JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.88.172.45

166.88.172.45 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 0%: ?

ISP	InterLIR LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS203872
Hostname(s)	166-88-172-45.ips.acedatacenter.com
Domain Name	interlir.com
Country	🇺🇸 United States of America
City	Orem, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.88.172.45

Whois 166.88.172.45

IP Abuse Reports for 166.88.172.45:

This IP address has been reported a total of 15 times from 7 distinct sources. 166.88.172.45 was first reported on September 14th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 fbarela	2026-01-17 14:00:07 (4 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
Anonymous	2026-01-07 13:19:00 (4 months ago)	PHP file in forbidden directory: /themes/warehouse/assets/cache/demo/ghh - phpbb install/phpbb2/ins ... show more PHP file in forbidden directory: /themes/warehouse/assets/cache/demo/ghh - phpbb install/phpbb2/install/install.php on path: /themes/warehouse/assets/cache/demo/GHH%20-%20PHPBB%20Install/phpBB2/install/install.php?param=honey show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-01-02 06:26:08 (5 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇱🇻 garmtech.com	2025-12-27 16:26:46 (5 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-26.166.88.172.45.web-spamme ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-26.166.88.172.45.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2025-12-05 10:40:30 (6 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇨🇭 backslash	2025-11-11 20:10:03 (6 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-11 05:19:05 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.45 (166-88-172-45.ips.acedatacenter. ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.45 (166-88-172-45.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 11 00:18:59.446190 2025] [security2:error] [pid 18273:tid 18273] [client 166.88.172.45:20959] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|admin.turedinmobiliaria.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "admin.turedinmobiliaria.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aRLHQy2MqrIusljl7efx2QAAAAw"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 166.88.172.45	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 166.88.172.45	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 166.88.172.45	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 166.88.172.45	DDoS Attack Brute-Force Web App Attack
🇺🇸 Anonymous	2025-02-28 16:00:00 (1 year ago)	Brute force attack detected from 166.88.172.45	DDoS Attack Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-10-02 23:32:56 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 02 19:32:48.033142 2024] [security2:error] [pid 10387:tid 10387] [client 166.88.172.45:26997] [client 166.88.172.45] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|homebuilt.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "homebuilt.org"] [uri "/wp-json/wp/v2/users"] [unique_id "Zv3YIEbMBdsuTcdp153-sgAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 wil.com	2024-09-24 00:08:26 (1 year ago)	GlobalProtect login attempts with user jbonner.	VPN IP Brute-Force
🇺🇸 TPI-Abuse	2024-09-14 12:53:42 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 166.88.172.45 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 166.88.172.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 14 08:53:37.010871 2024] [security2:error] [pid 28556:tid 28556] [client 166.88.172.45:39107] [client 166.88.172.45] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|iceofparadise.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iceofparadise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ZuWHUbZJ-PRs3NkDZGtG3gAAAAM"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.86.28.189

🇳🇱 192.42.116.49

🇬🇧 188.240.59.21

🇫🇮 147.185.133.247

🇰🇭 119.13.57.113

🇨🇳 115.190.250.229

🇺🇸 50.198.26.25

🇸🇪 46.236.65.161

🇧🇩 103.151.130.224

🇺🇸 100.49.117.77

🇹🇷 82.153.241.105

🇳🇬 41.76.156.90

🇨🇭 35.216.172.131

🇬🇧 35.203.211.179

🇹🇷 5.175.136.41

🇹🇷 212.16.87.65

🇭🇰 154.92.17.30

🇮🇳 117.216.33.31

🇨🇳 106.75.25.139

🇨🇳 101.96.220.179