JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.168.66.178

103.168.66.178 was found in our database!

This IP was reported 429 times. Confidence of Abuse is 100%: ?

100%

ISP	DiGiVPS.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142430
Hostname(s)	178.66.168.103.in-addr.arpa.digivps.com
Domain Name	digivps.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.168.66.178

Whois 103.168.66.178

IP Abuse Reports for 103.168.66.178:

This IP address has been reported a total of 429 times from 233 distinct sources. 103.168.66.178 was first reported on May 8th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Scampi_ml	2026-06-10 13:01:46 (1 week ago)	5x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on ... show more 5x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on web application paths. show less	Bad Web Bot Web App Attack
🇫🇮 oh.mg	2026-06-05 16:32:30 (2 weeks ago)	[Fri Jun 05 18:31:44.199852 2026] [security2:error] [pid 1394572:tid 1394579] [client 103.168.66.178 ... show more [Fri Jun 05 18:31:44.199852 2026] [security2:error] [pid 1394572:tid 1394579] [client 103.168.66.178:20368] [client 103.168.66.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/"] [unique_id "aiL58OHLI-B2flI81wdTegAAAYU"] [Fri Jun 05 18:32:29.945494 2026] [security2:error] [pid 1394572:tid 1394590] [client 103.168.66.178:34704] [client 103.168.66.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly- ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-05 11:32:51 (2 weeks ago)	bot net	DNS Poisoning
🇦🇺 FireGuard Server	2026-06-05 06:25:06 (2 weeks ago)	Blocked by OPNsense firewall; 60 hits, proto=tcp, ports=443	Port Scan Hacking
🇬🇧 Axel	2026-06-02 01:17:59 (2 weeks ago)	Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by pol ... show more Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by policy\|\|hotdog.host\|F\|2 Phase: 2 Severity: CRITICAL URI: /wp-content/debug.log Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇩🇪 Kreapptivo	2026-06-02 01:11:11 (2 weeks ago)	[02/Jun/2026:03:11:10 +0200] Web-Request: "GET /cgi-bin/php", User-Agent: "Mozilla/5.0 (Windows NT 1 ... show more [02/Jun/2026:03:11:10 +0200] Web-Request: "GET /cgi-bin/php", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-01 19:54:29 (2 weeks ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇻🇳 trung.fun	2026-06-01 12:36:08 (2 weeks ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
Anonymous	2026-06-01 09:18:44 (2 weeks ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 74800. Types: Client Management(2), Block IP List(2) ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 74800. Types: Client Management(2), Block IP List(2). Origin: United States. show less	Web App Attack
🇩🇪 on-com	2026-06-01 08:21:13 (2 weeks ago)	URL scan	Brute-Force Web App Attack
Anonymous	2026-06-01 04:02:06 (2 weeks ago)	(caddyscan) Scanner path probe from 103.168.66.178 (178.66.168.103.in-addr.arpa.digivps.com): 5 in t ... show more (caddyscan) Scanner path probe from 103.168.66.178 (178.66.168.103.in-addr.arpa.digivps.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env.local HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env.backup HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env.dev HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //server-status HTTP/1.1" show less	Port Scan
🇺🇸 rdpguard.com	2026-06-01 03:51:48 (2 weeks ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇳🇱 Site.eu	2026-06-01 02:06:48 (2 weeks ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 i-turnradio.nl	2026-06-01 01:19:24 (2 weeks ago)	2026-06-01 @ 03:19:23 (CET) ~ Blocked for trying to access: /_ignition/execute-solution	Web App Attack
🇳🇱 e.fierstra	2026-06-01 01:17:59 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 429 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 172.232.108.36

🇺🇸 68.71.242.113

🇮🇳 59.98.148.5

🇮🇹 31.59.89.180

🇫🇷 85.217.140.46

🇨🇳 58.222.86.210

🇺🇸 5.181.171.245

🇧🇪 198.235.24.220

🇬🇧 195.96.139.84

🇨🇳 183.66.166.30

🇳🇱 176.65.132.17

🇺🇸 135.237.127.190

🇰🇷 14.206.12.13

🇧🇪 198.235.24.133

🇨🇳 183.131.109.166

🇩🇴 152.0.163.251

🇮🇳 122.187.173.10

🇨🇳 111.26.69.160

🇳🇱 78.142.18.172

🇳🇱 204.76.203.219