JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

188.166.12.130

Recent Activity

Abuse Confidence Score

21% Elevated

144 reports

109 reporters · latest 6 days ago

ISP: Digital Ocean, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

144 from 109 distinct reporters

First reported

December 29th 2025

Most recent report

6 days ago

Last 60 days

Top reporter locations 🇵🇱 Poland 3 🇩🇪 Germany 1 🇺🇸 United States of America 1

Most common categories Web App Attack 5 Bad Web Bot 4 Port Scan 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Budyn	2026-11-05 12:38:10 UTC · (6 days ago)	[Budyn Honeypot Sinkhole] \| Attack type: Unknown Bot / General Web Recon \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: panel.sweetpuddingtrap.xyz \| Path: /wp-json/batch/v1 \| User-Agent: Mozilla/5.0 (X11; Linux x86_64 ... show more [Budyn Honeypot Sinkhole] \| Attack type: Unknown Bot / General Web Recon \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: panel.sweetpuddingtrap.xyz \| Path: /wp-json/batch/v1 \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
Anonymous	2026-11-05 12:05:46 UTC · (6 days ago)	PSCSERV WPSCAN 188.166.12.130	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-05 10:15:43 UTC · (6 days ago)	[Budyn Honeypot Sinkhole] \| Attack type: Unknown Bot / General Web Recon \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cluster.definitelynotahoneypot.xyz \| Path: /wp-json/batch/v1 \| User-Agent: Mozilla/5.0 (X11; Linu ... show more [Budyn Honeypot Sinkhole] \| Attack type: Unknown Bot / General Web Recon \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cluster.definitelynotahoneypot.xyz \| Path: /wp-json/batch/v1 \| User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-05 08:03:08 UTC · (6 days ago)	[Budyn Honeypot Sinkhole] \| Attack type: WP Path Scanning (Recon) \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cluster.definitelynotahoneypot.xyz \| Path: /wp-login.php \| User-Agent: Mozilla/5.0 \| Request: [Empty / G ... show more [Budyn Honeypot Sinkhole] \| Attack type: WP Path Scanning (Recon) \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: cluster.definitelynotahoneypot.xyz \| Path: /wp-login.php \| User-Agent: Mozilla/5.0 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 HamSammich	2026-11-05 07:59:37 UTC · (6 days ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-11-05T07:59Z).	Port Scan Web App Attack
🇹🇷 rtbh.com.tr	2026-03-24 20:12:15 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-03-23 20:12:13 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 SpaceHost-Server	2026-03-22 23:32:39 UTC · (7 months ago)		Brute-Force Web App Attack
🇺🇸 Lian	2026-03-22 00:31:53 UTC · (7 months ago)	Reported by Fail2Ban: 2026-03-21 14:32:35,781 fail2ban.actions [900]: NOTICE [sshd] Ban 188.166.12.130	Brute-Force SSH
🇩🇪 DerDoktor	2026-03-21 15:10:03 UTC · (7 months ago)	I0321 13:28:26.18740 fail2ban action triggered	Port Scan Brute-Force SSH
🇩🇪 TrickZ0ne	2026-03-21 15:00:27 UTC · (7 months ago)	Failed login attempt for user root on port unknown, total attempts: 17	Brute-Force
🇩🇪 DerDoktor	2026-03-21 14:10:02 UTC · (7 months ago)	1 client.go:9 fail2ban action triggered	Port Scan Brute-Force SSH
🇯🇵 rafled	2026-03-21 13:57:11 UTC · (7 months ago)	Mar 21 13:57:11 internal-mail-rafled-com sshd[3919414]: Invalid user mysql from 188.166.12.130 port 52294 ...	Brute-Force SSH
Anonymous	2026-03-21 13:56:58 UTC · (7 months ago)	Mar 21 13:55:38 nosvoid sshd[744437]: Failed password for mysql from 188.166.12.130 port 37618 ssh2 Mar 21 13:56:14 nosvoid sshd[745580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.12.130 user=mys ... show more Mar 21 13:55:38 nosvoid sshd[744437]: Failed password for mysql from 188.166.12.130 port 37618 ssh2 Mar 21 13:56:14 nosvoid sshd[745580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.12.130 user=mysql Mar 21 13:56:16 nosvoid sshd[745580]: Failed password for mysql from 188.166.12.130 port 39876 ssh2 Mar 21 13:56:55 nosvoid sshd[746857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.12.130 user=mysql Mar 21 13:56:57 nosvoid sshd[746857]: Failed password for mysql from 188.166.12.130 port 58704 ssh2 ... show less	Brute-Force SSH
🇦🇹 GiSoft	2026-03-21 13:56:25 UTC · (7 months ago)	2026-03-21T14:54:13.839121+01:00 srv01 sshd-session[1032737]: Failed password for invalid user mysql from 188.166.12.130 port 41064 ssh2 2026-03-21T14:54:49.279841+01:00 srv01 sshd-session[1032750]: Invalid user mysql from 188.166.12.130 port 33168 2 ... show more 2026-03-21T14:54:13.839121+01:00 srv01 sshd-session[1032737]: Failed password for invalid user mysql from 188.166.12.130 port 41064 ssh2 2026-03-21T14:54:49.279841+01:00 srv01 sshd-session[1032750]: Invalid user mysql from 188.166.12.130 port 33168 2026-03-21T14:54:49.311095+01:00 srv01 sshd-session[1032750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.12.130 2026-03-21T14:54:52.020012+01:00 srv01 sshd-session[1032750]: Failed password for invalid user mysql from 188.166.12.130 port 33168 ssh2 2026-03-21T14:55:28.524305+01:00 srv01 sshd-session[1032774]: Invalid user mysql from 188.166.12.130 port 56072 ... show less	Brute-Force SSH

Showing 1 to 15 of 144 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇼 172.68.87.219

🇧🇩 103.214.202.234

🇧🇩 103.159.2.113

🇺🇸 31.134.11.157

🇧🇷 205.210.31.251

🇰🇿 185.200.86.66

🇨🇳 180.76.179.77

🇳🇱 162.141.92.253

🇻🇪 143.105.147.40

🇨🇳 115.231.50.242

🇫🇷 92.205.235.239

🇸🇪 77.53.106.9

🇺🇸 72.56.170.106

🇺🇸 20.3.253.156

🇬🇪 212.58.103.83

🇲🇽 187.188.45.80

🇹🇷 176.235.182.141

🇺🇸 172.70.179.116

🇺🇸 158.46.161.18

🇨🇳 116.232.100.225