JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.166.222.116

188.166.222.116 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 42%: ?

42%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.166.222.116

Whois 188.166.222.116

IP Abuse Reports for 188.166.222.116:

This IP address has been reported a total of 9 times from 7 distinct sources. 188.166.222.116 was first reported on May 3rd 2024, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-28 12:48:19 (10 hours ago)	(mod_security) mod_security (id:225170) triggered by 188.166.222.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 188.166.222.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:48:11.305962 2026] [security2:error] [pid 20196:tid 20196] [client 188.166.222.116:42918] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.daisydoesoap.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.daisydoesoap.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apGDiwfkN03ZkeAZoOl44AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 12:28:33 (10 hours ago)	(mod_security) mod_security (id:225170) triggered by 188.166.222.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 188.166.222.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:28:25.986475 2026] [security2:error] [pid 12694:tid 12694] [client 188.166.222.116:52076] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.sbip.loneoakhoney.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sbip.loneoakhoney.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apF-6WjUSrsw_1svADwfDQAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-08-28 12:25:19 (10 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /wp-json/wp/v2/users \| 2026-08-28 12:25 UTC show less	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-08-28 12:15:07 (10 hours ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 11:35:49 (11 hours ago)	(mod_security) mod_security (id:225170) triggered by 188.166.222.116 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:225170) triggered by 188.166.222.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:35:41.591014 2026] [security2:error] [pid 9406:tid 9406] [client 188.166.222.116:34022] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|36sovereignchambers.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "36sovereignchambers.com"] [uri "/wp-json/wp/v2/users"] [unique_id "apFyjTMNIdcSF2tpjqUqYwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-08-28 11:31:35 (11 hours ago)	[28/Aug/2026:14:31:35 +0300] -- 188.166.222.116 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp ... show more [28/Aug/2026:14:31:35 +0300] -- 188.166.222.116 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-json/buddypress/v1/members HTTP/1.1 show less	Bad Web Bot Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-08-28 11:25:36 (11 hours ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
🇺🇸 kosada.com	2026-07-31 23:06:55 (3 weeks ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇲🇽 pavelcoan	2024-05-03 19:13:00 (2 years ago)	Email phishing: Alerta Fiscal: Revision de Declaraciones de Impuestos Pendiente - 3168	Phishing Email Spam Hacking

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 151.49.154.46

🇺🇸 104.196.171.213

🇻🇪 201.249.89.102

🇬🇧 165.154.129.201

🇨🇳 118.196.27.115

🇺🇸 107.150.100.146

🇲🇦 105.158.83.10

🇳🇱 92.119.165.164

🇳🇱 85.11.167.154

🇺🇸 70.183.199.8

🇧🇷 45.205.1.242

🇬🇧 45.131.218.53

🇱🇹 213.176.26.52

🇬🇧 194.164.126.222

🇨🇳 14.152.79.93

🇺🇸 216.180.246.139

🇻🇳 171.244.60.35

🇨🇳 117.50.213.16

🇻🇳 103.75.183.177

🇮🇹 83.224.179.220