JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 3.66.236.81

3.66.236.81 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 66%: ?

66%

ISP	A100 ROW GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16509
Hostname(s)	ec2-3-66-236-81.eu-central-1.compute.amazonaws.com
Domain Name	amazon.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 3.66.236.81

Whois 3.66.236.81

IP Abuse Reports for 3.66.236.81:

This IP address has been reported a total of 21 times from 13 distinct sources. 3.66.236.81 was first reported on June 19th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 puddleduck	2026-06-30 19:32:00 (3 days ago)	WooCommerce Payments <= 5.6.1 Authentication Bypass and Privilege Escalation	Brute-Force Hacking
🇨🇿 lp	2026-06-28 16:51:25 (5 days ago)	Email account brute force: 1 attempts were recorded from 3.66.236.81 2026-06-28T17:48:14+02:00 warni ... show more Email account brute force: 1 attempts were recorded from 3.66.236.81 2026-06-28T17:48:14+02:00 warning: ec2-3-66-236-81.eu-central-1.compute.amazonaws.com[3.66.236.81]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
Anonymous	2026-06-28 16:31:28 (5 days ago)	Failed login attempt detected by Fail2Ban in plesk-postfix jail	Brute-Force
🇨🇿 lp	2026-06-27 01:51:30 (6 days ago)	Email account brute force: 1 attempts were recorded from 3.66.236.81 2026-06-27T03:19:19+02:00 warni ... show more Email account brute force: 1 attempts were recorded from 3.66.236.81 2026-06-27T03:19:19+02:00 warning: ec2-3-66-236-81.eu-central-1.compute.amazonaws.com[3.66.236.81]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇷🇴 iulianh	2026-06-27 01:31:22 (6 days ago)	25,465,587	Brute-Force SSH
🇮🇹 Progetto1	2026-06-25 17:55:04 (1 week ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 17:34:25 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compu ... show more (mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:34:19.986479 2026] [security2:error] [pid 18688:tid 18688] [client 3.66.236.81:34186] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|etudesoftware.com\|F\|2"] [data ".com_jce.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "etudesoftware.com"] [uri "/language/en-GB/en-GB.com_jce.ini"] [unique_id "aj1mm33IGbPbrwVb2NfGmAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 14:25:20 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compu ... show more (mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 10:25:14.399531 2026] [security2:error] [pid 11916:tid 11931] [client 3.66.236.81:33614] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|energy.brucejoell.com\|F\|2"] [data ".com_jce.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "energy.brucejoell.com"] [uri "/language/en-GB/en-GB.com_jce.ini"] [unique_id "aj06Sl66GcLYkUjEV6JNAQAAAU0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 14:08:09 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compu ... show more (mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 10:08:01.680449 2026] [security2:error] [pid 5473:tid 5473] [client 3.66.236.81:59376] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|encoreporchfest.info\|F\|2"] [data ".com_jce.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "encoreporchfest.info"] [uri "/language/en-GB/en-GB.com_jce.ini"] [unique_id "aj02QRzeisUsqumkzxwj8gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 12:30:17 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compu ... show more (mod_security) mod_security (id:210730) triggered by 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 08:30:13.285924 2026] [security2:error] [pid 13534:tid 13534] [client 3.66.236.81:52960] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|elevese.com\|F\|2"] [data ".com_jce.ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elevese.com"] [uri "/language/en-GB/en-GB.com_jce.ini"] [unique_id "aj0fVTCmRp3dnSOmgizsPAAAADE"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇾 lns.bz	2026-06-24 13:28:31 (1 week ago)	Too many 404 requests [BY]	Web App Attack
Anonymous	2026-06-22 09:23:01 (1 week ago)	ALTB WEBFORM SPAM 3.66.236.81 (ec2-3-66-236-81.eu-central-1.compute.amazonaws.com)	Web Spam
🇨🇿 lp	2026-06-21 18:20:05 (1 week ago)	Email account brute force: 2 attempts were recorded from 3.66.236.81 2026-06-21T19:40:52+02:00 warni ... show more Email account brute force: 2 attempts were recorded from 3.66.236.81 2026-06-21T19:40:52+02:00 warning: ec2-3-66-236-81.eu-central-1.compute.amazonaws.com[3.66.236.81]: SASL PLAIN authentication failed: authentication failure, [email protected] 2026-06-21T19:40:53+02:00 warning: ec2-3-66-236-81.eu-central-1.compute.amazonaws.com[3.66.236.81]: SASL PLAIN authentication failed: authentication failure, [email protected] show less	Brute-Force
🇫🇷 smtp.com.es	2026-06-21 15:12:55 (1 week ago)	Brute force attempt.	Brute-Force Email Spam
🇺🇸 nowyouknow	2026-06-21 13:11:48 (1 week ago)	(From [email protected]) Hello! 77777 Good luck :)	Phishing Web Spam

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.67.2.127

🇹🇼 128.14.229.76

🇳🇱 91.92.40.153

🇷🇺 78.138.168.46

🇺🇸 38.148.249.2

🇨🇳 222.90.58.208

🇦🇺 168.144.166.116

🇳🇱 91.92.40.10

🇵🇭 49.151.174.190

🇳🇱 45.148.10.67

🇧🇬 5.188.206.34

🇨🇳 220.203.230.188

🇭🇰 165.154.41.213

🇷🇺 154.90.70.254

🇮🇳 122.176.21.104

🇿🇦 102.64.42.248

🇳🇱 91.92.40.31

🇩🇪 77.7.242.184

🇺🇸 44.115.14.189

🇺🇸 44.52.176.170