JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.88.172.239

166.88.172.239 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 0%: ?

ISP	InterLIR LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203872
Hostname(s)	166-88-172-239.ips.acedatacenter.com
Domain Name	interlir.com
Country	🇺🇸 United States of America
City	Orem, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.88.172.239

Whois 166.88.172.239

IP Abuse Reports for 166.88.172.239:

This IP address has been reported a total of 32 times from 12 distinct sources. 166.88.172.239 was first reported on September 24th 2024, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Psycho Solutions LLC	2026-02-27 02:17:16 (3 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 2/27/2026 2:17 am (UTC-6) show less	Web App Attack Bad Web Bot Web Spam Hacking
🇺🇸 TPI-Abuse	2026-02-14 13:29:09 (3 months ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.239 (166-88-172-239.ips.acedatacente ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.239 (166-88-172-239.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 08:29:05.646866 2026] [security2:error] [pid 58916:tid 58916] [client 166.88.172.239:35877] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|andrsn.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "andrsn.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZB4oVJokkBq1GRkyIVGtQAAAAQ"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-02-09 05:09:17 (3 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
Anonymous	2026-02-05 20:58:25 (4 months ago)	"POST /xmlrpc.php HTTP/1.1"	Hacking Web App Attack
🇪🇸 el-brujo	2026-02-05 13:35:51 (4 months ago)	Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla ... show more Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:146.0) Gecko/20100101 Firefox/146.0 Action: managed_challenge Source: firewallManaged ASN Description: PUREVOLTAGE-INC - PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-02-05T13:35:51Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇩🇪 MusicLibrary	2026-02-05 12:11:53 (4 months ago)	Attempted access to non existent wordpress urls	Bad Web Bot
Anonymous	2026-01-21 17:20:59 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.21 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2026-01-20 12:20:46 (4 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.20 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.20 is noted in report timestamp show less	Hacking Brute-Force
🇱🇻 garmtech.com	2025-12-20 23:04:17 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-04.166.88.172.239.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-04.166.88.172.239.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-06 03:27:20 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.239 (166-88-172-239.ips.acedatacente ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.239 (166-88-172-239.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 22:27:12.126563 2025] [security2:error] [pid 17239:tid 17239] [client 166.88.172.239:45881] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|staben.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "staben.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQwVkDtHXrDBN4ucRl8o-gAAABI"], referer: https://staben.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nowyouknow	2025-05-19 15:16:51 (1 year ago)	(From [email protected]) Give it a spin now! GoPlay brings you the future of online gaming w ... show more (From [email protected]) Give it a spin now! GoPlay brings you the future of online gaming with a fully blockchain-powered casino platform. Select from hundreds of premium slots, play live dealer tables, or go head-to-head with friends in exciting table games. Every spin and card drawn is powered by blockchain-secured blockchain technology for utmost security. Our generous welcome package unlocks free spins, deposit matches, and surprise rewards created to supercharge your gameplay. Plus, ongoing promotions and leaderboard tournaments provide extra chances to claim massive payouts and move up the leaderboards. Ready to transform your gaming experience? Visit https://goplay.se to sign up instantly “Like” our page at https://www.facebook.com/goplay.se for community updates, and check us out on Instagram at https://www.instagram.com/goplay.se for exclusive offers—start winning today! show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-17 12:26:42 (1 year ago)	(From [email protected]) This casino is amazing! Step into GoPlay’s digital casino world and discov ... show more (From [email protected]) This casino is amazing! Step into GoPlay’s digital casino world and discover an unrivaled selection of slots, table games, and live dealer action—all optimized for cryptocurrency play. With tempting welcome bonuses and regular promotions around every corner, your winning potential has never been higher. Make sure you don’t miss the chance to boost your bankroll with fast, secure crypto transactions and 24/7 support. Join the fun today—head to https://goplay.se Connect with our community on Facebook at https://www.facebook.com/goplay.se, and stay in the loop on Instagram at https://www.instagram.com/goplay.se now! show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-16 14:00:09 (1 year ago)	(From [email protected]) Give it a spin now! GoPlay brings you the future of online gaming ... show more (From [email protected]) Give it a spin now! GoPlay brings you the future of online gaming with a fully crypto-integrated casino platform. Select from hundreds of top-notch slots, test your skills at live dealer tables, or go head-to-head with friends in exciting table games. Every spin and card distributed is powered by secure blockchain technology for utmost security. Our generous welcome package unlocks free spins, deposit matches, and surprise rewards designed to supercharge your gameplay. Plus, ongoing promotions and leaderboard tournaments give you even more ways to claim massive payouts and move up the leaderboards. Set to revolutionize your play? Visit https://goplay.se to register now “Like” our page at https://www.facebook.com/goplay.se for community updates, and check us out on Instagram at https://www.instagram.com/goplay.se for exclusive offers—start winning today! show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-15 07:37:18 (1 year ago)	(From [email protected]) Roll the Dice! Experience the top-tier crypto-powered casino at GoP ... show more (From [email protected]) Roll the Dice! Experience the top-tier crypto-powered casino at GoPlay, where exciting slots, live dealer tables, and special bonuses are ready for your first spin. Benefit from lightning-fast deposits and withdrawals in cryptocurrency while you pursue huge jackpots. Prepared to take home massive wins? Visit https://goplay.se Like us on Facebook at https://www.facebook.com/goplay.se, and follow us on Instagram at https://www.instagram.com/goplay.se to get started now show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-14 17:59:51 (1 year ago)	(From [email protected]) Roll the Dice! Experience the top-tier crypto-powered casino at GoPla ... show more (From [email protected]) Roll the Dice! Experience the top-tier crypto-powered casino at GoPlay, where thrilling slots, real-time dealer tables, and unique bonuses are ready for your first spin. Benefit from instant deposits and withdrawals in cryptocurrency while you go after mind-blowing jackpots. Want to hit it big? Visit https://goplay.se Like us on Facebook at https://www.facebook.com/goplay.se, and follow us on Instagram at https://www.instagram.com/goplay.se to begin playing now show less	Phishing Web Spam

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 31.14.254.62

🇭🇳 170.83.116.118

🇺🇸 148.153.56.170

🇺🇸 135.237.125.223

🇷🇴 80.94.92.168

🇧🇬 79.124.40.174

🇺🇸 57.141.20.42

🇻🇳 14.191.163.231

🇩🇪 213.209.159.227

🇩🇪 167.94.145.16

🇯🇵 103.163.220.81

🇮🇳 103.42.74.124

🇩🇪 69.5.169.169

🇺🇸 52.20.198.190

🇸🇪 46.59.90.49

🇧🇷 45.205.1.247

🇹🇿 41.59.236.98

🇺🇸 2602:fb54:1400::1c

🇷🇺 185.94.111.1

🇳🇱 176.65.139.234