JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.1.161.104

166.1.161.104 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 0%: ?

ISP	InterLIR LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61400
Hostname(s)	support7.example.com
Domain Name	interlir.com
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.1.161.104

Whois 166.1.161.104

IP Abuse Reports for 166.1.161.104:

This IP address has been reported a total of 9 times from 6 distinct sources. 166.1.161.104 was first reported on July 25th 2025, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2025-11-18 10:56:04 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-56.166.1.161.104.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 12-56.166.1.161.104.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 webgobe	2025-11-16 14:10:27 (9 months ago)	jow-Joomla User : try to access forms...	Hacking
🇦🇺 Block Rockin' Beats	2025-11-07 15:54:13 (9 months ago)	Scanning forum with forged referal	Hacking Web App Attack
🇱🇻 garmtech.com	2025-10-24 15:08:13 (9 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-08.166.1.161.104.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-08.166.1.161.104.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-09-06 01:52:10 (11 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-52.166.1.161.104.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-52.166.1.161.104.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇵🇱 sefinek.net	2025-08-31 23:35:46 (11 months ago)	Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:114.0) Gecko/20100101 Firefox/114.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇵🇱 sefinek.net	2025-08-10 11:19:19 (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1. ... show more Triggered Cloudflare WAF (firewallCustom) from RU. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /genshin-stella-mod UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 12_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 Edg/114.0.1264.71 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2025-07-25 16:40:59 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇺🇸 TPI-Abuse	2025-07-25 01:42:24 (1 year ago)	(mod_security) mod_security (id:210730) triggered by 166.1.161.104 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210730) triggered by 166.1.161.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 24 21:42:15.826219 2025] [security2:error] [pid 20223:tid 20223] [client 166.1.161.104:54680] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|puduspoems.com\|F\|2"] [data ".dll"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puduspoems.com"] [uri "/web/20140107222105/http:/wwp.icq.com/scripts/WWPMsg.dll"] [unique_id "aILg97rbJwB_pUss18kcggAAAAs"], referer: http://puduspoems.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.10.221.104

🇮🇳 163.53.179.21

🇨🇳 123.129.245.249

🇵🇰 110.38.1.62

🇻🇳 103.98.152.152

🇨🇳 61.184.87.135

🇳🇱 45.148.10.152

🇺🇸 35.94.243.183

🇬🇧 2.57.17.164

🇯🇴 212.34.20.127

🇺🇸 153.66.139.171

🇫🇮 147.185.133.40

🇨🇳 115.159.197.247

🇵🇰 103.198.154.234

🇫🇷 84.5.129.68

🇩🇪 65.111.31.145

🇬🇧 35.203.210.175

🇨🇳 122.51.100.190

🇷🇺 85.26.230.158

🇧🇷 205.210.31.210