JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.70.220.140

66.70.220.140 was found in our database!

This IP was reported 94 times. Confidence of Abuse is 28%: ?

28%

ISP	OVH Hosting, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ip140.ip-66-70-220.net
Domain Name	ovh.net
Country	🇨🇦 Canada
City	Beauharnois, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.70.220.140

Whois 66.70.220.140

IP Abuse Reports for 66.70.220.140:

This IP address has been reported a total of 94 times from 31 distinct sources. 66.70.220.140 was first reported on November 12th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-07-22 06:09:35 (1 day ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.70.220.140 (CA/Canada/ip140.ip-66- ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 66.70.220.140 (CA/Canada/ip140.ip-66-70-220.net): 2 in the last 3600 secs (0-196) show less	Hacking
🇨🇦 1gz	2026-07-12 08:03:03 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET met ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action taken: CHALLENGE Protocol: HTTP/2 (GET method) Endpoint: /script.js UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 YF	2026-07-09 21:00:18 (2 weeks ago)	WordPress content enumeration	Web App Attack
Anonymous	2026-06-14 23:40:04 (1 month ago)	Web App Attack, Hacking	Hacking Web App Attack
🇫🇮 YF	2026-06-12 18:00:49 (1 month ago)	WordPress directory enumeration	Web App Attack
Anonymous	2026-06-12 06:14:01 (1 month ago)	Malicious activity detected	Hacking Web App Attack
🇨🇭 4server	2026-06-07 14:59:12 (1 month ago)	[SunJun0716:59:05.8403592026][security2:error][pid3625842:tid3626164][client66.70.220.140:0]ModSecur ... show more [SunJun0716:59:05.8403592026][security2:error][pid3625842:tid3626164][client66.70.220.140:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:X-Forwarded-For.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"24\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"mail.ticino-hosting.ch\"][uri\"/favicon.ico\"][unique_id\"aiWHOUpOwhqkvzbz2d5BswAAAEY\"]\,referer:http://mail.ticino-hosting.ch/ show less	Hacking Web App Attack
🇻🇳 hirosume2	2026-04-15 01:44:13 (3 months ago)	DDoS composite score 43.8 (challenge tier) - 52 reqs/5min - high_traffic	DDoS Attack
Anonymous	2025-12-28 02:04:02 (6 months ago)	Malicious activity detected	Hacking Web App Attack
🇵🇱 IROK	2025-12-21 18:42:27 (7 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
Anonymous	2025-11-25 10:57:18 (7 months ago)	Malicious activity detected	Hacking Web App Attack
Anonymous	2025-11-14 11:11:03 (8 months ago)	Probing to gain illegal access	Web App Attack
🇫🇮 Shaik Sai Meera	2025-11-10 18:55:12 (8 months ago)	IM360 WAF: Request indicates a Headless browser	Brute-Force Web App Attack
🇺🇸 anti-res	2025-11-06 12:41:08 (8 months ago)	Attempt of unauthorized access	Port Scan Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-27 08:58:23 (8 months ago)	(mod_security) mod_security (id:210730) triggered by 66.70.220.140 (ip140.ip-66-70-220.net): 1 in th ... show more (mod_security) mod_security (id:210730) triggered by 66.70.220.140 (ip140.ip-66-70-220.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 27 04:58:17.919440 2025] [security2:error] [pid 1065:tid 1065] [client 66.70.220.140:35947] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.azcrittergetter.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.azcrittergetter.com"] [uri "/csfitz.com"] [unique_id "aP80Kf1nuZIdcMMqpRwtZQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 94 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.75

🇺🇸 162.216.149.252

🇺🇸 147.185.132.175

🇰🇷 211.107.192.176

🇹🇼 198.235.24.51

🇬🇧 192.250.239.57

🇨🇳 120.52.18.19

🇳🇱 86.54.31.34

🇧🇷 45.232.64.53

🇺🇸 216.25.89.144

🇹🇼 198.235.24.13

🇳🇱 195.178.110.30

🇩🇪 158.181.48.76

🇨🇳 120.48.24.187

🇳🇱 77.83.39.17

🇩🇪 57.129.74.123

🇭🇰 45.249.246.196

🇺🇸 206.168.173.147

🇺🇸 195.184.76.2

🇧🇪 130.211.72.242