JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.88.172.28

166.88.172.28 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	InterLIR LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203872
Hostname(s)	166-88-172-28.ips.acedatacenter.com
Domain Name	interlir.com
Country	🇺🇸 United States of America
City	Orem, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.88.172.28

Whois 166.88.172.28

IP Abuse Reports for 166.88.172.28:

This IP address has been reported a total of 25 times from 16 distinct sources. 166.88.172.28 was first reported on September 23rd 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-09 21:31:19 (2 months ago)	(sshd) Failed SSH login from 166.88.172.28 (US/United States/166-88-172-28.ips.acedatacenter.com)	Brute-Force SSH
🇮🇩 Burayot	2026-02-28 07:34:55 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 166.88.172.28 (US/United States/166 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 166.88.172.28 (US/United States/166-88-172-28.ips.acedatacenter.com): 2 in the last 3600 secs show less	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-02-26 10:34:37 (3 months ago)	WP Login Scan Activities: "2026-02-26T17:34:37.178+07:00" "/wp-login.php" "166.88.172.28" "Mozilla/5 ... show more WP Login Scan Activities: "2026-02-26T17:34:37.178+07:00" "/wp-login.php" "166.88.172.28" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-02-25 08:24:14 (3 months ago)	WP Login Scan Activities: "2026-02-25T15:24:14.717+07:00" "/wp-login.php" "166.88.172.28" "Mozilla/5 ... show more WP Login Scan Activities: "2026-02-25T15:24:14.717+07:00" "/wp-login.php" "166.88.172.28" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" show less	Web App Attack
Anonymous	2026-02-09 19:00:43 (3 months ago)	WordPress Brute Force	Brute-Force
🇺🇸 Psycho Solutions LLC	2026-02-04 03:37:09 (4 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 2/4/2026 3:37 am (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 Psycho Solutions LLC	2026-02-02 18:20:58 (4 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 2/2/2026 6:20 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
Anonymous	2026-01-27 18:40:01 (4 months ago)		Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-01-23 15:21:09 (4 months ago)	Accessed trap at '/wp-login.php'	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2026-01-23 10:56:30 (4 months ago)	WP Login Scan Activities	Web App Attack
🇺🇸 Psycho Solutions LLC	2026-01-22 21:29:59 (4 months ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show more Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 1/22/2026 9:29 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-19 06:18:14 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.28 (166-88-172-28.ips.acedatacenter. ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.28 (166-88-172-28.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 19 01:18:06.936153 2026] [security2:error] [pid 6430:tid 6430] [client 166.88.172.28:57397] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|admin.turedinmobiliaria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aW3MnubiRdv7gwQbfUxoNgAAAA0"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 13:06:03 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇭 backslash	2025-11-20 12:40:06 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 166.88.172.28	DDoS Attack Brute-Force Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.29.193.22

🇩🇪 178.16.52.15

🇫🇷 151.80.77.244

🇨🇦 99.209.226.114

🇧🇬 79.124.62.230

🇬🇧 35.203.211.93

🇺🇸 2607:f8b0:4003:c1c::12a

🇺🇸 195.184.76.119

🇺🇸 172.236.228.198

🇫🇷 167.86.121.13

🇺🇸 165.245.166.245

🇺🇸 100.50.17.159

🇵🇹 85.244.8.67

🇱🇹 81.30.98.49

🇨🇳 58.47.120.129

🇬🇧 31.14.254.51

🇦🇿 5.191.105.68

🇦🇪 5.38.1.181

🇬🇧 193.176.29.4

🇩🇪 176.65.132.24