JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

66.23.225.248

Neutral Activity

Abuse confidence score ?

0% Low Risk

483 reports

82 reporters · latest 3 years ago

ISP	Interserver, Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS19318
Domain Name	interserver.net
Country	🇺🇸 United States of America
City	Edison, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

66.23.225.248 has been reported 483 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 66.23.225.248

Export CSV

This IP address has been reported a total of 483 times from 82 distinct sources. 66.23.225.248 was first reported on September 30th 2021, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 zynex	2023-05-19 14:47:59 (3 years ago)	URL Probing: /phpinfo.php	Web App Attack
🇦🇺 whirlpoole	2023-05-16 07:53:19 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): ... show more (mod_security) mod_security (id:949110) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): 10 in the last 3600 secs show less	Brute-Force
🇨🇿 0x44	2023-05-15 04:37:42 (3 years ago)	66.23.225.248 [14/May/2023 * Spam host detected, probing for vulnerabilities]	Web Spam Exploited Host Web App Attack
🇦🇺 whirlpoole	2023-05-14 03:10:21 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): ... show more (mod_security) mod_security (id:949110) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): 10 in the last 3600 secs show less	Brute-Force
🇬🇧 Apache	2023-05-14 01:02:08 (3 years ago)	(mod_security) mod_security (id:210492) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): ... show more (mod_security) mod_security (id:210492) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇳🇱 sernate	2023-05-13 23:46:34 (3 years ago)	(mod_security) mod_security (id:210492) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): ... show more (mod_security) mod_security (id:210492) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC show less	Brute-Force
🇳🇴 Nebulous	2023-04-14 21:26:09 (3 years ago)	Probing for files: /.env, /phpinfo.php, /config.js, /aws.yml	Hacking Web App Attack
🇨🇦 swrlly	2023-04-14 14:41:37 (3 years ago)	attempt to exploit known webserver vulnerabilities	Web App Attack
🇨🇦 nyclee.net	2023-04-13 22:57:41 (3 years ago)	WebServer Vunerability Probe ...	Hacking Web App Attack
Anonymous	2023-04-12 11:28:53 (3 years ago)	scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: ... show more scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php show less	Web App Attack
🇧🇷 AC - Team	2023-04-12 08:51:02 (3 years ago)	66.23.225.248 - - [12/Apr/2023:05:51:01 -0300] "GET /.env HTTP/1.1" 403 3392 "-" "Mozilla/5.0 (X11; ... show more 66.23.225.248 - - [12/Apr/2023:05:51:01 -0300] "GET /.env HTTP/1.1" 403 3392 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Web App Attack
🇺🇸 Major Hostility	2023-04-12 08:48:29 (3 years ago)	"GET /.env HTTP/1.1" 404 "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404	Web App Attack
🇧🇷 AC - Team	2023-04-12 07:50:28 (3 years ago)	66.23.225.248 - - [12/Apr/2023:04:50:29 -0300] "GET /.env HTTP/1.1" 403 3510 "-" "Mozilla/5.0 (X11; ... show more 66.23.225.248 - - [12/Apr/2023:04:50:29 -0300] "GET /.env HTTP/1.1" 403 3510 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Web App Attack
🇳🇱 oh.mg	2023-04-12 05:50:56 (3 years ago)	(mod_security) mod_security (id:949110) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): ... show more (mod_security) mod_security (id:949110) triggered by 66.23.225.248 (US/United States/ns8.it-eg.com): 1 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [Wed Apr 12 05:50:51.672832 2023] [:error] [pid 3374739:tid 139737255880384] [client 66.23.225.248:55258] [client 66.23.225.248] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset-3.3.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "om.gd"] [uri "/.env"] [unique_id "ZDZGu6JftyyCC8CMRh_koQAAAAY"] show less	Brute-Force SSH
🇧🇷 AC - Team	2023-04-12 03:51:13 (3 years ago)	66.23.225.248 - - [12/Apr/2023:00:51:12 -0300] "GET /.env HTTP/1.1" 403 3403 "-" "Mozilla/5.0 (X11; ... show more 66.23.225.248 - - [12/Apr/2023:00:51:12 -0300] "GET /.env HTTP/1.1" 403 3403 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Hacking Web App Attack

Showing 1 to 15 of 483 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.154

🇫🇷 172.71.232.167

🇭🇰 150.5.141.198

🇨🇳 124.174.19.195

🇯🇵 40.74.77.37

🇺🇸 212.119.41.125

🇺🇸 162.216.150.140

🇦🇺 119.17.156.91

🇨🇳 116.179.32.159

🇻🇳 103.154.63.62

🇩🇪 64.226.64.124

🇱🇹 62.60.130.242

🇮🇳 43.255.142.141

🇦🇫 180.94.74.146

🇺🇸 147.185.132.55

🇩🇪 69.5.169.63

🇺🇸 66.132.195.111

🇬🇧 64.205.72.3

🇨🇳 47.92.237.21

🇧🇪 34.62.207.125