This IP address has been reported a total of
29
times from
17 distinct
sources.
166.88.132.237 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Bot / scanning and/or hacking attempts: GET /config HTTP/1.1, GET / HTTP/1.1, GET /.env HTTP/1.1, GE ...
show moreBot / scanning and/or hacking attempts: GET /config HTTP/1.1, GET / HTTP/1.1, GET /.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1
show less
(mod_security) mod_security (id:210492) triggered by 166.88.132.237 (-): 1 in the last 300 secs; Por ...
show more(mod_security) mod_security (id:210492) triggered by 166.88.132.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:10:35.678097 2026] [security2:error] [pid 17151:tid 17151] [client 166.88.132.237:55144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.russiacoin.info"] [uri "/.env"] [unique_id "almdK-4gxuq2Y5Gai4Pk9wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
{"reqId":"XpRcqBGhMG7ObMqw26Ac","level":1,"time":"2026-07-17T05:06:00+02:00","remoteAddr":"166.88.13 ...
show more{"reqId":"XpRcqBGhMG7ObMqw26Ac","level":1,"time":"2026-07-17T05:06:00+02:00","remoteAddr":"166.88.132.237","user":"--","app":"core","method":"GET","url":"/private/.env","scriptName":"/index.php","message":"Trusted domain error. \"166.88.132.237\" tried to access using \"n8n.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvyxran.love; +https://silver.inc)","version":"34.0.1.2","data":{"app":"core"}}
{"reqId":"nb216q5S4WQvsTI9ddEf","level":1,"time":"2026-07-17T05:08:23+02:00","remoteAddr":"166.88.132.237","user":"--","app":"core","method":"GET","url":"/home/ec2-user/.aws/credentials","scriptName":"/index.php","message":"Trusted domain error. \"166.88.132.237\" tried to access using \"shield.khomri.com\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran; +https://silvy
...
show less
(mod_security) mod_security (id:949110) triggered by 166.88.132.237 (DE/Germany/-): N in the last X ...
show more(mod_security) mod_security (id:949110) triggered by 166.88.132.237 (DE/Germany/-): N in the last X secs
show less