JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.63.170.221

66.63.170.221 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 100%: ?

100%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	VPS ACE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Domain Name	vpsace.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.63.170.221

Whois 66.63.170.221

IP Abuse Reports for 66.63.170.221:

This IP address has been reported a total of 25 times from 19 distinct sources. 66.63.170.221 was first reported on August 23rd 2026, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 securejdprop	2026-09-01 20:28:10 (4 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 130). show less	Hacking Web App Attack
🇵🇹 Subnet Shadow Specter	2026-09-01 16:39:08 (3 hours ago)	[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Acc ... show more [CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 [OS]: Unknown [IP]: 66.63.170.221 [IoA Datetime]: 2026-09-01 14:34:19 UTC +1. show less	Bad Web Bot Brute-Force Hacking Port Scan Web App Attack
🇮🇩 securejdprop	2026-08-31 15:44:25 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 130). show less	Hacking Web App Attack
🇩🇪 LRob	2026-08-30 21:56:25 (1 day ago)	Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5 ... show more Abusive crawler: User-Agent on the known-bad list or claiming a placeholder identity \| ua: Mozilla/5.0 (Linux; Android 7.0; SM-G925F Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/73.0.3683. \| path: /accueil-entreprises/entreprises-contactez-nous (+1 more) \| 2026-08-30 21:56 UTC show less	Bad Web Bot
Anonymous	2026-08-30 21:39:31 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-08-30 16:31:22 (2 days ago)	Malicious activity detected	Hacking Web App Attack
🇺🇸 mnsf	2026-08-30 09:06:37 (2 days ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇨🇿 plzenskypruvodce.cz	2026-08-30 04:38:03 (2 days ago)	[Sun Aug 30 06:38:01.235010 2026] [access_compat:error] [pid 1218668:tid 1218699] [client 66.63.170. ... show more [Sun Aug 30 06:38:01.235010 2026] [access_compat:error] [pid 1218668:tid 1218699] [client 66.63.170.221:35790] AH01797: client denied by server configuration: /var/www/baletniskola-ok.cz/www/xmlrpc.php [Sun Aug 30 06:38:02.102391 2026] [access_compat:error] [pid 1218668:tid 1218703] [client 66.63.170.221:35790] AH01797: client denied by server configuration: /var/www/baletniskola-ok.cz/www/xmlrpc.php ... show less	Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-30 04:06:39 (2 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 BlueWire Hosting	2026-08-30 03:25:12 (2 days ago)	Bad bot ignoring robot.txt	Bad Web Bot
🇺🇸 xmission.com	2026-08-30 03:15:58 (2 days ago)	Blocked by UFW (TCP on 50002) Source port: 31084 TTL: 49 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 50002) Source port: 31084 TTL: 49 Packet length: 60 TOS: 0x08 This report (for 66.63.170.221) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 securejdprop	2026-08-29 20:00:43 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 130). show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 11:58:54 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 66.63.170.221 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 66.63.170.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 07:58:50.775316 2026] [security2:error] [pid 21680:tid 21680] [client 66.63.170.221:29478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerusalem-korczak-home.com"] [uri "/.git/config"] [unique_id "apLJerO4ESlGWS58v1Vp-AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-08-28 19:15:43 (4 days ago)	(wordpress) Failed wordpress login from 66.63.170.221 (CA/Canada/-)	Brute-Force
🇮🇩 securejdprop	2026-08-28 12:03:20 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor E ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET TOR Known Tor Exit Node Traffic group 129). show less	Hacking Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.100.64.28

🇺🇸 147.185.132.234

🇪🇪 95.85.245.227

🇧🇬 79.124.56.142

🇰🇷 211.56.131.202

🇭🇰 203.198.173.137

🇺🇸 198.74.58.111

🇦🇷 168.181.210.67

🇺🇸 147.185.132.196

🇨🇳 124.152.90.68

🇬🇧 45.82.76.102

🇵🇭 222.127.63.144

🇫🇮 193.32.204.199

🇺🇾 167.58.182.3

🇿🇦 165.73.183.77

🇳🇱 158.173.3.113

🇺🇸 147.185.132.183

🇺🇸 147.185.132.162

🇺🇸 147.185.132.15

🇵🇰 103.186.23.67