JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.70.178.238

66.70.178.238 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 30%: ?

30%

ISP	OVH Hosting, Inc.
Usage Type	Content Delivery Network
ASN	AS16276
Hostname(s)	ns548417.ip-66-70-178.net
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.70.178.238

Whois 66.70.178.238

IP Abuse Reports for 66.70.178.238:

This IP address has been reported a total of 11 times from 4 distinct sources. 66.70.178.238 was first reported on July 22nd 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-26 02:08:14 (19 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 97%, Country: CA, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 97%, Country: CA, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 22:57:57 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 18:57:49.132860 2026] [security2:error] [pid 678222:tid 678222] [client 66.70.178.238:62714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-castle.com"] [uri "/wp-config.php"] [unique_id "amU_bSnxQWRAJtHaBYXCOwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 14:47:05 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 10:46:57.148255 2026] [security2:error] [pid 1446421:tid 1446421] [client 66.70.178.238:54850] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|kingstoneproperties.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kingstoneproperties.com"] [uri "/[email protected]"] [unique_id "amTMYS2lnS9aAHCStcrbnQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-25 01:05:10 (1 day ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 92%, Country: CA, Attack patterns: Auto ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 92%, Country: CA, Attack patterns: Automated scanning show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-24 21:26:36 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 17:26:32.342274 2026] [security2:error] [pid 418201:tid 418201] [client 66.70.178.238:54748] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|qualityelevatorcabs.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qualityelevatorcabs.com"] [uri "/[email protected]"] [unique_id "amPYiEfv5UiSAuCmkGlCxgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-07-24 20:36:30 (2 days ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface. show less	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-24 05:21:50 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 01:21:42.347876 2026] [security2:error] [pid 77429:tid 77429] [client 66.70.178.238:63829] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|grupoporvenir.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grupoporvenir.com"] [uri "/contjuris.com"] [unique_id "amL2ZlR-fMmIt96GM6zGnwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 10:41:49 (3 days ago)	Web App Attack, Hacking	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 08:00:37 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 04:00:33.392792 2026] [security2:error] [pid 20687:tid 20687] [client 66.70.178.238:62552] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rodrandolph.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rodrandolph.com"] [uri "/instagram.com"] [unique_id "amHKIYIfly4vB6uEkx9VdgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 00:20:40 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 20:20:32.050773 2026] [security2:error] [pid 1729452:tid 1729452] [client 66.70.178.238:63065] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|koswerks.net\|F\|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "koswerks.net"] [uri "/index.bak"] [unique_id "amFeUJ9TlbIJy-8F6qFIFQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 17:26:35 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 66.70.178.238 (ns548417.ip-66-70-178.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 13:26:30.845169 2026] [security2:error] [pid 2552689:tid 2552689] [client 66.70.178.238:50674] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ipostsocialmedia.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipostsocialmedia.com"] [uri "/[email protected]"] [unique_id "amD9Ro7jhpCGM5TxrnX0AAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 102.64.42.219

🇰🇷 211.51.132.104

🇹🇷 188.119.54.55

🇱🇻 185.214.96.136

🇦🇷 181.229.151.107

🇩🇪 69.5.169.185

🇬🇧 5.226.140.110

🇩🇪 172.70.250.103

🇺🇸 135.119.74.228

🇺🇸 64.31.55.22

🇹🇭 49.231.192.36

🇰🇪 41.89.96.242

🇬🇧 35.246.80.146

🇺🇸 20.29.8.147

🇺🇸 13.89.125.229

🇺🇸 205.210.31.86

🇺🇸 192.241.148.166

🇺🇸 172.253.214.113

🇨🇳 123.245.84.156

🇰🇷 121.165.65.175