JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

66.225.238.173

Recent Activity

Abuse Confidence Score

25% Elevated

14 reports

11 reporters · latest 5 days ago

ISP: Internet Utilities NA LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS212238
Domain Name: iana.org
Country: 🇯🇵 Japan
City: Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

14 from 11 distinct reporters

First reported

December 14th 2025

Most recent report

5 days ago

Last 60 days

Top reporter locations 🇮🇹 Italy 2 🇺🇸 United States of America 2 🇨🇭 Switzerland 1

Most common categories Bad Web Bot 4 DDoS Attack 2 Web App Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 PT	2026-11-03 16:15:44 UTC · (5 days ago)	web app attack (botnet)	DDoS Attack Web App Attack
🇮🇹 A000Z	2026-10-31 08:51:44 UTC · (1 week ago)	Fail2Ban: 66.225.238.173 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇮🇹 A000Z	2026-10-15 01:04:04 UTC · (3 weeks ago)	Fail2Ban: 66.225.238.173 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36	Bad Web Bot
🇺🇸 1gz	2026-10-14 04:18:47 UTC · (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from JP. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /sport/ndodh-ne-angli-69-vjecarja-vdes-pasi-goditet-me-top-ne-koke/507276/kerko.php UA: Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko ... show more Triggered Cloudflare WAF (firewallCustom) from JP. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /sport/ndodh-ne-angli-69-vjecarja-vdes-pasi-goditet-me-top-ne-koke/507276/kerko.php UA: Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇭 backslash	2026-10-07 10:12:00 UTC · (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2026-09-21 06:20:01 UTC · (1 month ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇩🇪 LRob	2026-08-21 15:28:41 UTC · (2 months ago)	L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont-C ... show more L7 DDoS: distributed flood on a shop's faceted search — automated requests to search/sort URLs, one or two per address from thousands of addresses, no page assets loaded \| path: /18-velo-route \| query: q=Stock+magasin-Cycling+H%C3%A9nin%5C-Beaumont-Cycling+Montpellier/Mat%C3%A9riau-Aluminium/Taille-XS-XL/Famille-Metrix-Speester& show less	DDoS Attack Web App Attack
Anonymous	2026-08-14 14:02:25 UTC · (2 months ago)	Web attack	Bad Web Bot Web App Attack
Anonymous	2026-08-06 19:56:00 UTC · (3 months ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇫🇷 vtchost.com	2026-07-25 14:08:00 UTC · (3 months ago)	requested honeypot page - ignored robots.txt - scraping botnet or virus ...	Bad Web Bot Exploited Host
🇫🇷 masterguru	2026-07-18 03:45:56 UTC · (3 months ago)	Blocked scraper - old Chrome UA. Match of "rx (?i)(amazonbot\|bingbot\|googlebot\|yandexbot\|duckduckbot)" against "REQUEST_HEADERS:user-agent" required. (780532-133)	Hacking
🇺🇸 stechusa	2026-07-01 04:08:00 UTC · (4 months ago)	[Askari] \| country=JP \| Behavior: Slow-read attack	Bad Web Bot DDoS Attack
🇦🇺 prologic	2026-06-12 20:43:26 UTC · (4 months ago)	Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) ... show more Coordinated application-layer DDoS against git.mills.io (self-hosted Gitea), 2026-06-12 ~20:30-21:10 UTC. Deliberately expensive multi-label Gitea issue-search queries (/issues?type=all&state=closed&sort=...&labels=<multiple IDs>, ~60-113s CPU each) flooded the backend via proxy/hosting networks. ~36,700 source IPs, ~1 request per IP, identical TLS fingerprint (TLS1.3 0x1301) and one spoofed Chrome UA = single automated tool. show less	DDoS Attack Web App Attack
🇨🇭 backslash	2025-12-14 01:25:06 UTC · (10 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 213.171.25.255

🇨🇳 60.29.41.58

🇫🇷 51.75.27.218

🇺🇸 23.251.65.195

🇸🇦 5.163.144.3

🇵🇱 162.158.102.153

🇵🇱 162.158.102.152

🇺🇸 152.32.208.73

🇨🇳 119.45.21.146

🇨🇳 111.228.12.237

🇷🇺 37.77.110.221

🇨🇳 27.8.137.80

🇨🇳 211.137.24.101

🇺🇸 199.91.128.98

🇨🇭 80.89.208.110

🇸🇬 47.128.61.200

🇬🇧 46.101.26.111

🇺🇸 40.67.177.166

🇺🇸 206.189.79.128

🇺🇸 198.99.9.126