JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.66.121.226

3.66.121.226 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 95%: ?

95%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-66-121-226.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.66.121.226

Whois 3.66.121.226

IP Abuse Reports for 3.66.121.226:

This IP address has been reported a total of 34 times from 19 distinct sources. 3.66.121.226 was first reported on April 14th 2022, and the most recent report was 14 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 infra-monitor	2026-07-27 18:00:04 (14 minutes ago)	Automated ban via infra-monitor: suspicious-probe, crowdsecurity/http-probing	Port Scan Web App Attack
🇺🇸 pixiekat	2026-07-27 17:37:18 (37 minutes ago)	[Mon Jul 27 17:37:17.745750 2026] [authz_core:error] [pid 491878:tid 491926] [client 3.66.121.226:43 ... show more [Mon Jul 27 17:37:17.745750 2026] [authz_core:error] [pid 491878:tid 491926] [client 3.66.121.226:43056] AH01630: client denied by server configuration: /var/www/html/ [Mon Jul 27 17:37:17.889826 2026] [authz_core:error] [pid 491878:tid 491911] [client 3.66.121.226:43056] AH01630: client denied by server configuration: /var/www/html/ [Mon Jul 27 17:37:17.985882 2026] [authz_core:error] [pid 491878:tid 491913] [client 3.66.121.226:43056] AH01630: client denied by server configuration: /var/www/html/ [Mon Jul 27 17:37:18.084732 2026] [authz_core:error] [pid 491878:tid 491930] [client 3.66.121.226:43056] AH01630: client denied by server configuration: /var/www/html/ [Mon Jul 27 17:37:18.290202 2026] [authz_core:error] [pid 491878:tid 491915] [client 3.66.121.226:43056] AH01630: client denied by server configuration: /var/www/html/ ... show less	Brute-Force
🇳🇱 debestelapp	2026-07-27 16:40:05 (1 hour ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 14:11:46 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:11:39.038626 2026] [security2:error] [pid 2693023:tid 2693038] [client 3.66.121.226:60316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magazineofwallstreet.com"] [uri "/.git/config"] [unique_id "amdnGxDK0Oes-JjPOYkVkgAAAMw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 13:55:54 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:55:47.104409 2026] [security2:error] [pid 15702:tid 15702] [client 3.66.121.226:49114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magazine.angelabcomics.com"] [uri "/.git/config"] [unique_id "amdjY2BF4yCDysoydfhm0AAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 palla89	2026-07-27 12:43:48 (5 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 3.66.121.226 (DE/Germany/ec2-3-66-121-2 ... show more (mod_security) mod_security triggered on hostname [redacted] 3.66.121.226 (DE/Germany/ec2-3-66-121-226.eu-central-1.compute.amazonaws.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-07-27 12:35:26 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:35:20.867284 2026] [security2:error] [pid 582011:tid 582011] [client 3.66.121.226:57452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magacine.tv"] [uri "/.git/config"] [unique_id "amdQiFFUaDlrqfNNpC_56QAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 11:25:48 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 07:25:41.232678 2026] [security2:error] [pid 1196571:tid 1196571] [client 3.66.121.226:51194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maffiniandbearce.com"] [uri "/.git/config"] [unique_id "amdANZkAJypZo9T-srIxYQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 10:49:29 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:49:23.797410 2026] [security2:error] [pid 22551:tid 22558] [client 3.66.121.226:50050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maestrosoler.com"] [uri "/.git/config"] [unique_id "amc3s5qC1ZzkA4a4RC1enQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 sc user	2026-07-27 09:43:31 (8 hours ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇳🇱 Site.eu	2026-07-27 09:08:54 (9 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇷 masterguru	2026-07-27 07:10:48 (11 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-27 04:43:25 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.com ... show more (mod_security) mod_security (id:210492) triggered by 3.66.121.226 (ec2-3-66-121-226.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 00:43:20.423513 2026] [security2:error] [pid 29335:tid 29335] [client 3.66.121.226:48974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonjazzorchestra.com"] [uri "/.git/config"] [unique_id "ambh6HwO7uYlfTYWZtfruwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 bigscoots.com	2026-07-26 07:05:37 (1 day ago)	(PERMBLOCK) 3.66.121.226 (DE/Germany/ec2-3-66-121-226.eu-central-1.compute.amazonaws.com) has had mo ... show more (PERMBLOCK) 3.66.121.226 (DE/Germany/ec2-3-66-121-226.eu-central-1.compute.amazonaws.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Brute-Force SSH
🇿🇦 conure	2026-07-26 03:41:53 (1 day ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.237.155.240

🇬🇧 35.203.211.196

🇨🇳 182.118.64.225

🇺🇸 170.130.204.18

🇹🇷 85.106.134.107

🇺🇸 76.83.23.100

🇷🇺 46.160.165.239

🇺🇸 35.130.111.98

🇨🇳 27.8.127.155

🇧🇷 205.210.31.252

🇩🇪 185.220.101.152

🇮🇳 182.18.139.237

🇺🇦 176.102.223.60

🇯🇴 176.29.231.250

🇺🇸 104.140.148.58

🇺🇸 103.234.62.31

🇯🇵 85.131.196.238

🇳🇱 45.148.10.157

🇺🇸 216.25.89.138

🇵🇰 119.155.192.69