JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.232.166.55

165.232.166.55 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 23%: ?

23%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.232.166.55

Whois 165.232.166.55

IP Abuse Reports for 165.232.166.55:

This IP address has been reported a total of 61 times from 45 distinct sources. 165.232.166.55 was first reported on November 26th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 pipeline.es	2026-06-05 07:33:43 (1 month ago)	Web scanning / probing for vulnerable paths	Port Scan Web App Attack
🇺🇸 AutoAddOnStore	2026-06-04 18:01:00 (1 month ago)	probing for vulnerabilities	Brute-Force Bad Web Bot Exploited Host Web App Attack Hacking
🇪🇸 pipeline.es	2026-06-04 14:12:22 (1 month ago)	Web scanning / probing for vulnerable paths \| URL: //wp2/wp-includes/wlwmanifest.xml \| Evidence: mic ... show more Web scanning / probing for vulnerable paths \| URL: //wp2/wp-includes/wlwmanifest.xml \| Evidence: microsites.grupoeuropa.com 165.232.166.55 - - [04/Jun/2026:16:11:53 +0200] \"GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1\" 404 12540 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36\" GEOIP_COUNTRY_CODE=ET \| ASN: DIGITALOCEAN-ASN \| Country: SG show less	Port Scan Web App Attack
🇫🇷 ELYAZ	2026-06-04 12:03:18 (1 month ago)	(y3) Failed access -byebye- from 165.232.166.55 (SG/Singapore/-): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-06-04 09:14:13 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 165.232.166.55 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 165.232.166.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 05:14:10.082127 2026] [security2:error] [pid 11879:tid 11879] [client 165.232.166.55:59757] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|galvanizetm.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "galvanizetm.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aiFB4t5_WBUqmnrnBT88OQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-04 00:22:19 (1 month ago)	165.232.166.55 - - [04/Jun/2026:02:22:13 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 ... show more 165.232.166.55 - - [04/Jun/2026:02:22:13 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 165.232.166.55 - - [04/Jun/2026:02:22:16 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 165.232.166.55 - - [04/Jun/2026:02:22:17 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 165.232.166.55 - - [04/Jun/2026:02:22:18 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 165.232.166.55 - - [04/Jun/2026:02:22:19 +0200] "GET /website/wp-includes/wlwmanifest.xml HTT ... show less	Brute-Force Web App Attack
🇸🇬 securejdprop	2026-06-03 19:54:30 (1 month ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing. crowdsecurity/http-probing	Hacking Web App Attack
🇫🇷 ELYAZ	2026-06-03 11:31:18 (1 month ago)	(wordpress) Failed wordpress login from 165.232.166.55 (SG/Singapore/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-06-03 09:30:28 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 165.232.166.55 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 165.232.166.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 05:30:22.602245 2026] [security2:error] [pid 31998:tid 31998] [client 165.232.166.55:50376] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|cynosurephotography.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cynosurephotography.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah_0LuD8bye1ECJzhb5HzwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 07:17:07 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 165.232.166.55 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 165.232.166.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 03:17:04.024385 2026] [security2:error] [pid 2938:tid 2938] [client 165.232.166.55:51179] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fixmyland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fixmyland.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ah_U8AD3xZEcu3GjiRJO6wAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-03 06:40:04 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇳🇱 maxxsense	2026-03-23 18:07:06 (3 months ago)	(wordpress) Failed wordpress login from 165.232.166.55 (SG/Singapore/-)	Brute-Force
🇨🇦 electronico	2026-03-23 17:38:56 (3 months ago)	165.232.166.55 - - [24/Mar/2026:04:37:59 +1100] "POST /wp-login.php HTTP/1.1" 403 2107 "https://cttm ... show more 165.232.166.55 - - [24/Mar/2026:04:37:59 +1100] "POST /wp-login.php HTTP/1.1" 403 2107 "https://cttmd.nc/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 165.232.166.55 - - [24/Mar/2026:04:38:26 +1100] "POST /wp-login.php HTTP/1.1" 403 2107 "https://cttmd.nc/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 165.232.166.55 - - [24/Mar/2026:04:38:55 +1100] "POST /wp-login.php HTTP/1.1" 403 2107 "https://cttmd.nc/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:119.0) Gecko/20100101 Firefox/119.0" ... show less	Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-03-23 17:00:25 (3 months ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇳🇱 Site.eu	2026-03-23 16:24:36 (3 months ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 182.160.102.193

🇸🇪 171.25.158.80

🇫🇷 85.217.140.10

🇹🇷 85.105.2.51

🇳🇱 51.15.110.3

🇺🇸 3.213.85.234

🇰🇷 220.92.117.221

🇲🇲 103.59.163.132

🇩🇪 88.214.25.121

🇨🇦 54.39.203.132

🇲🇩 45.15.226.44

🇺🇸 43.135.142.37

🇧🇷 190.8.175.28

🇳🇱 185.226.197.15

🇳🇱 185.226.197.14

🇧🇷 170.231.242.22

🇺🇸 147.185.132.93

🇩🇪 31.70.91.79

🇺🇸 20.127.116.229

🇹🇼 198.235.24.110