This IP address has been reported a total of
5
times from
4 distinct
sources.
66.98.30.47 was first reported on
October 2nd 2026 , and the most recent report was
1 hour ago United States of America
with 3
reports;
Indonesia
with 1
report;
Netherlands
with 1
report.
The most common categories in these recent reports were:
Web App Attack
3
times;
Email Spam
2
times;
Hacking
1
time;
Bad Web Bot
1
time;
Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
francelink.fr
2026-10-28 00:20:27
(1 hour ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-27T16:35:27.000Z.
Web App Attack
🇺🇸
francelink.fr
2026-10-27 12:07:22
(13 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-27T02:03:01.000Z.
Web App Attack
🇮🇩
hermawan
2026-10-13 03:11:42
(2 weeks ago)
Captured JA4H: ge11n_bffb0b06fbb6 | Log: 66.98.30.47 - - [13/Oct/2026:10:11:10 +0700] "GET /index.ph ...
show more
Captured JA4H: ge11n_bffb0b06fbb6 | Log: 66.98.30.47 - - [13/Oct/2026:10:11:10 +0700] "GET /index.php/profil/arsip-artikel?catid=480&id=1274%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-14-19-desember-2016&start=200 HTTP/1.1" 403 3738 "-" "Mozilla/5.0 (Linux; Android 12; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Mobile Safari/537.36" ge11n_host,x-forwarded-scheme,x-forwarded-proto,x-forwarded-for,x-real-ip,connection,upgrade-insecure-requests,cf-ew-via,cdn-loop,sec-fetch-user,sec-fetch-site,cf-ray,accept-encoding,accept-language,accept,user-agent,cf-connecting-ip,sec-fetch-mode,cf-visitor,sec-fetch-dest,save-data,sec-ch-ua,sec-ch-ua-mobile,sec-ch-ua-platform,cf-ipcountry...
...
show less
Email Spam
Hacking
🇳🇱
soverin
2026-10-03 16:30:04
(3 weeks ago)
spam
Email Spam
🇺🇸
TPI-Abuse
2026-10-02 18:26:28
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 66.98.30.47 (47stb80.codetel.net.do): 1 in the ...
show more
(mod_security) mod_security (id:210350) triggered by 66.98.30.47 (47stb80.codetel.net.do): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 14:26:22.376220 2026] [security2:error] [pid 24395:tid 24395] [client 66.98.30.47:55684] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||eaglesnestbandb.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "eaglesnestbandb.com"] [uri "/"] [unique_id "ar_3TouqFf3y76lJBVssMwAAABc"], referer: https://seolinkbuildingservices.store/dir/backlink-building-services-60721
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
5
of 5 reports
