JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.71.244.234

66.71.244.234 was found in our database!

This IP was reported 170 times. Confidence of Abuse is 0%: ?

ISP	Performive LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS46562
Hostname(s)	nrgsrvr.nrgwebservers.com
Domain Name	performive.com
Country	🇺🇸 United States of America
City	Marietta, Georgia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.71.244.234

Whois 66.71.244.234

IP Abuse Reports for 66.71.244.234:

This IP address has been reported a total of 170 times from 63 distinct sources. 66.71.244.234 was first reported on January 16th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2024-02-14 06:02:49 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 66.71.244.234 (nrgsrvr.nrgwebservers.com): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.71.244.234 (nrgsrvr.nrgwebservers.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 14 01:02:43.574379 2024] [security2:error] [pid 31839] [client 66.71.244.234:55504] [client 66.71.244.234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ronniescedarinn.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ronniescedarinn.com"] [uri "/mailto:[email protected]"] [unique_id "ZcxXg86ithfFPPyXFwtaZAAAABc"], referer: http://ronniescedarinn.com/contact_us.htm show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 neo72	2023-10-01 06:12:38 (2 years ago)	Spam	Email Spam
🇯🇵 stfw	2023-06-06 01:24:43 (3 years ago)	587/tcp 110/tcp... [2023-05-02/06-06]1175pkt,2pt.(tcp)	Port Scan
🇺🇸 nehost.de	2023-06-01 01:40:06 (3 years ago)	66.71.244.234 unauthorized	Brute-Force
🇺🇸 pccolella	2023-05-31 18:44:46 (3 years ago)	2023-05-24 04:07:20,804 WARN [qtp891095110-24479:smtp://mail.hermescis.com:7073/service/admin/soap/ ... show more 2023-05-24 04:07:20,804 WARN [qtp891095110-24479:smtp://mail.hermescis.com:7073/service/admin/soap/] [name=info@forsheriff.com;oip=66.71.244.234;oport=41549;oproto=smtp;soapId=1a47e2b2;] security - cmd=Auth; account=info@forsheriff.com; protocol=soap; error=authentication failed for [info@*forsheriff.com], invalid password; show less	Hacking Brute-Force
🇹🇷 cagatayakinci.com	2023-05-31 17:38:34 (3 years ago)	Smtp Brute Force Attack was Blocked. IP has been banned for 300 minutes Çarşamba, 31 Mayıs 2023 08:3 ... show more Smtp Brute Force Attack was Blocked. IP has been banned for 300 minutes Çarşamba, 31 Mayıs 2023 08:38 ÖS show less	Brute-Force
🇺🇸 etu brutus	2023-05-31 16:45:23 (3 years ago)	66.71.244.234 has been banned for [Control Panel abuse] ...	Hacking Brute-Force
🇺🇸 imgzit	2023-05-31 03:39:01 (3 years ago)	(smtpauth) Failed SMTP AUTH login from 66.71.244.234 (US/United States/nrgsrvr.nrgwebservers.com): ; ... show more (smtpauth) Failed SMTP AUTH login from 66.71.244.234 (US/United States/nrgsrvr.nrgwebservers.com): ; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-05-30 20:38:59 login authenticator failed for nrgsrvr.nrgwebservers.com (ADMIN) [66.71.244.234]: 535 Incorrect authentication data ([email protected]) show less	Brute-Force
🇩🇪 mxinfra	2023-05-30 20:07:17 (3 years ago)	Fail2Ban triggered by postfix[mode=aggressive] Tue 30 May 2023 10:07:17 PM CEST	Hacking Brute-Force Web App Attack
🇺🇸 carlos1001	2023-05-30 07:49:03 (3 years ago)	2023-05-30T02:49:02.320273mail001 postfix/submission/smtpd[615095]: warning: nrgsrvr.nrgwebservers.c ... show more 2023-05-30T02:49:02.320273mail001 postfix/submission/smtpd[615095]: warning: nrgsrvr.nrgwebservers.com[66.71.244.234]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2023-05-30T02:49:02.342215mail001 postfix/submission/smtpd[615095]: disconnect from nrgsrvr.nrgwebservers.com[66.71.244.234] ehlo=2 starttls=1 auth=0/1 quit=1 commands=4/5 ... show less	Email Spam Brute-Force
🇺🇸 etu brutus	2023-05-30 03:11:05 (3 years ago)	66.71.244.234 has been banned for [Control Panel abuse] ...	Hacking Brute-Force
🇯🇵 stfw	2023-05-29 23:24:27 (3 years ago)	587/tcp 110/tcp... [2023-05-02/29]667pkt,2pt.(tcp)	Port Scan
🇺🇸 dondessert.com	2023-05-29 09:12:56 (3 years ago)	May 24 23:06:43 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty ... show more May 24 23:06:43 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=66.71.244.234 May 29 05:12:54 mail auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=info rhost=66.71.244.234 ... show less	Brute-Force
🇺🇸 etu brutus	2023-05-28 23:56:35 (3 years ago)	66.71.244.234 has been banned for [Control Panel abuse] ...	Hacking Brute-Force
Anonymous	2023-05-28 20:23:26 (3 years ago)	$f2bV_matches	Brute-Force

Showing 1 to 15 of 170 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 212.104.88.237

🇧🇴 200.58.166.42

🇨🇱 200.30.194.215

🇦🇿 185.143.197.45

🇺🇸 154.3.40.153

🇮🇩 139.255.254.163

🇵🇭 131.226.103.75

🇺🇸 104.165.0.152

🇯🇵 103.143.72.165

🇳🇬 102.92.22.164

🇺🇸 65.49.1.152

🇨🇦 34.152.29.168

🇮🇩 34.128.117.132

🇰🇷 34.64.203.83

🇳🇵 27.34.65.30

🇹🇭 210.1.59.163

🇲🇽 189.165.26.77

🇨🇴 181.55.23.79

🇮🇩 180.242.71.11

🇺🇸 178.171.75.162