JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.168.66.246

103.168.66.246 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%

ISP	DiGiVPS.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142430
Hostname(s)	246.66.168.103.in-addr.arpa.digivps.com
Domain Name	digivps.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.168.66.246

Whois 103.168.66.246

IP Abuse Reports for 103.168.66.246:

This IP address has been reported a total of 23 times from 22 distinct sources. 103.168.66.246 was first reported on June 28th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 diego021	2026-07-02 14:23:18 (5 hours ago)	103.168.66.246 135.181.251.148 - [02/Jul/2026:09:23:17 -0500] "GET /.env.prod HTTP/1.1" 404 158 "-" ... show more 103.168.66.246 135.181.251.148 - [02/Jul/2026:09:23:17 -0500] "GET /.env.prod HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 103.168.66.246 135.181.251.148 - [02/Jul/2026:09:23:17 -0500] "GET /config/database.yml HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 103.168.66.246 135.181.251.148 - [02/Jul/2026:09:23:17 -0500] "GET /config/credentials.yml.enc HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 103.168.66.246 135.181.251.148 - [02/Jul/2026:09:23:17 -0500] "GET /application.properties HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" ... show less	Web App Attack
🇩🇪 baltic-lab.com	2026-07-01 21:33:30 (22 hours ago)	Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked ... show more Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇩🇪 www.mammazone.it	2026-07-01 20:18:37 (23 hours ago)	[Wed Jul 01 22:18:19.881076 2026] [access_compat:error] [pid 372118] [client 103.168.66.246:57951] A ... show more [Wed Jul 01 22:18:19.881076 2026] [access_compat:error] [pid 372118] [client 103.168.66.246:57951] AH01797: client denied by server configuration: /var/www/fabiodirauso.it/next.config.js [Wed Jul 01 22:18:37.170182 2026] [access_compat:error] [pid 484428] [client 103.168.66.246:61888] AH01797: client denied by server configuration: /var/www/fabiodirauso.it/Web.config ... show less	Hacking
🇩🇪 todix	2026-07-01 18:49:19 (1 day ago)	Web App Attack Exploid from 103.168.66.246	Web App Attack
🇬🇧 venus.launch.bz	2026-07-01 16:15:42 (1 day ago)	(gohttpua) Bad UA Go-http-client from 103.168.66.246 (US/United States/246.66.168.103.in-addr.arpa.d ... show more (gohttpua) Bad UA Go-http-client from 103.168.66.246 (US/United States/246.66.168.103.in-addr.arpa.digivps.com) show less	Hacking
🇫🇷 Baking333	2026-07-01 14:28:22 (1 day ago)	[redacted] 103.168.66.246 - - [01/Jul/2026:15:28:18 +0100] "GET /.[redacted] HTTP/1.1" 307 379 "-" " ... show more [redacted] 103.168.66.246 - - [01/Jul/2026:15:28:18 +0100] "GET /.[redacted] HTTP/1.1" 307 379 "-" "Go-http-client/1.1" [redacted] 103.168.66.246 - - [01/Jul/2026:15:28:18 +0100] "GET /.[redacted] HTTP/1.1" 307 379 "-" "python-requests/2.31.0" show less	Bad Web Bot Web App Attack
🇵🇱 TaKeN	2026-07-01 04:19:19 (1 day ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 4 matching blocked event(s) between 2026-07-01T06:19:19+02:00 and 2026-07-01T06:19:19+02:00. Sample requested paths: /docker.env, /.secret, /application.properties, /wp-config.php.old. show less	Web App Attack Hacking
🇩🇪 [email protected]	2026-07-01 03:06:12 (1 day ago)	Brute force 95 attempts	DDoS Attack SQL Injection Brute-Force SSH
