JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.88.141.64

166.88.141.64 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	Evoxt (HK)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS149440
Domain Name	evoxt.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.88.141.64

Whois 166.88.141.64

IP Abuse Reports for 166.88.141.64:

This IP address has been reported a total of 23 times from 16 distinct sources. 166.88.141.64 was first reported on November 14th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 sigmasys	2024-11-29 14:56:00 (1 year ago)	Hacking	Hacking
🇮🇪 valeon	2024-11-27 01:52:57 (1 year ago)		Bad Web Bot Web App Attack
🇺🇸 jormaster3k	2024-11-27 01:30:16 (1 year ago)	Attack against Apache (too many 404s)	Web App Attack
Anonymous	2024-11-26 20:27:47 (1 year ago)	Aggressive web scan	Web App Attack
🇬🇧 CrystalMaker	2024-11-26 17:43:50 (1 year ago)	PHP vulnerability scan - POST /api/v1/user/login; GET /jbossmq-httpil/HTTPServerILServlet; GET /admi ... show more PHP vulnerability scan - POST /api/v1/user/login; GET /jbossmq-httpil/HTTPServerILServlet; GET /admin/; GET /v1/agent/self; GET /api/v1/users/admin?fields=*,privileges/PrivilegeInfo/cluster_name,privileges/PrivilegeInfo/permission_name; GET /api/v1/canal/config/1/1; GET /jars; GET /admin/; POST /nacos/v1/auth/users?username=wgobvrndipkwvqfy&password=arlfnifxengbcupd; GET /manager/radius/server_ping.php?ip=127.0.0.1\|echo%20\''<?php%20echo%20md5ultmzlkiwc;unlink__FILE__;?>\''>../../ultmzlkiwc.php&id=1; GET /batch.common.php?action=modelquote&cid=1&name=spacecomments; GET /nifi-api/flow/current-user; GET /admin/; GET /plugins/weathermap/editor.php?plug=0&mapname=test.php&action=set_map_properties&param=&param2=&debug=existing&node_name=&node_x=&node_y=&node_new_name=&node_label=&node_infourl=&node_hover=&node_iconfilename=--NONE--&link_name=&link_bandwidth_in=&link_bandwidth_out=&link_target=&link_width=&link_infourl=&link_hover=&map_title=46ea1712d4b13b55b3f680cc5b8b54e8&map_legend=Traffic+Load&map_stamp=Cre... show less	Web App Attack
Anonymous	2024-11-26 09:11:05 (1 year ago)	Malicious activity detected	DDoS Attack Bad Web Bot Web App Attack
🇮🇩 penjaga BRIN	2024-11-25 04:17:13 (1 year ago)	Multiple web server 400 error codes from same source ip.-240	Web App Attack
Anonymous	2024-11-25 03:52:44 (1 year ago)	Aggressive web scan	Web App Attack
🇳🇱 Savvii	2024-11-17 21:16:10 (1 year ago)	24 attempts against mh_ha-misbehave-ban on grass	Brute-Force Bad Web Bot Web App Attack
🇺🇸 www.winos.me	2024-11-17 14:16:12 (1 year ago)	166.88.141.64 - - [17/Nov/2024:22:16:11 +0800] "GET /admin.html?s=admin/api.Update/get/encode/34392q ... show more 166.88.141.64 - - [17/Nov/2024:22:16:11 +0800] "GET /admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b2x322s2t3c1a342w34 HTTP/1.1" 503 7187 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36" ... show less	Web App Attack
🇷🇺 sms.ru	2024-11-17 13:24:13 (1 year ago)	/manager/radius/server_ping.php?ip=127.0.0.1\|cat%20/etc/passwd%20>../../Test.txt&id=1	Web App Attack
🇩🇪 LRob.fr	2024-11-17 13:00:13 (1 year ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇮🇪 RoboSOC	2024-11-17 06:47:43 (1 year ago)	PHP CGI Argument Injection Vulnerability, PTR: PTR record not found	Hacking
🇺🇸 TPI-Abuse	2024-11-17 03:43:49 (1 year ago)	(mod_security) mod_security (id:243930) triggered by 166.88.141.64 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:243930) triggered by 166.88.141.64 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 16 22:43:41.189537 2024] [security2:error] [pid 463933:tid 463933] [client 166.88.141.64:55081] [client 166.88.141.64] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6743"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|www.n3fjp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.n3fjp.com"] [uri "/"] [unique_id "ZzlmbVn85nwOf1bhc1g1CAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-17 03:07:44 (1 year ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 91.92.40.151

🇮🇷 185.109.244.91

🇪🇸 148.56.132.215

🇺🇸 147.182.166.129

🇸🇪 82.118.29.200

🇩🇪 62.54.176.203

🇧🇪 35.195.132.199

🇺🇸 20.55.88.100

🇺🇿 198.163.193.150

🇺🇸 142.111.152.29

🇫🇷 62.171.180.91

🇳🇴 51.13.121.117

🇨🇳 42.226.255.12

🇳🇱 34.178.21.247

🇺🇸 18.205.38.162

🇫🇷 13.140.150.103

🇨🇳 222.212.83.51

🇧🇩 202.181.6.197

🇵🇱 195.116.145.127

🇳🇱 176.65.148.215