JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.207.33.64

72.207.33.64 was found in our database!

This IP was reported 252 times. Confidence of Abuse is 53%: ?

53%

ISP	Cox Communications
Usage Type	Fixed Line ISP
ASN	AS22773
Domain Name	cox.com
Country	🇺🇸 United States of America
City	San Diego, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.207.33.64

Whois 72.207.33.64

IP Abuse Reports for 72.207.33.64:

This IP address has been reported a total of 252 times from 90 distinct sources. 72.207.33.64 was first reported on July 18th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 relianoid.com	2026-05-29 20:53:54 (1 week ago)	POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web Spam
🇦🇹 AustrianSimon	2026-05-29 19:07:17 (1 week ago)	29 May 2026 19:07:16UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 29 May 2026 19:07:16UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 72.207.33.64 show less	Brute-Force
🇺🇸 COMPLEX	2026-05-26 01:57:39 (1 week ago)	Banned by Multi Agent · node …eq1h · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇩🇪 BestFans.com	2026-05-22 10:12:24 (2 weeks ago)	Credential brute-force attacks on webpage logins	Brute-Force
Anonymous	2026-05-18 10:24:59 (2 weeks ago)	72.207.33.64 (US/United States/California/Chula Vista/-/[redacted]	Brute-Force
🇫🇷 masterguru	2026-05-15 12:20:20 (3 weeks ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 72.207.33.64 (-): 1 in the last 3600 secs (0-1 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 72.207.33.64 (-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 conseilgouz	2026-05-15 03:52:29 (3 weeks ago)	scw-Joomla User : try to access forms...	Hacking
🇺🇸 TPI-Abuse	2026-05-08 11:48:54 (4 weeks ago)	(mod_security) mod_security (id:210730) triggered by 72.207.33.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 72.207.33.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 07:48:45.552647 2026] [security2:error] [pid 13919:tid 13919] [client 72.207.33.64:59612] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.xtrl.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.xtrl.com"] [uri "/home/tancedi1/public_html/xtrl.com"] [unique_id "af3NnYb_9TCkPL-EJRI1zAAAAA8"], referer: http://www.xtrl.com/home/tancedi1/public_html/xtrl.com/?a=1&b=381 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cheatmaster.store	2026-05-08 11:34:51 (4 weeks ago)	Proxy parsed from 72.207.33.64:4145	Brute-Force SSH
🇭🇺 bcsaba	2026-05-06 20:53:06 (4 weeks ago)	Joomla spam 72.207.33.64 - - [06/May/2026:22:53:05 +0200] "GET /index.php?option=com_easyblog&view=d ... show more Joomla spam 72.207.33.64 - - [06/May/2026:22:53:05 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 1514 "https://REDACTED" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 nowyouknow	2026-04-29 20:40:12 (1 month ago)	(From [email protected]) Hi, I'm Alesha with Virtual Ease Service. I’m reaching ou ... show more (From [email protected]) Hi, I'm Alesha with Virtual Ease Service. I’m reaching out because we offer Virtual Assistants that utilize our custom built AI tool, MAVIS (My Advanced Virtual Intelligent System), that easily replaces a 20 man team. We overtake and handle all of your marketing, administrative tasks, graphic design, video animations, accounting and even all your prospecting with our system. This isn't a software you have to learn and all you have to do is delegate to a human Virtual Assistant to get everything done! Would you be open to exploring how MAVIS could support your business? Alesha show less	Phishing Web Spam
🇭🇺 bcsaba	2026-04-29 12:09:12 (1 month ago)	Joomla spam 72.207.33.64 - - [29/Apr/2026:13:51:06 +0200] "GET /index.php?option=com_easyblog&view=d ... show more Joomla spam 72.207.33.64 - - [29/Apr/2026:13:51:06 +0200] "GET /index.php?option=com_easyblog&view=dashboard&layout=write HTTP/1.1" 404 1514 "https://REDACTED" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-04-29 12:08:29 (1 month ago)		Web Spam Bad Web Bot
🇩🇪 Justin F. \| AS204464	2026-04-26 14:50:51 (1 month ago)	Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 23/TELNET Reported by: Jus ... show more Honeypot [nx-infrastructure]: Unauthorized connection attempt detected on 23/TELNET Reported by: Justin F. show less	Hacking Port Scan
Anonymous	2026-04-26 03:49:49 (1 month ago)	WEB SPAM: Top child porn link Websites <a href=https://lloyd-derm.com/about-us/the-providers/dr-je ... show more WEB SPAM: Top child porn link Websites <a href=https://lloyd-derm.com/about-us/the-providers/dr-jenifer-r-lloyd-do-faad/> child porn link, cp for trade only, dm for cp, send cp first, verified cp trader https://lloyd-derm.com/about-us/the-providers/dr-jenifer-r-lloyd-do-faad/ </a> child porn link preteen sex video! <a href=https://www.stjohnshealth.org/prescriptions/sildenafil/> cp collection, csam folder, pthc mega link, loli nsfw pack, underage nudes, minor sexvideo </a> preteen sex video <a h show less	Web Spam Blog Spam

Showing 1 to 15 of 252 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.189.206

🇺🇸 170.9.16.186

🇫🇮 147.185.133.219

🇺🇸 139.144.239.72

🇳🇱 89.21.67.164

🇷🇺 87.103.196.161

🇱🇹 81.30.98.158

🇺🇸 67.205.168.116

🇨🇳 218.59.201.12

🇬🇷 212.251.0.147

🇺🇸 207.90.244.25

🇳🇱 204.76.203.219

🇲🇽 200.77.172.159

🇮🇳 182.79.218.164

🇧🇷 177.55.94.137

🇺🇸 135.237.81.94

🇮🇳 125.19.207.50

🇦🇺 124.150.139.38

🇨🇳 123.123.196.140

🇭🇰 118.193.36.63