JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.235.114.72

66.235.114.72 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 0%: ?

ISP	Amazon.com, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Domain Name	amazon.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.235.114.72

Whois 66.235.114.72

IP Abuse Reports for 66.235.114.72:

This IP address has been reported a total of 7 times from 3 distinct sources. 66.235.114.72 was first reported on June 13th 2025, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-03-16 18:04:12 (4 months ago)	(mod_security) mod_security (id:217200) triggered by 66.235.114.72 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:217200) triggered by 66.235.114.72 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 14:03:51.286180 2026] [security2:error] [pid 2388:tid 2388] [client 66.235.114.72:57890] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|cpanel.koorsen.net:80\|F\|2"] [data "/guest_auth/guestisup.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "cpanel.koorsen.net"] [uri "/guest_auth/guestIsUp.php"] [unique_id "abhGB_SpbIFLp37_ZXL95wAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-16 08:59:49 (4 months ago)	Aggressive web scan	Web App Attack
Anonymous	2026-01-20 06:50:06 (6 months ago)	Aggressive web scan	Web App Attack
Anonymous	2026-01-04 13:25:05 (6 months ago)	Aggressive web scan	Web App Attack
🇮🇪 OperatorXoR	2026-01-04 12:35:00 (6 months ago)	This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 i ... show more This IP address has been observed in the wild attempting to exploit CVE-2018-0171 CVE-2018-0171 is a remote code execution vulnerability in Cisco IOS and IOS XE Software, specifically in the Smart Install client feature. An unauthenticated, remote attacker can send crafted Smart Install messages to trigger a buffer overflow, allowing them to execute arbitrary code or cause a denial of service (DoS) on vulnerable devices. Further information available here: https://nvd.nist.gov/vuln/detail/CVE-2018-0171 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2 https://www.tenable.com/blog/proof-of-concept-and-patch-for-critical-cisco-ios-vulnerability-cve-2018-0171 show less	Hacking
Anonymous	2025-10-21 03:17:47 (9 months ago)	Aggressive web scan	Web App Attack
Anonymous	2025-06-13 19:52:46 (1 year ago)	Aggressive web scan	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 151.243.11.230

🇳🇱 77.239.124.102

🇸🇪 213.100.194.168

🇺🇸 172.252.193.148

🇺🇸 162.216.150.32

🇨🇳 115.231.78.11

🇨🇳 36.41.173.197

🇳🇱 213.176.26.77

🇸🇪 172.234.124.169

🇧🇷 131.0.14.74

🇳🇱 91.92.42.195

🇨🇳 27.150.188.148

🇦🇪 2.48.94.112

🇺🇸 216.25.89.148

🇧🇷 205.210.31.164

🇲🇽 187.210.77.105

🇮🇩 180.249.186.109

🇫🇮 147.185.133.204

🇳🇱 45.148.10.147

🇺🇸 45.79.67.140