JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 103.168.66.237

103.168.66.237 was found in our database!

This IP was reported 2,346 times. Confidence of Abuse is 100%: ?

100%

ISP	DiGiVPS.com
Usage Type	Data Center/Web Hosting/Transit
ASN	AS142430
Hostname(s)	237.66.168.103.in-addr.arpa.digivps.com
Domain Name	digivps.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 103.168.66.237

Whois 103.168.66.237

IP Abuse Reports for 103.168.66.237:

This IP address has been reported a total of 2,346 times from 754 distinct sources. 103.168.66.237 was first reported on December 26th 2023, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-06-12 23:33:49 (21 minutes ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-06-12 23:25:28 (29 minutes ago)	(caddyscan) Scanner path probe from 103.168.66.237 (237.66.168.103.in-addr.arpa.digivps.com): 5 in t ... show more (caddyscan) Scanner path probe from 103.168.66.237 (237.66.168.103.in-addr.arpa.digivps.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 103.168.66.237 - - [12/Jun/2026:23:25:22 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 103.168.66.237 - - [12/Jun/2026:23:25:26 +0000] "GET /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 103.168.66.237 - - [12/Jun/2026:23:25:27 +0000] "GET /server-status HTTP/1.1" [REDACTED] 200 2627 103.168.66.237 - - [12/Jun/2026:23:25:27 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 103.168.66.237 - - [12/Jun/2026:23:25:27 +0000] "GET /.env HTTP/1.1" show less	Port Scan
🇫🇷 giulio gorobey	2026-06-12 19:52:43 (4 hours ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /wp-cron.php	Web App Attack
🇳🇱 ParaBug	2026-06-12 16:00:04 (7 hours ago)	103.168.66.237 - - [12/Jun/2026:18:00:04 +0200] "GET /wp-cron.php HTTP/1.1" 301 513 "https://suterma ... show more 103.168.66.237 - - [12/Jun/2026:18:00:04 +0200] "GET /wp-cron.php HTTP/1.1" 301 513 "https://sutermalerbl.ch/" "Go-http-client/1.1" ... show less	Phishing Brute-Force Web App Attack
🇨🇭 Ribeye375	2026-06-12 15:42:05 (8 hours ago)	HIPS nginx-access-errors - Block tcp/http,https	Brute-Force
🇧🇪 voormedia	2026-06-12 13:58:31 (9 hours ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇩🇪 Viveronese	2026-06-12 13:45:01 (10 hours ago)	HTTP vulnerability scanning	Web App Attack
🇦🇹 AustrianSimon	2026-06-12 11:32:50 (12 hours ago)	12 Jun 2026 11:32:50UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 12 Jun 2026 11:32:50UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 103.168.66.237 show less	Brute-Force
Anonymous	2026-06-12 08:59:37 (14 hours ago)	Aggressive web scan	Web App Attack
🇨🇭 4server	2026-06-12 07:32:36 (16 hours ago)	[FriJun1209:32:32.1287002026][security2:error][pid3266285:tid3266578][client103.168.66.237:0]ModSecu ... show more [FriJun1209:32:32.1287002026][security2:error][pid3266285:tid3266578][client103.168.66.237:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?i\)\(10\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|192\\\\\\\\.168\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|172\\\\\\\\.\(1[6-9]\\|2[0-9]\\|3[0-1]\)\\\\\\\\.\\\\\\\\d{1\,3}\\\\\\\\.\\\\\\\\d{1\,3}\\|fe80::\)\"atREQUEST_HEADERS:X-Forwarded-For.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"24\"][id\"990004\"][msg\"SSRFattempttoprivate/internalnetworkdetected\"][hostname\"aeapcl.ch\"][uri\"/wp-includes/js/wp-emoji-release.min.js\"][unique_id\"aiu2ELu98xXO33shu4SxKgAAAAc\"]\,referer:https://aeapcl.ch/ show less	Hacking Web App Attack
🇬🇧 venus.launch.bz	2026-06-12 06:48:08 (17 hours ago)	(gohttpua) Bad UA Go-http-client from 103.168.66.237 (US/United States/237.66.168.103.in-addr.arpa.d ... show more (gohttpua) Bad UA Go-http-client from 103.168.66.237 (US/United States/237.66.168.103.in-addr.arpa.digivps.com) show less	Hacking
🇳🇿 Antinson	2026-06-12 06:43:20 (17 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
Anonymous	2026-06-12 05:38:40 (18 hours ago)	Attac	Brute-Force
🇵🇱 sefinek.net	2026-06-12 05:00:30 (18 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /internal \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-06-12 04:56:57 (18 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (110 ... show more BAD BOT - Detected and Blocked.. Matched phrase "go-http-client" at REQUEST_HEADERS:User-Agent. (1100000-143) show less	Bad Web Bot

Showing 1 to 15 of 2346 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.133

🇬🇧 185.166.42.143

🇨🇳 183.141.186.175

🇩🇪 167.71.48.103

🇫🇮 147.185.133.110

🇺🇸 136.109.72.168

🇭🇰 101.36.122.139

🇧🇾 86.57.206.207

🇷🇺 83.239.108.218

🇺🇸 67.199.225.116

🇸🇬 43.134.42.6

🇬🇧 35.203.211.104

🇱🇰 220.247.224.226

🇳🇱 195.178.110.30

🇫🇷 185.255.126.57

🇰🇷 112.175.29.94

🇸🇬 104.223.37.89

🇩🇪 77.0.57.166

🇹🇼 60.250.246.239

🇮🇩 36.95.221.140