JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.99.78.16

167.99.78.16 was found in our database!

This IP was reported 4,432 times. Confidence of Abuse is 81%: ?

81%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.99.78.16

Whois 167.99.78.16

IP Abuse Reports for 167.99.78.16:

This IP address has been reported a total of 4,432 times from 827 distinct sources. 167.99.78.16 was first reported on May 6th 2022, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-09 08:55:38 (1 day ago)	Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 08:27:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 167.99.78.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 167.99.78.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:27:36.481302 2026] [security2:error] [pid 6601:tid 6601] [client 167.99.78.16:58785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consolidatedoperationsgroup.com"] [uri "/sftp-config.json"] [unique_id "ak9bePcfDdU95Yw1BPYZ_gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 06:35:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 167.99.78.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 167.99.78.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 02:35:23.264576 2026] [security2:error] [pid 12280:tid 12280] [client 167.99.78.16:59995] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "completemodular.com"] [uri "/sftp-config.json"] [unique_id "ak9BK38_p11eizn42oVh3QAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-07-09 04:17:21 (1 day ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 03:59:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 23:59:10.727987 2026] [security2:error] [pid 14296:tid 14296] [client 2002:a763:4e10::a763:4e10:55521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cliniquecavalancia.com"] [uri "/sftp-config.json"] [unique_id "ak8cjrwGavH3MkE1GMeFvgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 00:49:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 20:49:13.633577 2026] [security2:error] [pid 22774:tid 22774] [client 2002:a763:4e10::a763:4e10:52596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "copierscharlotte.com"] [uri "/sftp-config.json"] [unique_id "ak7wCRgcSp_BqZZofKqFZAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 23:05:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 167.99.78.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 167.99.78.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 19:05:34.518671 2026] [security2:error] [pid 26479:tid 26479] [client 167.99.78.16:58343] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "compformation.com"] [uri "/sftp-config.json"] [unique_id "ak7Xvuy34MNs7e6z69cUkAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-08 22:51:00 (1 day ago)	Multiple Violations by Bot	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 22:19:43 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 18:19:35.784272 2026] [security2:error] [pid 21444:tid 21444] [client 2002:a763:4e10::a763:4e10:59507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colbygrenier.com"] [uri "/sftp-config.json"] [unique_id "ak7M97bwkD_bBcSwICPjzwAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Lee Daniel	2026-07-08 22:02:34 (1 day ago)	167.99.78.16 - - [08/Jul/2026:18:02:26 -0400] "GET /.vscode/ftp-sync.json HTTP/1.1" 404 27421 "-" "M ... show more 167.99.78.16 - - [08/Jul/2026:18:02:26 -0400] "GET /.vscode/ftp-sync.json HTTP/1.1" 404 27421 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 167.99.78.16 - - [08/Jul/2026:18:02:28 -0400] "GET /.sftp-config.json HTTP/1.1" 404 27417 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 167.99.78.16 - - [08/Jul/2026:18:02:30 -0400] "GET /ftp-sync.json HTTP/1.1" 404 27413 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 167.99.78.16 - - [08/Jul/2026:18:02:32 -0400] "GET /.ftp-sync.json HTTP/1.1" 404 27414 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 167.99.78.16 - - [08/Jul/2026:18:02:33 -0400] "GET /ftp-config.json HTTP/1.1" 404 27415 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 20:19:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 16:19:55.201987 2026] [security2:error] [pid 27026:tid 27026] [client 2002:a763:4e10::a763:4e10:50961] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coolerboxes.com"] [uri "/sftp-config.json"] [unique_id "ak6w62MZ-vbRT0stXl1rGAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-07-08 19:57:32 (1 day ago)	Deploy Config Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:42:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:42:47.359179 2026] [security2:error] [pid 13774:tid 13774] [client 2002:a763:4e10::a763:4e10:60158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comparevision.com"] [uri "/sftp-config.json"] [unique_id "ak6aJ1g99SKotNWZDN_D7wAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 15:12:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the l ... show more (mod_security) mod_security (id:210492) triggered by 2002:a763:4e10::a763:4e10 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 11:11:56.362364 2026] [security2:error] [pid 32231:tid 32231] [client 2002:a763:4e10::a763:4e10:52887] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cooteconsultinggroup.com"] [uri "/sftp-config.json"] [unique_id "ak5ovC70y6s1Iy1iBDKHBgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 conseilgouz	2026-07-08 14:21:29 (1 day ago)	coe-17 : Block hidden directories=>/.vscode/sftp.json(/)	Hacking

Showing 16 to 30 of 4432 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.252

🇫🇷 85.217.140.52

🇩🇪 62.153.61.82

🇰🇷 14.46.87.209

🇻🇳 1.55.165.141

🇺🇸 198.46.134.48

🇵🇦 181.178.139.208

🇦🇷 170.155.12.7

🇳🇱 158.94.210.216

🇨🇳 122.96.28.113

🇺🇸 66.132.186.217

🇺🇸 34.73.167.179

🇻🇳 1.53.110.72

🇵🇰 202.47.45.54

🇱🇺 172.255.250.132

🇨🇱 136.248.242.166

🇨🇳 113.215.189.112

🇯🇵 106.150.7.85

🇮🇩 103.112.5.35

🇹🇷 94.154.43.56