JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.172.66.70

167.172.66.70 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.172.66.70

Whois 167.172.66.70

IP Abuse Reports for 167.172.66.70:

This IP address has been reported a total of 61 times from 23 distinct sources. 167.172.66.70 was first reported on May 9th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 www.Examensfragen.de	2025-06-20 20:56:34 (1 year ago)		Web Spam Bad Web Bot
🇩🇪 conseilgouz	2025-06-13 19:29:49 (1 year ago)	ece-22 : 8G : REQUEST_URI error=>/sftp-config.json	Hacking
🇩🇪 FeG Deutschland	2025-06-13 19:07:34 (1 year ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇫🇮 oh.mg	2025-06-13 11:54:45 (1 year ago)	[Fri Jun 13 13:54:43.910000 2025] [security2:error] [pid 1856898:tid 1856929] [client 167.172.66.70: ... show more [Fri Jun 13 13:54:43.910000 2025] [security2:error] [pid 1856898:tid 1856929] [client 167.172.66.70:63888] [client 167.172.66.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.on.ca"] [uri "/sftp-config.json"] [unique_id "aEwRgx5lIQJKVATWC2E3swAAABU"] [Fri Jun 13 13:54:45.059632 2025] [security2:error] [pid 2059336:tid 2059349] [client 167.172.66.70:50308] [client 167.172.66.70] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev" ... show less	Bad Web Bot Web App Attack
🇫🇷 conseilgouz	2025-06-13 08:40:00 (1 year ago)	ame-Direct access to plugin not allowed	Hacking
🇸🇪 Xpektor	2025-06-13 05:06:00 (1 year ago)	Scanning for vulnerabilities	Hacking Web App Attack
🇫🇷 conseilgouz	2025-06-13 05:01:13 (1 year ago)	sce-22 : 8G : REQUEST_URI error=>/sftp-config.json	Hacking
🇫🇷 conseilgouz	2025-06-13 04:12:35 (1 year ago)	sae-22 : 8G : REQUEST_URI error=>/sftp-config.json	Hacking
🇨🇭 blinx	2025-06-13 03:39:31 (1 year ago)	Suspicious activity detected by Modsecurity	Web Spam Port Scan Hacking Bad Web Bot Web App Attack
🇫🇷 Savoie	2025-06-13 00:31:00 (1 year ago)	167.172.66.70 *.* - [13/Jun/2025:02:31:15 +0200] "GET /sftp-config.json HTTP/1.1" 302 224 "-" "M ... show more 167.172.66.70 *.* - [13/Jun/2025:02:31:15 +0200] "GET /sftp-config.json HTTP/1.1" 302 224 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 167.172.66.70 *.* - [13/Jun/2025:02:31:17 +0200] "GET /.vscode/sftp.json HTTP/1.1" 302 224 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-13 00:29:31 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 167.172.66.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.172.66.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 20:29:26.085087 2025] [security2:error] [pid 4142196:tid 4142196] [client 167.172.66.70:55144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calvarycavaliers.org"] [uri "/sftp-config.json"] [unique_id "aEtw5muNJLErOp9NdC3SRQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2025-06-13 00:05:30 (1 year ago)	Too many Status 40X (12)	Brute-Force Web App Attack
🇫🇷 Savoie	2025-06-12 22:55:00 (1 year ago)	167.172.66.70 *.* - [13/Jun/2025:00:55:25 +0200] "GET /sftp-config.json HTTP/1.1" 302 225 "-" "M ... show more 167.172.66.70 *.* - [13/Jun/2025:00:55:25 +0200] "GET /sftp-config.json HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 167.172.66.70 *.* - [13/Jun/2025:00:55:26 +0200] "GET /.vscode/sftp.json HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-12 20:33:56 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 167.172.66.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.172.66.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 16:33:51.220995 2025] [security2:error] [pid 993786:tid 993786] [client 167.172.66.70:53706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lunarinfrastructure.com"] [uri "/index.html/sftp-config.json"] [unique_id "aEs5r5kWt_Z9pL3F6G9pAgAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-06-12 19:44:09 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 167.172.66.70 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 167.172.66.70 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 12 15:44:02.394823 2025] [security2:error] [pid 1596516:tid 1596516] [client 167.172.66.70:52579] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffr.com"] [uri "/sftp-config.json"] [unique_id "aEsuAk5OcoDunxIxcOzzjgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 179.62.216.38

🇺🇸 173.255.221.52

🇸🇬 172.217.47.23

🇺🇸 138.197.195.247

🇫🇷 137.74.114.131

🇩🇪 91.239.211.68

🇯🇴 91.186.248.230

🇳🇱 77.83.240.70

🇺🇸 66.132.195.113

🇺🇸 2001:550:9005:2000::14

🇹🇼 220.128.136.163

🇧🇷 191.243.143.53

🇨🇱 191.115.176.189

🇨🇷 186.177.87.249

🇮🇳 182.95.181.26

🇮🇳 182.71.135.110

🇺🇸 173.239.240.35

🇩🇪 167.94.146.68

🇧🇷 164.163.14.24

🇵🇭 122.3.34.232