JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.20.212.66

178.20.212.66 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	FINE GROUP SERVERS SOLUTIONS LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	finegroupservers.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.20.212.66

Whois 178.20.212.66

IP Abuse Reports for 178.20.212.66:

This IP address has been reported a total of 14 times from 12 distinct sources. 178.20.212.66 was first reported on July 26th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-04-16 02:34:20 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 178.20.212.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 178.20.212.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 22:34:14.836381 2026] [security2:error] [pid 2308895:tid 2308895] [client 178.20.212.66:21943] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Golden-Technologies/pics/Golden Technologies 2009 Marketing CD/Scooters/Avenger- 4 Wheel/Thumbs.db"] [unique_id "aeBKpnB2AnvHg5JObJH1NQAAABg"], referer: https://vitalitywebb.com/backstore/Golden-Technologies/pics/Golden%20Technologies%202009%20Marketing%20CD/Scooters/Avenger-%204%20Wheel/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 cyfordtechnologies.com	2026-03-15 19:29:55 (2 months ago)	High traffic: 3/3 : Reported by Cyford API	DDoS Attack
🇨🇭 backslash	2026-03-11 18:03:00 (2 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇨🇭 backslash	2026-01-02 11:15:06 (5 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇩🇪 HandyTreff.de	2025-12-03 10:18:18 (6 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -27.998 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -27.998 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.2213.1 show less	Bad Web Bot Web App Attack
Anonymous	2025-11-01 20:48:15 (7 months ago)	Forum/form spam	Web Spam
🇮🇩 BPS-StatisticsIndonesia	2025-10-03 23:56:07 (8 months ago)	WP Admin Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2025-05-12 14:36:05 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 178.20.212.66 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 178.20.212.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 12 10:35:59.072404 2025] [security2:error] [pid 3214629:tid 3214642] [client 178.20.212.66:60647] [client 178.20.212.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|teddysdeli.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "teddysdeli.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aCIHT1OMHUkbNmE3zhmuLgAAAUM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-02-18 00:30:51 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-12-18 08:00:42 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-10-04 00:35:19 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-05-29 08:00:37 (2 years ago)	Web App Attack	Hacking Web App Attack
🇺🇸 VSM Networks	2024-02-29 03:49:37 (2 years ago)	Credential Stuffing	Brute-Force
🇩🇪 SCHAPPY	2023-07-26 19:14:56 (2 years ago)	IP was involved in L7 DDoS attack.	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 107.0.200.227

🇺🇸 47.251.91.214

🇸🇬 47.82.10.230

🇺🇸 20.168.123.0

🇷🇴 2.57.122.177

🇭🇰 218.255.103.194

🇧🇷 191.54.80.93

🇮🇹 172.253.12.211

🇱🇰 124.43.10.224

🇷🇺 77.106.78.215

🇺🇸 54.163.171.176

🇸🇬 47.82.10.229

🇸🇬 47.82.10.228

🇸🇬 47.82.10.23

🇺🇸 40.77.167.70

🇺🇸 18.232.12.157

🇨🇳 222.176.201.252

🇨🇳 222.176.200.134

🇫🇷 146.70.194.222

🇸🇬 128.199.231.249