JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.88.172.243

166.88.172.243 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	InterLIR LLC
Usage Type	Commercial
ASN	AS401152
Hostname(s)	166-88-172-243.ips.acedatacenter.com
Domain Name	interlir.com
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.88.172.243

Whois 166.88.172.243

IP Abuse Reports for 166.88.172.243:

This IP address has been reported a total of 14 times from 11 distinct sources. 166.88.172.243 was first reported on September 21st 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TRoden	2026-04-06 18:05:43 (2 months ago)	Geo Block Plugin: Escalation flag(s): rce_attempt	Hacking
🇺🇸 Psycho Solutions LLC	2026-01-02 22:10:28 (5 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User A ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-json/wp/v2/users - User Agent: N/A - Timestamp: 1/2/2026 10:10 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2025-12-12 02:32:42 (5 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.12 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.12.12 is noted in report timestamp show less	Hacking Brute-Force
🇩🇪 stinpriza	2025-12-03 21:15:18 (6 months ago)	Web App Attack	Web App Attack
🇨🇭 backslash	2025-11-24 07:40:08 (6 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-23 01:47:14 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.243 (166-88-172-243.ips.acedatacente ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.243 (166-88-172-243.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 22 20:47:11.466893 2025] [security2:error] [pid 3239:tid 3239] [client 166.88.172.243:43831] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|moellerlaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "moellerlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSJnnwZcybf5rfnQ9CyNmgAAAAU"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-10-28 19:03:12 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.243 (166-88-172-243.ips.acedatacente ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.243 (166-88-172-243.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:03:07.183942 2025] [security2:error] [pid 19031:tid 19031] [client 166.88.172.243:33901] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|areafinancieratf.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "areafinancieratf.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aQETa8pUEJJqO7b3wu18nAAAABU"], referer: https://areafinancieratf.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇲🇽 licjperezl	2025-06-05 17:56:08 (1 year ago)	Ataque de diccionario o DDoS en nuestros servicios en linea	Brute-Force
🇮🇳 wizard1411	2025-05-31 13:28:55 (1 year ago)	DDoS and brute force activity detected	Brute-Force SSH
Anonymous	2025-01-27 14:15:00 (1 year ago)	Used in a distributed login attack	Brute-Force
Anonymous	2024-12-19 05:43:04 (1 year ago)	Attempted brute force login to web vpn	Hacking Brute-Force
Anonymous	2024-09-28 06:50:10 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
Anonymous	2024-09-25 14:25:12 (1 year ago)	Automatic report - Vulnerability scan /RDWeb/Pages/en-US/login.aspx	Web App Attack
🇷🇺 sms.ru	2024-09-21 15:20:04 (1 year ago)	SMS pumping attack from foreign country	DDoS Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 76.127.61.251

🇮🇳 180.214.131.233

🇨🇳 123.158.60.12

🇺🇸 71.6.238.8

🇺🇸 71.6.235.103

🇲🇾 49.124.149.217

🇧🇬 46.10.210.68

🇺🇸 40.71.90.11

🇨🇳 36.111.172.34

🇨🇦 198.50.202.93

🇺🇸 192.3.145.26

🇨🇦 178.128.224.31

🇳🇱 176.65.139.130

🇫🇷 84.247.166.52

🇺🇸 71.6.240.161

🇺🇸 71.6.237.156

🇺🇸 71.6.236.85

🇬🇧 35.203.211.79

🇧🇷 20.226.82.126

🇺🇸 20.64.105.215