JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.88.178.194

166.88.178.194 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 17%: ?

17%

ISP	Ace Data Centers II, L.L.C.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS43444
Hostname(s)	166-88-178-194.ips.acedatacenter.com
Domain Name	acedatacenter.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.88.178.194

Whois 166.88.178.194

IP Abuse Reports for 166.88.178.194:

This IP address has been reported a total of 11 times from 8 distinct sources. 166.88.178.194 was first reported on December 25th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Matthew Ping	2026-05-18 08:00:03 (2 weeks ago)	ModSecurity rule 949110 triggered on dedicated. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇩🇪 LRob.fr	2026-05-17 02:00:38 (2 weeks ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2026-04-16 02:35:13 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 166.88.178.194 (166-88-178-194.ips.acedatacente ... show more (mod_security) mod_security (id:210730) triggered by 166.88.178.194 (166-88-178-194.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 15 22:35:02.912610 2026] [security2:error] [pid 2303604:tid 2303604] [client 166.88.178.194:17707] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Longhorn II/Chaps Saddle/originals/Thumbs.db"] [unique_id "aeBK1r3hE1yEPN4syvpKlgAAABY"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Longhorn%20II/Chaps%20Saddle/originals/ show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-04-16 01:43:33 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-03-14 10:20:47 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 166.88.178.194 (166-88-178-194.ips.acedatacente ... show more (mod_security) mod_security (id:210730) triggered by 166.88.178.194 (166-88-178-194.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 14 06:20:39.662244 2026] [security2:error] [pid 19858:tid 19858] [client 166.88.178.194:50869] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|vitalitywebb.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vitalitywebb.com"] [uri "/backstore/Barcalounger/Images/Barrington/Thumbs.db"] [unique_id "abU2d0IlqaEExNpAd3l6mQAAAA8"], referer: https://vitalitywebb.com/backstore/Barcalounger/Images/Barrington/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nodepile	2026-03-07 13:52:29 (2 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/HID/hidcompare.wmv ua='Mozilla/5.0 ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/HID/hidcompare.wmv ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.3838.53 Safari/537.36') show less	Open Proxy VPN IP
🇨🇭 backslash	2026-02-27 02:03:00 (3 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
Anonymous	2026-01-28 09:27:05 (4 months ago)	"POST /xmlrpc.php HTTP/1.1"	Hacking Web App Attack
🇩🇪 HandyTreff.de	2026-01-14 10:51:51 (4 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -59.991 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -59.991 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1744.1 show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-01-02 12:20:07 (5 months ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
🇺🇸 nodepile	2025-12-25 16:21:01 (5 months ago)	Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/lighting-tail-lightsturnbulbs-c-45 ... show more Requests denied due to proxy/VPN risk (tenant=82 method=GET path=/lighting-tail-lightsturnbulbs-c-450_459.html ua='Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1905.25 Safari/537.36') show less	Open Proxy VPN IP

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 113.211.213.115

🇺🇸 66.132.172.126

🇭🇰 199.45.154.189

🇺🇸 162.216.150.61

🇰🇷 121.144.235.164

🇻🇳 113.183.31.67

🇨🇳 106.13.114.161

🇸🇬 103.250.11.176

🇨🇳 60.162.241.250

🇮🇳 216.10.245.205

🇬🇧 194.36.184.71

🇺🇸 185.198.240.42

🇨🇱 179.57.170.71

🇨🇳 60.255.229.249

🇸🇬 46.137.234.66

🇮🇳 36.50.167.81

🇺🇸 20.168.7.20

🇨🇦 2607:f8b0:4023:1803::120

🇺🇸 216.25.89.98

🇳🇱 213.177.179.80