JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.223.49.217

66.223.49.217 was found in our database!

This IP was reported 176 times. Confidence of Abuse is 100%: ?

100%

ISP	Epik LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS394456
Hostname(s)	217.49.223.66.epik.llc
Domain Name	adezignteam.com
Country	🇺🇸 United States of America
City	Atlanta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.223.49.217

Whois 66.223.49.217

IP Abuse Reports for 66.223.49.217:

This IP address has been reported a total of 176 times from 87 distinct sources. 66.223.49.217 was first reported on March 24th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 1cyb3rpunk	2026-09-10 23:41:35 (20 hours ago)	Coordinated campaign CMP-1786835248-000: 683 IPs sharing an attack fingerprint (admin_panel_probe, a ... show more Coordinated campaign CMP-1786835248-000: 683 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-10 15:46:46 (1 day ago)	Failed Wordpress Logins	Web App Attack
🇺🇸 1cyb3rpunk	2026-09-09 13:52:52 (2 days ago)	Coordinated campaign CMP-1786835248-000: 648 IPs sharing an attack fingerprint (admin_panel_probe, a ... show more Coordinated campaign CMP-1786835248-000: 648 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 1cyb3rpunk	2026-09-08 16:00:40 (3 days ago)	Coordinated campaign CMP-1786835248-000: 634 IPs sharing an attack fingerprint (admin_panel_probe, a ... show more Coordinated campaign CMP-1786835248-000: 634 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-07 22:46:21 (3 days ago)	Failed Wordpress Logins	Web App Attack
🇫🇷 tecnicorioja	2026-09-07 22:00:43 (3 days ago)	wp-login attack [07/Sep/2026:21:01:55	Brute-Force Web App Attack
🇺🇸 1cyb3rpunk	2026-09-07 15:58:48 (4 days ago)	Coordinated campaign CMP-1786835248-000: 607 IPs sharing an attack fingerprint (admin_panel_probe, a ... show more Coordinated campaign CMP-1786835248-000: 607 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-07 14:19:10 (4 days ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 66.223.49.217 (US/United States/217.49.223.66 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 66.223.49.217 (US/United States/217.49.223.66.epik.llc): 1 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 netclix.gr	2026-09-07 12:50:39 (4 days ago)	(wordpress) Failed wordpress login from 66.223.49.217 (US/United States/217.49.223.66.epik.llc): (C ... show more (wordpress) Failed wordpress login from 66.223.49.217 (US/United States/217.49.223.66.epik.llc): (CF_ENABLE) show less	Brute-Force
🇫🇷 masterguru	2026-09-07 12:46:41 (4 days ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 66.223.49.217 (US/United States/217.49.223.66 ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 66.223.49.217 (US/United States/217.49.223.66.epik.llc): 1 in the last 3600 secs (0-195) show less	Hacking
🇩🇪 LRob	2026-09-07 11:39:25 (4 days ago)	L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far ... show more L7 DDoS: hammering a site's endpoints (login page, AJAX, dynamic pages) with automated requests far beyond any human use \| path: /wp-login.php \| 2026-09-07 11:39 UTC show less	DDoS Attack Web App Attack
🇺🇸 nyt	2026-09-07 11:12:35 (4 days ago)	Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-07 10:45:06 (4 days ago)	(wordpress) Apache: Failed WordPress login from 66.223.49.217 (US/United States/217.49.223.66.epik.l ... show more (wordpress) Apache: Failed WordPress login from 66.223.49.217 (US/United States/217.49.223.66.epik.llc): 10 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 juutis	2026-09-07 10:17:33 (4 days ago)	66.223.49.217 - - [06/Sep/2026:09:21:14 +0200] "POST /wp-login.php HTTP/1.1" 200 9633 "https://www.t ... show more 66.223.49.217 - - [06/Sep/2026:09:21:14 +0200] "POST /wp-login.php HTTP/1.1" 200 9633 "https://www.taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 66.223.49.217 - - [06/Sep/2026:10:00:40 +0200] "POST /wp-login.php HTTP/1.1" 200 9596 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 66.223.49.217 - - [07/Sep/2026:12:17:32 +0200] "POST /wp-login.php HTTP/1.1" 200 9600 "https://taidesuunnistus.net/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇷 Yepngo	2026-09-07 10:12:04 (4 days ago)	66.223.49.217 - - [07/Sep/2026:12:12:03 +0200] "POST /wp-login.php HTTP/2.0" 200 12510 "https://dev. ... show more 66.223.49.217 - - [07/Sep/2026:12:12:03 +0200] "POST /wp-login.php HTTP/2.0" 200 12510 "https://dev.yepngo.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 176 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.248

🇨🇳 117.141.193.20

🇧🇬 109.160.32.81

🇮🇹 82.90.116.216

🇺🇸 74.208.112.145

🇹🇭 49.0.82.4

🇮🇳 2404:6800:4000:1004::12a

🇺🇸 205.210.31.56

🇧🇷 187.110.238.50

🇪🇨 181.232.253.29

🇹🇷 176.234.62.118

🇫🇷 161.97.182.197

🇺🇸 136.117.220.234

🇨🇳 122.194.9.152

🇧🇬 109.160.32.48

🇲🇲 103.89.49.28

🇧🇷 45.166.33.126

🇰🇷 43.203.249.230

🇫🇷 31.56.58.167

🇻🇳 27.118.20.168