🇩🇪 Progetto1	2026-07-01 02:29:02 (1 day ago)	Detected via HAProxyScanner at 2026-07-01 02:29:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-07-01 02:29:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇩🇪 Melle	2026-06-30 19:15:07 (2 days ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-sensitive-files \| 103.168.66.246 triggered 5 even ... show more Blocked by CrowdSec \| Scenario: crowdsecurity/http-sensitive-files \| 103.168.66.246 triggered 5 events \| Detected: 2026-06-30T19:15:06.563949291Z show less	Web App Attack Hacking
🇨🇴 adalbertoreyes.org	2026-06-30 17:21:50 (2 days ago)	CategoryPortScan	Port Scan
🇺🇸 Rayulcifer	2026-06-30 16:47:07 (2 days ago)	103.168.66.246 - - [30/Jun/2026:11:47:06 -0500] "GET /.env.bkp HTTP/1.1" 200 1139 "-" "Mozilla/5.0 ( ... show more 103.168.66.246 - - [30/Jun/2026:11:47:06 -0500] "GET /.env.bkp HTTP/1.1" 200 1139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇳🇱 0xffffffff	2026-06-30 15:26:00 (2 days ago)	[2026-06-30 18:25:58.906502] [authz_core:error] [pid 1236583:tid 136825008010944] [client 103.168.66 ... show more [2026-06-30 18:25:58.906502] [authz_core:error] [pid 1236583:tid 136825008010944] [client 103.168.66.246:50515] AH01630: client denied by server configuration: /var/www/html/.aws , error_notes:wrong-host , URI:'/.aws/credentials' [2026-06-30 18:25:58.918239] [authz_core:error] [pid 1236583:tid 136825016403648] [client 103.168.66.246:65462] AH01630: client denied by server configuration: /var/www/html/public , error_notes:wrong-host , URI:'/public/.env' [2026-06-30 18:25:58.919582] [authz_core:error] [pid 1236583:tid 136824437601984] [client 103.168.66.246:65455] AH01630: client denied by server configuration: /var/www/html/backend , error_notes:wrong-host , URI:'/backend/.env' [2026-06-30 18:25:58.920182] [authz_core:error] [pid 1236583:tid 136825147225792] [client 103.168.66.246:62470] AH01630: client denied by server configuration: /var/www/html/.env.backup.old , error_notes:wrong-host , URI:'/.env.backup.old' [2026-06-30 18:25:58.920541] [authz_core:error] [pid 1236583:tid 136824949262016] [client 103.168. show less	Web App Attack Bad Web Bot
Anonymous	2026-06-30 14:11:13 (2 days ago)	[Tue Jun 30 16:11:12.687844 2026] [authz_core:error] [pid 523155:tid 523155] [client 103.168.66.246: ... show more [Tue Jun 30 16:11:12.687844 2026] [authz_core:error] [pid 523155:tid 523155] [client 103.168.66.246:61615] AH01630: client denied by server configuration: /var/lib/roundcube/public_html/server-status [Tue Jun 30 16:11:12.821338 2026] [authz_core:error] [pid 523169:tid 523169] [client 103.168.66.246:61603] AH01630: client denied by server configuration: /var/lib/roundcube/public_html/.htaccess [Tue Jun 30 16:11:12.974369 2026] [authz_core:error] [pid 523159:tid 523159] [client 103.168.66.246:58596] AH01630: client denied by server configuration: /var/lib/roundcube/public_html/.htpasswd ... show less	Hacking Web App Attack
🇸🇬 serverutama	2026-06-30 14:03:27 (2 days ago)	fail2ban[nginx-scanner]: scanning path sensitif (.git/.env/wp-config/secrets/dll).	Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 139.59.18.80

🇨🇳 223.109.252.176

🇬🇧 134.122.106.248

🇳🇱 134.122.58.174

🇨🇳 114.218.57.21

🇺🇸 66.132.195.87

🇸🇬 43.173.180.216

🇮🇪 34.254.66.226

🇮🇳 20.219.91.90

🇬🇧 195.96.139.166

🇫🇮 147.185.133.197

🇯🇵 133.175.179.150

🇦🇺 104.253.206.239

🇹🇭 101.51.52.191

🇺🇸 76.79.213.69

🇸🇬 43.173.180.194

🇯🇵 13.231.189.234

🇧🇷 200.219.200.16

🇸🇪 192.71.224.103

🇮🇳 182.18.161.165