AbuseIPDB » 166.88.169.136
166.88.169.136
This IP was reported 8 times. Confidence of
Abuse
is 4% : ?
ISP
Ace Data Centers II, L.L.C.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS18779
Hostname(s)
166-88-169-136.ips.acedatacenter.com
Domain Name
acedatacenter.com
Country
🇺🇸
United States of America
City
San Jose, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 166.88.169.136 :
This IP address has been reported a total of
8
times from
3 distinct
sources.
166.88.169.136 was first reported on
September 22nd 2025 , and the most recent report was
3 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-06-01 02:43:08
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacente ...
show more
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 22:43:00.651475 2026] [security2:error] [pid 7577:tid 7692] [client 166.88.169.136:53503] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.com|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/db_config.php.bak"] [unique_id "ahzxtI6nP6TlQzUBlJvYlgAAAM8"], referer: http://kettlehill.com/db_config.php.bak
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-01 12:45:04
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacente ...
show more
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 07:44:55.949238 2026] [security2:error] [pid 12299:tid 12336] [client 166.88.169.136:54967] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/application/logs/application.log"] [unique_id "aX9Kx8_CAppeKcdveJ3jiAAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 23:41:00
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacente ...
show more
(mod_security) mod_security (id:210492) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 18:40:55.355211 2025] [security2:error] [pid 1871:tid 1871] [client 166.88.169.136:34883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.farmers123.com"] [uri "/.env.backup"] [unique_id "aS95B3OcDGpO_5T3Q-g9CQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-11-17 12:15:53
(6 months ago)
| Common web attack.
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 19:42:14
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacente ...
show more
(mod_security) mod_security (id:210492) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:42:02.030810 2025] [security2:error] [pid 28473:tid 28473] [client 166.88.169.136:46561] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.nbcnewsradio.com"] [uri "/a.htaccess"] [unique_id "aQEciiHokuYUMqsWjh1yIgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-01 14:56:16
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacente ...
show more
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 01 10:56:06.373809 2025] [security2:error] [pid 12475:tid 12503] [client 166.88.169.136:60675] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.com|F|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/wp-config.inc"] [unique_id "aN1BBmCKjmgjI9kURFKI4gAAAVg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-22 19:47:28
(8 months ago)
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacente ...
show more
(mod_security) mod_security (id:210730) triggered by 166.88.169.136 (166-88-169-136.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 15:47:21.391952 2025] [security2:error] [pid 26305:tid 26305] [client 166.88.169.136:35241] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.deandobkin.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.deandobkin.com"] [uri "/log.log"] [unique_id "aNGnyf1aLXARRCOQlpv-eQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
KuhA
2025-09-22 01:46:00
(8 months ago)
"GET /settings.php.bak HTTP/1.1"
Hacking
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: