App Attack
🇺🇸 SANYALnet Labs	2022-12-03 19:36:04 (3 years ago)	Dec 4 00:36:03 s390x sshd[24889]: Bad protocol version identification '\026\003\001\001\177\001' fr ... show more Dec 4 00:36:03 s390x sshd[24889]: Bad protocol version identification '\026\003\001\001\177\001' from 66.228.37.238 port 55950 Dec 4 00:36:03 s390x sshd[24890]: Connection from 66.228.37.238 port 55952 on 10.42.2.18 port 22 Dec 4 00:36:03 s390x sshd[24890]: Bad protocol version identification '\026\003\001\001s\001' from 66.228.37.238 port 55952 ... show less	Brute-Force
🇺🇸 SANYALnet Labs	2022-11-03 20:35:56 (3 years ago)	Nov 4 00:35:55 s390x sshd[5405]: Bad protocol version identification '\026\003\001\001\177\001' fro ... show more Nov 4 00:35:55 s390x sshd[5405]: Bad protocol version identification '\026\003\001\001\177\001' from 66.228.37.238 port 38120 Nov 4 00:35:55 s390x sshd[5406]: Connection from 66.228.37.238 port 38122 on 10.42.2.18 port 22 Nov 4 00:35:55 s390x sshd[5406]: Bad protocol version identification '\026\003\001\001s\001' from 66.228.37.238 port 38122 ... show less	Brute-Force
🇩🇪 www.blocklist.de	2022-10-04 19:00:32 (3 years ago)	Lines containing failures of 66.228.37.238 (max 1000) Oct 4 02:00:01 UTC__SANYALnet-Labs__ibm-syste ... show more Lines containing failures of 66.228.37.238 (max 1000) Oct 4 02:00:01 UTC__SANYALnet-Labs__ibm-system-390 sshd[7825]: Connection from 66.228.37.238 port 56140 on 10.42.2.18 port 22 Oct 4 02:00:01 UTC__SANYALnet-Labs__ibm-system-390 sshd[7825]: Bad protocol version identification '\026\003\001\001o\001' from 66.228.37.238 port 56140 Oct 4 02:00:02 UTC__SANYALnet-Labs__ibm-system-390 sshd[7826]: Connection from 66.228.37.238 port 56144 on 10.42.2.18 port 22 Oct 4 02:00:02 UTC__SANYALnet-Labs__ibm-system-390 sshd[7826]: Bad protocol version identification '\026\003\001\001s\001' from 66.228.37.238 port 56144 Oct 4 02:02:31 UTC__SANYALnet-Labs__ibm-system-390 sshd[7897]: Connection from 66.228.37.238 port 56212 on 10.42.2.18 port 22 Oct 4 02:02:31 UTC__SANYALnet-Labs__ibm-system-390 sshd[7897]: Bad protocol version identification '\026\003\001\001\177\001' from 66.228.37.238 port 56212 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=66.228.37.238 show less	FTP Brute-Force Hacking
🇺🇸 SANYALnet Labs	2022-10-03 22:02:32 (3 years ago)	Oct 4 02:00:02 s390x sshd[7826]: Bad protocol version identification '\026\003\001\001s\001' from 6 ... show more Oct 4 02:00:02 s390x sshd[7826]: Bad protocol version identification '\026\003\001\001s\001' from 66.228.37.238 port 56144 Oct 4 02:02:31 s390x sshd[7897]: Connection from 66.228.37.238 port 56212 on 10.42.2.18 port 22 Oct 4 02:02:31 s390x sshd[7897]: Bad protocol version identification '\026\003\001\001\177\001' from 66.228.37.238 port 56212 ... show less	Brute-Force
🇨🇭 Blabla23	2022-04-20 02:50:07 (4 years ago)	DNS Data viewer log, suspicious	DNS Compromise DNS Poisoning Port Scan Hacking Bad Web Bot

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 60.184.231.44

🇪🇨 157.100.111.191

🇺🇸 145.132.100.65

🇸🇬 98.159.43.135

🇧🇬 79.124.49.174

🇺🇸 66.132.172.238

🇱🇹 62.60.130.219

🇮🇳 20.40.62.73

🇧🇷 191.53.9.12

🇧🇷 177.55.48.18

🇧🇩 103.166.231.146

🇵🇹 95.93.3.25

🇲🇦 81.192.46.29

🇨🇳 58.19.106.177

🇮🇶 45.157.54.14

🇰🇿 212.154.234.9

🇳🇱 195.178.110.227

🇮🇳 139.5.19.235

🇨🇳 121.26.29.66

🇮🇳 103.163.233.202