JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.3.225.66

201.3.225.66 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 67%: ?

67%

ISP	ipbnb
Usage Type	Data Center/Web Hosting/Transit
ASN	AS48031
Hostname(s)	vm23861.bit.hosting
Domain Name	ipbnb.com
Country	🇵🇱 Poland
City	Gdynia, Pomerania

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.3.225.66

Whois 201.3.225.66

IP Abuse Reports for 201.3.225.66:

This IP address has been reported a total of 20 times from 13 distinct sources. 201.3.225.66 was first reported on August 1st 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-13 16:23:00 (4 days ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇺🇸 xmission.com	2026-08-13 10:58:18 (4 days ago)	Blocked by UFW (TCP on 50001) Source port: 39332 TTL: 45 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50001) Source port: 39332 TTL: 45 Packet length: 60 TOS: 0x08 This report (for 201.3.225.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 big-cloud.nl	2026-08-12 22:12:24 (5 days ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 xmission.com	2026-08-12 05:01:18 (6 days ago)	Blocked by UFW (TCP on 9150) Source port: 44810 TTL: 48 Packet length: 60 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 9150) Source port: 44810 TTL: 48 Packet length: 60 TOS: 0x08 This report (for 201.3.225.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 LRob	2026-08-12 02:45:59 (6 days ago)	WordPress XML-RPC brute-force (repeated authentication attempts via xmlrpc.php) \| req: /xmlrpc.php \| ... show more WordPress XML-RPC brute-force (repeated authentication attempts via xmlrpc.php) \| req: /xmlrpc.php \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0 show less	Brute-Force Web App Attack
🇦🇺 oncord	2026-08-12 01:10:31 (6 days ago)	Form spam	Web Spam
🇩🇪 iGroupware	2026-08-11 06:47:50 (1 week ago)	[Invisible Captcha] Potential spam detected for IP 201.3.225.66. Timestamp threshold not reached (to ... show more [Invisible Captcha] Potential spam detected for IP 201.3.225.66. Timestamp threshold not reached (took 2s). show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-10 17:39:43 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 201.3.225.66 (vm23861.bit.hosting): 1 in the la ... show more (mod_security) mod_security (id:240335) triggered by 201.3.225.66 (vm23861.bit.hosting): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 10 13:39:35.363969 2026] [security2:error] [pid 3560604:tid 3560665] [client 201.3.225.66:49120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 201.3.225.66 (+1 hits since last alert)\|sunshinepumpers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sunshinepumpers.com"] [uri "/xmlrpc.php"] [unique_id "anoM11iP8MipzIvoG1L8xAAAAIE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-10 17:26:18 (1 week ago)	Blocked by UFW (TCP on 50003) Source port: 39580 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50003) Source port: 39580 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 201.3.225.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-10 03:22:18 (1 week ago)	Blocked by UFW (TCP on 50002) Source port: 47406 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50002) Source port: 47406 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 201.3.225.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Neosmith20	2026-08-10 02:53:08 (1 week ago)	Knock-Knock honeypot brute-force: proto8 (1 total hits)	Brute-Force
🇳🇱 sernate	2026-08-09 12:51:29 (1 week ago)	(XMLRPC) WP XMLPRC Attack 201.3.225.66 (PL/Poland/vm23861.bit.hosting): 5 in the last 3600 secs; Por ... show more (XMLRPC) WP XMLPRC Attack 201.3.225.66 (PL/Poland/vm23861.bit.hosting): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force
🇵🇹 Subnet Shadow Specter	2026-08-08 11:05:25 (1 week ago)	[CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (T ... show more [CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (Tor Exit Node). [Method]: => GET. [Request]: / [User-Agent]: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36". [OS]: Apple. [IP Address]: 201.3.225.66. [IoA Datetime]: 2026-08-08 11:06:24 UTC +1. show less	Bad Web Bot Hacking Open Proxy Spoofing Web App Attack
🇵🇹 Subnet Shadow Specter	2026-08-08 10:06:19 (1 week ago)	[CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (T ... show more [CRITICAL][Security Alert] Honeypot decoy endpoint triggered; malicious intent signature detected (Tor Exit Node). [Method]: => GET. [Request]: / [User-Agent]: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" [OS]: Unknown. [IP Address]: 201.3.225.66. [IoA Datetime]: 2026-08-08 11:06:18 UTC +1. show less	Open Proxy Port Scan Hacking Spoofing Bad Web Bot Exploited Host Web App Attack
Anonymous	2026-08-07 18:00:28 (1 week ago)	Detected by CrowdSec: crowdsecurity/http-bad-user-agent	Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 206.189.149.201

🇪🇹 196.191.212.112

🇩🇪 176.65.139.196

🇫🇷 172.68.151.116

🇺🇸 91.230.168.179

🇺🇸 2607:f8b0:4001:c72::122

🇻🇪 186.92.122.238

🇺🇸 147.185.132.138

🇺🇸 134.122.125.153

🇸🇬 118.26.111.107

🇳🇱 91.92.42.10

🇳🇱 45.148.10.152

🇵🇪 38.25.85.84

🇮🇩 36.64.131.68

🇬🇧 35.203.211.168

🇬🇧 35.203.211.14

🇺🇸 20.124.80.111

🇬🇧 2a06:4880:a000::be

🇱🇹 213.176.26.44

🇹🇼 198.235.24.30