JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 66.179.191.163

66.179.191.163 was found in our database!

This IP was reported 113 times. Confidence of Abuse is 43%: ?

43%

ISP	IONOS Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip66-179-191-163.pbiaas.com
Domain Name	ionos.com
Country	🇺🇸 United States of America
City	Kansas City, Missouri

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 66.179.191.163

Whois 66.179.191.163

IP Abuse Reports for 66.179.191.163:

This IP address has been reported a total of 113 times from 47 distinct sources. 66.179.191.163 was first reported on July 24th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-22 04:19:33 (3 weeks ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇺🇸 TPI-Abuse	2026-06-22 02:15:16 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 22:15:11.181984 2026] [security2:error] [pid 1600:tid 1600] [client 66.179.191.163:36624] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.paguilar.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.paguilar.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajiar8EMrIui2RCzkbIM1wAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-06-22 01:45:04 (3 weeks ago)	Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-21 09:24:40 (3 weeks ago)	Excessive 404/403 errors	Brute-Force
🇳🇱 Brict IT	2026-06-20 20:50:33 (3 weeks ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 10:07:36 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 06:07:31.117129 2026] [security2:error] [pid 24471:tid 24471] [client 66.179.191.163:45422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.midway-island.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.midway-island.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajUU44UaZPP-cFSkBDUWvgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-19 09:51:18 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 05:51:14.473011 2026] [security2:error] [pid 672:tid 672] [client 66.179.191.163:43724] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|dragonflytunes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dragonflytunes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajUREpSz0uBu1TnpjjvBEgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-19 06:42:59 (4 weeks ago)	[redacted] 66.179.191.163 - - [19/Jun/2026:08:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" " ... show more [redacted] 66.179.191.163 - - [19/Jun/2026:08:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0" [redacted] 66.179.191.163 - - [19/Jun/2026:08:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:58.0) Gecko/20100101 Firefox/58.0" [redacted] 66.179.191.163 - - [19/Jun/2026:08:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" [redacted] 66.179.191.163 - - [19/Jun/2026:08:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" [redacted] 66.179.191.163 - - [19/Jun/2026:08:42:49 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0" [redacted] 66.179.191.163 - - [19/Jun/2026:08:42:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 216 "-" "Mozilla/5.0 ( ... show less	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-06-18 22:33:43 (4 weeks ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 21:34:35 (4 weeks ago)	(mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 18 17:34:30.455052 2026] [security2:error] [pid 3021:tid 3021] [client 66.179.191.163:32822] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.disio.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.disio.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajRkZovSJdkfRU4O_vYpPwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 reznekcs	2026-06-18 20:40:23 (4 weeks ago)	F2B wordpress ban. Logs: 66.179.191.163 - - [18/Jun/2026:22:40:21 +0200] "POST /xmlrpc.php HTTP/1.1" ... show more F2B wordpress ban. Logs: 66.179.191.163 - - [18/Jun/2026:22:40:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 66.179.191.163 - - [18/Jun/2026:22:40:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:42.0) Gecko/20100101 Firefox/42.0" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-18 03:23:45 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 66.179.191.163 (ip66-179-191-163.pbiaas.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 23:23:40.064408 2026] [security2:error] [pid 17255:tid 17255] [client 66.179.191.163:36366] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|solarfarms.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "solarfarms.info"] [uri "/wp-json/wp/v2/users"] [unique_id "ajNkvNNattf7_epshPqhsQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 mondor.ro	2026-06-18 02:38:26 (1 month ago)	Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 66.179.191.163, Reason ... show more Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 66.179.191.163, Reason:[(XMLRPC) WP XMLPRC Attack 66.179.191.163 (US/United States/ip66-179-191-163.pbiaas.com): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇫🇷 SpaceHost-Server	2026-06-17 22:33:12 (1 month ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-06-16 22:30:56 (1 month ago)		Brute-Force Web App Attack

Showing 1 to 15 of 113 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.227

🇵🇾 190.128.241.2

🇲🇽 189.223.169.139

🇧🇷 189.50.197.162

🇨🇳 123.145.35.215

🇧🇪 34.14.122.221

🇵🇱 176.53.159.198

🇺🇸 152.232.122.91

🇨🇳 106.75.153.103

🇻🇳 103.9.204.84

🇮🇶 65.20.252.149

🇳🇱 45.148.10.120

🇻🇳 42.114.248.24

🇺🇸 40.76.250.51

🇺🇸 24.144.84.83

🇺🇸 2602:80d:1007::75

🇰🇷 211.223.107.86

🇻🇪 201.249.205.94

🇺🇸 162.216.150.56

🇮🇶 62.201.228.210