JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.213.100.199

72.213.100.199 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 13%: ?

13%

ISP	Cox Communications Inc.
Usage Type	Fixed Line ISP
ASN	AS22773
Hostname(s)	ip72-213-100-199.mc.at.cox.net
Domain Name	cox.com
Country	🇺🇸 United States of America
City	Macon, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.213.100.199

Whois 72.213.100.199

IP Abuse Reports for 72.213.100.199:

This IP address has been reported a total of 5 times from 4 distinct sources. 72.213.100.199 was first reported on April 10th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-15 23:31:09 (5 hours ago)	(mod_security) mod_security (id:210730) triggered by 72.213.100.199 (ip72-213-100-199.mc.at.cox.net) ... show more (mod_security) mod_security (id:210730) triggered by 72.213.100.199 (ip72-213-100-199.mc.at.cox.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:29:58.947920 2026] [security2:error] [pid 1303:tid 1303] [client 72.213.100.199:35220] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|benshermanclassicalguitar.benshermanguitar.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "benshermanclassicalguitar.benshermanguitar.com"] [uri "/backup/website.sql"] [unique_id "aqnU9seOJyu6aOO583jKZgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Zkillu	2026-08-20 18:19:28 (3 weeks ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS215599. This IP (AS22773) sent ~1003725 packets (97.64 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-20 15:43:33 (3 weeks ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 15:38:33 -> 2026-08-20 15:53:33 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 15:38:33 -> 2026-08-20 15:53:33 UTC) targeting AS215599. This IP (AS22773) sent ~872550 packets (84.88 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇩🇪 botreporter	2026-07-02 06:48:08 (2 months ago)	botnet ignoring robots.txt	Bad Web Bot
🇮🇹 A000Z	2026-04-10 06:46:48 (5 months ago)	Fail2Ban: 72.213.100.199 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ... show more Fail2Ban: 72.213.100.199 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.146.80.118

🇬🇧 192.248.150.180

🇪🇨 190.130.136.175

🇲🇽 154.27.208.76

🇱🇰 123.231.44.241

🇵🇷 67.206.199.37

🇵🇭 47.80.68.74

🇺🇸 38.154.97.94

🇪🇨 190.155.217.240

🇻🇪 181.232.181.66

🇫🇷 91.231.89.130

🇨🇦 85.217.149.62

🇺🇦 46.200.104.145

🇬🇧 35.203.211.22

🇨🇳 27.10.224.9

🇳🇱 185.56.66.36

🇩🇪 159.65.121.4

🇺🇸 137.184.97.139

🇮🇳 117.99.130.0

🇻🇳 113.161.222.150