JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.29.156.133

66.29.156.133 was found in our database!

This IP was reported 848 times. Confidence of Abuse is 100%: ?

100%

ISP	Namecheap, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS22612
Hostname(s)	server1.brandservicecorps.com
Domain Name	namecheap.com
Country	🇺🇸 United States of America
City	Phoenix, Arizona

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.29.156.133

Whois 66.29.156.133

IP Abuse Reports for 66.29.156.133:

This IP address has been reported a total of 848 times from 228 distinct sources. 66.29.156.133 was first reported on March 10th 2022, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2026-06-26 22:14:47 (20 hours ago)	Unauthorized web scan.	Web App Attack
Anonymous	2026-06-24 23:46:22 (2 days ago)	Failed Wordpress Logins	Web App Attack
🇳🇱 homeshowdomain.nl	2026-06-23 22:01:13 (3 days ago)	Auto-ban: >3000 req/min op 2026-06-23	Web App Attack SSH Hacking
🇳🇱 oisecnet	2026-06-23 21:03:35 (3 days ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-06-23. 1 requests from this I ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-06-23. 1 requests from this IP. show less	Brute-Force Web App Attack SSH
Anonymous	2026-06-23 11:01:06 (4 days ago)	"GET /wp-includes/xmlrpc.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 maxpower	2026-06-23 10:10:04 (4 days ago)	(wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 66.29.156.133 (US/United States/server1.brands ... show more (wp_fingerprint) REGOLA 6 - WP Exploit Attempt xmlrpc 66.29.156.133 (US/United States/server1.brandservicecorps.com): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/06/23 12:04:44 [error] 2018384#2018384: 147921 access forbidden by rule, client: 66.29.156.133, server: papertek.it, request: "GET /?author=3 HTTP/1.1", host: "papertek.it" 66.29.156.133 - - [23/Jun/2026:12:06:10 +0200] "GET /wp-json/wp/v2/users?offset=0&per_page=100&_fields=id,slug HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" host=phedra.eu 66.29.156.133 - - [23/Jun/2026:12:09:48 +0200] "GET /wp-json/wp/v2/users/3?_fields=id,slug,roles HTTP/2.0" 404 81 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" "-" host=ingenioprogetti.com show less	Port Scan
🇬🇧 Mendip_Defender	2026-06-23 10:08:19 (4 days ago)	[23/Jun/2026:11:08:03.493767 +0100] ajpbA6JVnzjz3yVmqlpVnwAAAAA 66.29.156.133 58656 188.246.206.60 7 ... show more [23/Jun/2026:11:08:03.493767 +0100] ajpbA6JVnzjz3yVmqlpVnwAAAAA 66.29.156.133 58656 188.246.206.60 7081 [23/Jun/2026:11:08:12.517785 +0100] ajpbDDEW0lvvAiyZ4tN5ywAAAEA 66.29.156.133 53520 188.246.206.60 7081 ... show less	Brute-Force
🇺🇸 Penny Packer	2026-06-23 10:08:19 (4 days ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-06-23 10:07:11 (4 days ago)	(mod_security) mod_security (id:225170) triggered by 66.29.156.133 (server1.brandservicecorps.com): ... show more (mod_security) mod_security (id:225170) triggered by 66.29.156.133 (server1.brandservicecorps.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 06:07:07.771305 2026] [security2:error] [pid 1859:tid 1859] [client 66.29.156.133:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pixacast.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pixacast.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajpay5Kks62TySOlLaUPbgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-23 10:04:19 (4 days ago)	AGERADE WEBEXPLOIT 66.29.156.133 (server1.brandservicecorps.com)	Web App Attack
🇺🇸 Vianpyro	2026-06-23 09:49:44 (4 days ago)	Honeypot: 10 request(s) in 26 min. Paths: /wp-json/rankmath/v1/getHead, /graphql, /wp-json/wp/v2/use ... show more Honeypot: 10 request(s) in 26 min. Paths: /wp-json/rankmath/v1/getHead, /graphql, /wp-json/wp/v2/users, /. Method(s): GET,POST. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 22612 (Namecheap, Inc.). show less	Web App Attack Bad Web Bot Brute-Force Hacking
🇨🇿 plzenskypruvodce.cz	2026-06-23 09:43:42 (4 days ago)	2026-06-23T11:43:41.613323+02:00 web wordpress(varhanykolin.cz)[829104]: Immediately block connectio ... show more 2026-06-23T11:43:41.613323+02:00 web wordpress(varhanykolin.cz)[829104]: Immediately block connections from 66.29.156.133 ... show less	Brute-Force
🇺🇸 ambor	2026-06-23 09:39:05 (4 days ago)	Honeypot triggered: /wp-includes/xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10 ... show more Honeypot triggered: /wp-includes/xmlrpc.php on ifebridge.com. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36. Method: GET show less	Web App Attack
🇩🇪 Marc	2026-06-23 09:38:47 (4 days ago)	66.29.156.133 - - [23/Jun/2026:11:38:23 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slu ... show more 66.29.156.133 - - [23/Jun/2026:11:38:23 +0200] "GET /wp-json/wp/v2/users?per_page=100&_fields=id,slug,name,link,roles HTTP/2.0" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 66.29.156.133 - - [23/Jun/2026:11:38:24 +0200] "GET /wp-json/wp/v2/users?per_page=100&orderby=id&order=asc&_fields=id,slug HTTP/2.0" 404 483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 66.29.156.133 - - [23/Jun/2026:11:38:47 +0200] "GET /wp-json/wp/v2/users?per_page=100 HTTP/2.0" 404 484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Brute-Force
🇸🇮 administrator	2026-06-23 09:26:06 (4 days ago)	2026-06-23 11:26:03,858 fail2ban.actions [1403250]: NOTICE [webadmin-badips] Ban 66.29.156.1 ... show more 2026-06-23 11:26:03,858 fail2ban.actions [1403250]: NOTICE [webadmin-badips] Ban 66.29.156.133 2026-06-23 11:26:03,969 fail2ban.actions [1403250]: NOTICE [webadmin-nfw] Ban 66.29.156.133 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack

Showing 1 to 15 of 848 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 208.84.103.42

🇧🇷 205.210.31.152

🇪🇸 185.176.8.77

🇨🇦 158.69.215.39

🇺🇸 103.203.57.19

🇷🇺 81.22.51.64

🇧🇬 78.128.114.58

🇲🇾 47.250.141.111

🇱🇹 45.227.254.170

🇧🇷 43.164.197.97

🇵🇱 23.27.225.212

🇩🇪 209.50.189.11

🇲🇽 189.219.53.189

🇨🇳 180.76.172.156

🇧🇷 152.67.46.203

🇫🇮 147.185.133.170

🇦🇪 139.185.55.154

🇨🇳 106.13.70.73

🇮🇳 103.160.26.166

🇵🇱 87.251.64.145