JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 72.207.33.64

72.207.33.64 was found in our database!

This IP was reported 296 times. Confidence of Abuse is 58%: ?

58%

ISP	Cox Communications
Usage Type	Fixed Line ISP
ASN	AS22773
Domain Name	cox.com
Country	🇺🇸 United States of America
City	San Diego, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 72.207.33.64

Whois 72.207.33.64

IP Abuse Reports for 72.207.33.64:

This IP address has been reported a total of 296 times from 105 distinct sources. 72.207.33.64 was first reported on July 18th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 iulianh	2026-08-31 08:36:47 (7 hours ago)	143,993	Brute-Force SSH
🇺🇸 SX Communications	2026-08-26 17:18:15 (4 days ago)	HTTP application-layer DoS / botnet traffic from 72.207.33.64: repeated high-cost dynamic page and f ... show more HTTP application-layer DoS / botnet traffic from 72.207.33.64: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host. show less	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-23 23:16:02 (1 week ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2026-08-17 16:22:51 (1 week ago)	fail2ban-dovecot	Email Spam Brute-Force
🇹🇷 muratkaya665	2026-08-16 20:31:34 (2 weeks ago)	IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: Malicious.HTTP.URI.Reques ... show more IPS Attack Blocked by server.mura****.com.tr Fortigate-80E. Attack Name: Malicious.HTTP.URI.Requests. Dest Port: 80. Service: HTTP. Message: web_server: Malicious.HTTP.URI.Requests. show less	Hacking
Anonymous	2026-08-12 18:30:58 (2 weeks ago)	Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.	Hacking
Anonymous	2026-08-12 18:01:48 (2 weeks ago)	Authentication failure	Brute-Force
Anonymous	2026-08-12 04:46:14 (2 weeks ago)	Forum/form spam	Web Spam
🇩🇪 ksol-hostmaster	2026-08-05 01:36:14 (3 weeks ago)	Aug 5 03:36:13 ksol dovecot[83114]: auth-worker(22749): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 5 03:36:13 ksol dovecot[83114]: auth-worker(22749): conn unix:auth-worker (uid=143): auth-worker<3>: sql(anonymized@email,72.207.33.64,<2TH3y0JYI4FIzyFA>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
Anonymous	2026-08-02 22:33:02 (4 weeks ago)	...	Brute-Force
🇷🇸 Smel	2026-08-01 12:34:19 (4 weeks ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
🇮🇩 sockominfo	2026-07-27 23:00:53 (1 month ago)	Zimbra: Login failures from malicious IP: 72.207.33.64. Threat Score: 6.3/10 (MEDIUM). Confidence: 4 ... show more Zimbra: Login failures from malicious IP: 72.207.33.64. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-07-27 22:00:08 (1 month ago)	Zimbra: Login failures from malicious IP: 72.207.33.64. Threat Score: 6/10 (MEDIUM). Reported by Tan ... show more Zimbra: Login failures from malicious IP: 72.207.33.64. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
Anonymous	2026-07-27 09:25:34 (1 month ago)	72.207.33.64 - - [27/Jul/2026:09:25:33 +0000] "GET /.env HTTP/1.1" 404 4154 "-" "Mozilla/5.0 (Window ... show more 72.207.33.64 - - [27/Jul/2026:09:25:33 +0000] "GET /.env HTTP/1.1" 404 4154 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 15:56:37 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 72.207.33.64 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 72.207.33.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 11:56:32.856675 2026] [security2:error] [pid 279459:tid 279459] [client 72.207.33.64:37643] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "answeringilliana.com"] [uri "/.env"] [unique_id "amTcsOuc9dT0efXGNGajfgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 296 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.117.132.229

🇺🇸 73.36.37.138

🇰🇷 220.119.37.141

🇨🇴 186.180.130.170

🇸🇮 185.97.52.101

🇳🇱 160.119.71.9

🇮🇹 151.21.130.143

🇺🇸 129.146.60.77

🇸🇬 114.119.159.226

🇺🇸 66.132.172.123

🇩🇪 64.89.163.80

🇸🇬 43.156.33.17

🇴🇲 37.40.41.186

🇮🇳 2401:4900:1c5e:c698:1c22:aae1:cca3:13f9

🇻🇪 190.97.240.61

🇭🇰 172.253.5.24

🇷🇺 95.84.192.53

🇰🇿 82.200.226.226

🇭🇰 43.129.193.109

🇨🇭 34.65.77.95