JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 108.160.128.179

108.160.128.179 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 48%: ?

48%

ISP	Vultr Holdings, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS20473
Hostname(s)	108.160.128.179.vultrusercontent.com
Domain Name	vultr.com
Country	🇯🇵 Japan
City	Oi, Saitama

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 108.160.128.179

Whois 108.160.128.179

IP Abuse Reports for 108.160.128.179:

This IP address has been reported a total of 25 times from 16 distinct sources. 108.160.128.179 was first reported on December 24th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-07-17 18:01:44 (2 days ago)	Web application attack detected	Hacking Web App Attack
🇨🇭 4server	2026-07-17 03:47:47 (2 days ago)	[FriJul1705:47:39.9659982026][security2:error][pid2694685:tid2695057][client108.160.128.179:0]ModSec ... show more [FriJul1705:47:39.9659982026][security2:error][pid2694685:tid2695057][client108.160.128.179:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\\|\\\\\\\\bnaabu\\\\\\\\b\\|\\\\\\\\bffuf\\\\\\\\b\\|\\\\\\\\bgobuster\\\\\\\\b\\|\\\\\\\\bferoxbuster\\\\\\\\b\\|\\\\\\\\bwfuzz\\\\\\\\b\\|\\\\\\\\bjaeles\\\\\\\\b\\|\\\\\\\\bzgrab2\?\\\\\\\\b\\|\\\\\\\\bcommix\\\\\\\\b\\|\\\\\\\\bxsstrike\\\\\\\\b\\|\\\\\\\\bkiterunner\\\\\\\\b\\|\(\?:\^\\|[/]\)katana\(\?:/\\|\\\\\\\\b\)\\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"ticinoscout.ch\"][uri\"/\"][unique_id\"alml23Bu4coI2W26F6LDewAAAVM\"] show less	Hacking Web App Attack
🇩🇪 filstal.org	2026-07-16 22:16:28 (2 days ago)	Bad bot activity detected (automated scraping/probing).	Bad Web Bot Web App Attack
🇬🇧 Oakley	2026-07-16 18:03:11 (3 days ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇦🇺 paulshipley.com.au	2026-07-16 17:34:02 (3 days ago)	[Fri Jul 17 03:34:01.882509 2026] [security2:error] [pid 528434] [client 108.160.128.179:43154] [cli ... show more [Fri Jul 17 03:34:01.882509 2026] [security2:error] [pid 528434] [client 108.160.128.179:43154] [client 108.160.128.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/"] [unique_id "alkWCZjhBSBcas-TDhyUHwAAAAE"] ... show less	Web App Attack
🇨🇭 blinx	2026-07-08 09:03:22 (1 week ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
🇮🇱 spd.co.il	2026-06-30 22:02:30 (2 weeks ago)	Web application attack detected	Hacking Web App Attack
🇨🇭 4server	2026-06-30 18:22:10 (2 weeks ago)	[TueJun3020:22:04.9466222026][security2:error][pid173061:tid173159][client108.160.128.179:0]ModSecur ... show more [TueJun3020:22:04.9466222026][security2:error][pid173061:tid173159][client108.160.128.179:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\bhttpx\\\\\\\\b\\|\\\\\\\\bnaabu\\\\\\\\b\\|\\\\\\\\bffuf\\\\\\\\b\\|\\\\\\\\bgobuster\\\\\\\\b\\|\\\\\\\\bferoxbuster\\\\\\\\b\\|\\\\\\\\bwfuzz\\\\\\\\b\\|\\\\\\\\bjaeles\\\\\\\\b\\|\\\\\\\\bzgrab2\?\\\\\\\\b\\|\\\\\\\\bcommix\\\\\\\\b\\|\\\\\\\\bxsstrike\\\\\\\\b\\|\\\\\\\\bkiterunner\\\\\\\\b\\|\(\?:\^\\|[/]\)katana\(\?:/\\|\\\\\\\\b\)\\|\\\\\\\\bkr/\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"70\"][id\"338800\"][rev\"2\"][msg\"Atomicorp.comWAFRules:Blockedrecon/fuzzUA\"][severity\"CRITICAL\"][hostname\"giuristifriburgo.ch\"][uri\"/\"][unique_id\"akQJTFwT1Fr8jhpE2GXqKwAAARU\"] show less	Hacking Web App Attack
🇩🇪 Carsten	2026-06-27 09:05:43 (3 weeks ago)	Bad web bot [httpx - Open-source project (github.com/projectdiscovery/httpx)]	Bad Web Bot
Anonymous	2026-06-27 00:11:52 (3 weeks ago)	Automated report (2026-06-27T00:11:52+00:00). Unauthorised vulnerability scanner detected.	Hacking Bad Web Bot Web App Attack Open Proxy
🇺🇸 TPI-Abuse	2026-06-01 02:54:33 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 108.160.128.179 (108.160.128.179.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 108.160.128.179 (108.160.128.179.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:54:24.987255 2026] [security2:error] [pid 26254:tid 26254] [client 108.160.128.179:40578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconconstructors.com"] [uri "/wp-config.php.save.1"] [unique_id "ahz0YJNDNrR9SOnujb7L-wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-30 09:33:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 108.160.128.179 (108.160.128.179.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 108.160.128.179 (108.160.128.179.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 05:32:56.195396 2026] [security2:error] [pid 11663:tid 11663] [client 108.160.128.179:47040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humbliaslaw.com"] [uri "/wp-config.php.bak"] [unique_id "ahquyNtvSkjmDnT_OyM1_gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-25 03:30:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 108.160.128.179 (108.160.128.179.vultruserconte ... show more (mod_security) mod_security (id:210492) triggered by 108.160.128.179 (108.160.128.179.vultrusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 24 23:29:56.139704 2026] [security2:error] [pid 7424:tid 7424] [client 108.160.128.179:40686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.studioyau.com"] [uri "/.git/config"] [unique_id "ahPCNN-lxuAgGKgQiHLAWwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-05-24 17:45:02 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 Carsten	2026-01-28 14:42:05 (5 months ago)	bad web bot	Bad Web Bot

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 74.91.200.217

🇭🇰 45.142.154.91

🇺🇸 20.168.6.241

🇿🇦 196.192.181.202

🇺🇸 193.56.116.228

🇺🇸 100.40.56.110

🇷🇴 92.118.39.14

🇺🇸 66.132.195.67

🇹🇼 60.250.246.239

🇭🇰 45.142.154.88

🇭🇰 45.142.154.60

🇧🇷 45.70.131.21

🇺🇸 34.181.216.114

🇻🇳 27.71.230.31

🇭🇰 199.45.155.70

🇩🇪 130.12.182.26

🇺🇸 66.240.236.119

🇭🇰 45.142.154.44

🇭🇰 45.142.154.34

🇨🇮 154.0.30.137