JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.168.66.178

103.168.66.178 was found in our database!

This IP was reported 429 times. Confidence of Abuse is 60%: ?

60%

ISP	DiGiVPS.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142430
Hostname(s)	178.66.168.103.in-addr.arpa.digivps.com
Domain Name	digivps.com
Country	🇺🇸 United States of America
City	Indianapolis, Indiana

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.168.66.178

Whois 103.168.66.178

IP Abuse Reports for 103.168.66.178:

This IP address has been reported a total of 429 times from 233 distinct sources. 103.168.66.178 was first reported on May 8th 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 Scampi_ml	2026-06-10 13:01:46 (1 month ago)	5x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on ... show more 5x HTTP 403/404 responses in short timeframe. Likely vulnerability scanner or brute-force attack on web application paths. show less	Bad Web Bot Web App Attack
🇫🇮 oh.mg	2026-06-05 16:32:30 (1 month ago)	[Fri Jun 05 18:31:44.199852 2026] [security2:error] [pid 1394572:tid 1394579] [client 103.168.66.178 ... show more [Fri Jun 05 18:31:44.199852 2026] [security2:error] [pid 1394572:tid 1394579] [client 103.168.66.178:20368] [client 103.168.66.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.ke"] [uri "/"] [unique_id "aiL58OHLI-B2flI81wdTegAAAYU"] [Fri Jun 05 18:32:29.945494 2026] [security2:error] [pid 1394572:tid 1394590] [client 103.168.66.178:34704] [client 103.168.66.178] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly- ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-05 11:32:51 (1 month ago)	bot net	DNS Poisoning
🇦🇺 FireGuard Server	2026-06-05 06:25:06 (1 month ago)	Blocked by OPNsense firewall; 60 hits, proto=tcp, ports=443	Port Scan Hacking
🇬🇧 Axel	2026-06-02 01:17:59 (1 month ago)	Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by pol ... show more Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by policy\|\|hotdog.host\|F\|2 Phase: 2 Severity: CRITICAL URI: /wp-content/debug.log Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇩🇪 Kreapptivo	2026-06-02 01:11:11 (1 month ago)	[02/Jun/2026:03:11:10 +0200] Web-Request: "GET /cgi-bin/php", User-Agent: "Mozilla/5.0 (Windows NT 1 ... show more [02/Jun/2026:03:11:10 +0200] Web-Request: "GET /cgi-bin/php", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-06-01 19:54:29 (1 month ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇻🇳 trung.fun	2026-06-01 12:36:08 (1 month ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
Anonymous	2026-06-01 09:18:44 (1 month ago)	FortiWeb WAF: 4 attacks detected. Threat Score: 74800. Types: Client Management(2), Block IP List(2) ... show more FortiWeb WAF: 4 attacks detected. Threat Score: 74800. Types: Client Management(2), Block IP List(2). Origin: United States. show less	Web App Attack
🇩🇪 on-com	2026-06-01 08:21:13 (1 month ago)	URL scan	Brute-Force Web App Attack
Anonymous	2026-06-01 04:02:06 (1 month ago)	(caddyscan) Scanner path probe from 103.168.66.178 (178.66.168.103.in-addr.arpa.digivps.com): 5 in t ... show more (caddyscan) Scanner path probe from 103.168.66.178 (178.66.168.103.in-addr.arpa.digivps.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env.local HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env.backup HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //.env.dev HTTP/1.1" [REDACTED] 200 2627 103.168.66.178 - - [01/Jun/2026:04:02:03 +0000] "GET //server-status HTTP/1.1" show less	Port Scan
🇺🇸 rdpguard.com	2026-06-01 03:51:48 (1 month ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇳🇱 Site.eu	2026-06-01 02:06:48 (1 month ago)	Excessive multi-domain requests	Brute-Force
🇳🇱 i-turnradio.nl	2026-06-01 01:19:24 (1 month ago)	2026-06-01 @ 03:19:23 (CET) ~ Blocked for trying to access: /_ignition/execute-solution	Web App Attack
🇳🇱 e.fierstra	2026-06-01 01:17:59 (1 month ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 429 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:c84::ff

🇺🇸 64.62.156.222

🇺🇸 195.184.76.160

🇳🇱 176.65.148.2

🇺🇸 162.216.150.42

🇫🇮 147.185.133.240

🇷🇴 92.118.39.205

🇺🇸 66.132.195.78

🇬🇧 35.203.211.12

🇺🇸 20.84.101.167

🇩🇪 216.26.244.22

🇲🇺 197.225.146.23

🇲🇴 182.93.50.90

🇨🇳 180.153.236.115

🇵🇱 176.53.159.198

🇺🇸 172.171.233.230

🇳🇱 152.42.137.70

🇫🇷 85.217.140.42

🇧🇬 79.124.40.110

🇺🇸 68.198.1.144