188.166.170.28
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
No reports in the last 60 days
188.166.170.28 has been reported 90 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
90 from
46 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇳🇱 homeshowdomain.nl |
Auto-ban: 16 malicious requests on 2026-03-25 (e.g., env/backup probes, brute-force, or error bursts).
|
Web App Attack SSH Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 80)
Source port: 61000
TTL: 239
Packet length: 44
TOS: 0x08
This report (for 188.166.170.28) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| 🇧🇪 cmbplf |
3.339 POST requests with url.path */wp-login.php
|
Brute-Force Bad Web Bot | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: >3000 req/min op 2026-03-25
|
Web App Attack SSH Hacking | |
| 🇺🇸 masterguru |
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-128)
|
Web App Attack | |
| 🇫🇷 geot |
GET /wp-login.php HTTP/1.1
|
Web App Attack | |
| 🇭🇷 bubausluge |
Detected by Aegis SOC: Web Admin Probe | MITRE: T1190 | Fails: 2 | Period: 2026-03-25T03:53:50 to 2026-03-25T03:53:50
|
Brute-Force | |
| 🇩🇪 findlab |
Backdrop CMS module - malicious activity detected
|
Bad Web Bot Web App Attack | |
| 🇬🇧 thetomtaylor.co.uk |
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer
... [wa01]
|
Bad Web Bot Web App Attack | |
| 🇩🇪 EGP Abuse Dept |
Scanning for web/db/file exploits on www.hygrotemp.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 188.166.170.28 (GB/United Kingdom/-): 1 in the last 3600 secs (0-195)
|
Hacking | |
| 🇺🇸 RAP |
2026-03-24 04:42:43 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan Web App Attack | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Spam more details on http://threatbook.io/ip/188.166.170.28
|
SSH | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: SSH (35 total hits)
|
Brute-Force SSH | |
| 🇨🇦 dpinse |
|
Brute-Force SSH Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown