JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.56.86.3

66.56.86.3 was found in our database!

This IP was reported 101 times. Confidence of Abuse is 22%: ?

22%

ISP	VPN Consumer Bratislava, Slovakia
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇸🇰 Slovakia
City	Bratislava, Bratislava Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.56.86.3

Whois 66.56.86.3

IP Abuse Reports for 66.56.86.3:

This IP address has been reported a total of 101 times from 27 distinct sources. 66.56.86.3 was first reported on April 13th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Futunk	2026-10-16 20:26:02 (12 hours ago)	Form spam (honeypot): POST /launch-notification	Web Spam
🇵🇱 Budyn	2026-10-13 00:21:28 (4 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: teddypot.online \| URI: /contact.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 \| BODY: name=Sophia+Harris&company_website=&email=mykytasdaniil%40gmail.com&message=I+would+like+more+information.+Please+contact+me+by+email+%E2%80%94+enterprise+digital+solutions. --- SPAM DATA --- (From: [email protected]) I would like more information. Please contact me by email — enterprise digital solutions. show less	Web Spam Web App Attack
🇩🇪 FeG Deutschland	2026-10-11 16:47:56 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇵🇱 Budyn	2026-10-06 22:45:58 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicite ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Web Spam (Form Abuse). Unsolicited bulk message (Form Spam) captured. Evidence: HOST: teddypot.space \| URI: /contact.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 \| BODY: name=Kevin+Martin&company_website=&email=ashleypaniora0%40gmail.com&message=I+would+like+more+information.+Please+contact+me+by+email+%E2%80%94+enterprise+digital+solutions. --- SPAM DATA --- (From: [email protected]) I would like more information. Please contact me by email — enterprise digital solutions. show less	Web Spam Web App Attack
🇬🇧 pinguin	2026-02-14 01:15:23 (8 months ago)	Triggered Cloudflare WAF (firewallManaged) from SK. Action taken: LOG Protocol: HTTP/2 (HEAD method) ... show more Triggered Cloudflare WAF (firewallManaged) from SK. Action taken: LOG Protocol: HTTP/2 (HEAD method) Endpoint: /bak/website.rar UA: Empty string This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Penny Packer	2026-02-12 19:02:07 (8 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2026-01-30 13:53:09 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.3 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 30 08:53:03.036469 2026] [security2:error] [pid 14207:tid 14207] [client 66.56.86.3:44293] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|jussetcotradinglimited.co\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jussetcotradinglimited.co"] [uri "/restore/backup.sql"] [unique_id "aXy3v9AjNuk7plBmyZpPvAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Penny Packer	2026-01-22 02:43:48 (8 months ago)	Fail2Ban apache-tripwires	Web App Attack
Anonymous	2026-01-15 05:00:10 (9 months ago)	BruteForce IMAP/POP3/SMTP	Brute-Force
🇩🇪 bescared	2026-01-06 08:14:32 (9 months ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
🇯🇵 Valhalla	2025-12-29 08:49:41 (9 months ago)	/bak/Archive.zip	Hacking Web App Attack
🇺🇸 Penny Packer	2025-12-29 03:43:50 (9 months ago)	Fail2Ban apache-tripwires	Web App Attack
🇺🇸 TPI-Abuse	2025-12-28 00:00:55 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 66.56.86.3 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210730) triggered by 66.56.86.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 27 19:00:48.251676 2025] [security2:error] [pid 9219:tid 9219] [client 66.56.86.3:64243] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|pellman-world.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pellman-world.com"] [uri "/old/mysql.sql"] [unique_id "aVBzMJYWSB1DYou6Ft_EwAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 David Ferneding	2025-12-26 09:04:55 (9 months ago)	Blocked by UFW (TCP on 80) Source port: 33415 TTL: 55 Packet length: 60 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 33415 TTL: 55 Packet length: 60 TOS: 0x00 This report (for 66.56.86.3) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 FeG Deutschland	2025-12-26 08:39:47 (9 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.138.170.70

🇹🇼 198.235.24.124

🇰🇿 185.206.32.100

🇹🇭 147.50.231.135

🇺🇸 143.198.175.169

🇨🇳 124.31.105.255

🇺🇸 107.0.200.227

🇺🇸 71.6.134.232

🇺🇸 31.132.55.184

🇨🇳 220.250.10.140

🇺🇸 205.210.31.39

🇨🇳 183.215.74.6

🇨🇳 182.119.230.141

🇰🇷 112.166.10.138

🇩🇪 89.56.169.117

🇳🇱 85.11.167.7

🇵🇰 72.255.26.113

🇺🇸 71.6.134.231

🇺🇸 71.6.134.230

🇺🇸 66.240.205.34