JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.88.166.163

176.88.166.163 was found in our database!

This IP was reported 137 times. Confidence of Abuse is 71%: ?

71%

ISP	GUNEYDOGU TELEKOM INTERNET BILISIM VE ILETISIM HIZ TIC LTD S
Usage Type	Fixed Line ISP
ASN	AS34984
Domain Name	teletektelekom.com
Country	🇹🇷 Turkey
City	Kokez, Burdur

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.88.166.163

Whois 176.88.166.163

IP Abuse Reports for 176.88.166.163:

This IP address has been reported a total of 137 times from 81 distinct sources. 176.88.166.163 was first reported on August 1st 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 bmino.pl	2026-08-22 11:25:02 (1 day ago)	Autoban IP(2): 176.88.166.163 - Hostname: Superonline Iletisim Hizmetleri A.S. - City: Istanbul - Re ... show more Autoban IP(2): 176.88.166.163 - Hostname: Superonline Iletisim Hizmetleri A.S. - City: Istanbul - Region: Istanbul - Country: Türkiye - Location: 41.0108,28.9482 - Organization: Guneydogu Telekom Internet Bilisim VE Iletisim HIZ TIC LTD - failed attempts. show less	Web App Attack
🇫🇷 Zkillu	2026-08-20 18:19:28 (3 days ago)	DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS2 ... show more DDoS flood attack against 82.152.54.0 (2026-08-20 18:14:28 -> 2026-08-20 18:29:28 UTC) targeting AS215599. This IP (AS34984) sent ~267 packets (0.36 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇫🇷 Zkillu	2026-08-20 16:17:27 (3 days ago)	DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS21 ... show more DDoS flood attack against 31.56.58.0 (2026-08-20 16:12:27 -> 2026-08-20 16:27:27 UTC) targeting AS215599. This IP (AS34984) sent ~4766 packets (0.29 MB) during the attack window. Likely a compromised device (botnet). show less	DDoS Attack Exploited Host
🇺🇸 gui-ying233	2026-08-20 14:50:43 (3 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 Zkillu	2026-08-19 22:11:54 (4 days ago)	UDP flood (DDoS) vs AS215599: 246 pkts / 0.35 MB to UDP 80/8443 across 171 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 246 pkts / 0.35 MB to UDP 80/8443 across 171 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:11:54 (4 days ago)	UDP flood (DDoS) vs AS215599: 246 pkts / 0.35 MB to UDP 80/8443 across 171 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 246 pkts / 0.35 MB to UDP 80/8443 across 171 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇵🇱 bmino.pl	2026-08-19 18:05:57 (4 days ago)	Autoban IP(2): 176.88.166.163 - Hostname: Superonline Iletisim Hizmetleri A.S. - City: Istanbul - Re ... show more Autoban IP(2): 176.88.166.163 - Hostname: Superonline Iletisim Hizmetleri A.S. - City: Istanbul - Region: Istanbul - Country: Türkiye - Location: 41.0108,28.9482 - Organization: Guneydogu Telekom Internet Bilisim VE Iletisim HIZ TIC LTD - failed attempts. show less	Web App Attack
Anonymous	2026-08-18 12:41:53 (5 days ago)	Distributed scraper residential proxy pool — www.publicprinceton.com /store/filtered/ (WineCommerce ... show more Distributed scraper residential proxy pool — www.publicprinceton.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇫🇷 Zkillu	2026-08-15 17:55:00 (1 week ago)	UDP flood attack on 31.56.58.23 UDP:80 and UDP:9100 (2026-08-15 17:53-17:57 UTC). Peak aggregate 32 ... show more UDP flood attack on 31.56.58.23 UDP:80 and UDP:9100 (2026-08-15 17:53-17:57 UTC). Peak aggregate 32 Gbps / 1.95 Mpps against victim AS215599 - RTBH mitigation triggered. This IP (AS34984) sent ~6484 packets (8.97 MB) during the attack window. Likely a compromised device (Mirai-like botnet). show less	DDoS Attack Exploited Host
Anonymous	2026-08-15 10:10:47 (1 week ago)	443/tcp (1 or more attempts)	Port Scan
🇪🇸 el-brujo	2026-08-13 16:23:00 (1 week ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇮🇩 sockominfo	2026-08-13 00:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 176.88.166.163. Threat Score: 6.2/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 176.88.166.163. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-12 23:00:53 (1 week ago)	Zimbra: Login failures from malicious IP: 176.88.166.163. Threat Score: 6.4/10 (MEDIUM). Confidence: ... show more Zimbra: Login failures from malicious IP: 176.88.166.163. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-12 22:00:09 (1 week ago)	Zimbra: Login failures from malicious IP: 176.88.166.163. Threat Score: 6/10 (MEDIUM). Reported by T ... show more Zimbra: Login failures from malicious IP: 176.88.166.163. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 Vegascosmetics	2026-08-08 12:39:51 (2 weeks ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): IP auto-blocked by local security policy.	Hacking Web App Attack

Showing 1 to 15 of 137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 213.176.26.87

🇺🇸 205.210.31.81

🇷🇺 195.78.105.70

🇩🇪 193.124.20.228

🇺🇸 144.126.216.218

🇨🇳 106.81.207.97

🇨🇱 45.65.240.168

🇳🇱 192.253.248.223

🇲🇽 189.215.120.81

🇵🇭 138.84.137.192

🇻🇳 116.110.213.171

🇻🇳 116.104.163.219

🇮🇳 103.241.45.120

🇭🇰 43.155.21.198

🇻🇳 14.230.214.170

🇩🇪 172.253.1.216

🇧🇷 167.250.45.24

🇺🇸 147.185.132.166

🇯🇵 124.155.125.131

🇧🇩 103.97.161.116