JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

188.166.54.91

Activity Trending Down

Abuse Confidence Score

2% Caution

20 reports

20 reporters · latest 2 weeks ago

ISP: Digital Ocean, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 20 distinct reporters

First reported

February 1st 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 1

Most common categories Bad Web Bot 1 Web App Attack 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 iwle	2026-10-28 12:29:54 UTC · (2 weeks ago)	[Wed Oct 28 08:29:48.394523 2026] [:error] [pid 3674:tid 3721] [client 188.166.54.91:0] [client 188.166.54.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/\|$)\|wp-content(?:/\|$)\|wp-includes(?:/\|$)\|wp-login\\ ... show more [Wed Oct 28 08:29:48.394523 2026] [:error] [pid 3674:tid 3721] [client 188.166.54.91:0] [client 188.166.54.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/\|$)\|wp-content(?:/\|$)\|wp-includes(?:/\|$)\|wp-login\\\\.php$\|wp-editor\\\\.php$\|wp-mail\\\\.php$\|xmlrpc\\\\.php$)" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "152"] [id "100114"] [msg "Local Policy: WordPress probe on non-WordPress site"] [severity "WARNING"] [tag "local/wordpress-probe"] [hostname "iwle.com"] [uri "/wp-login.php"] [unique_id "auHqvJ2jysUWRkKCatjVkQAAAMo"] [Wed Oct 28 08:29:51.327399 2026] [:error] [pid 1497:tid 1649] [client 188.166.54.91:55757] [client 188.166.54.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)^/(?:wp-admin(?:/\|$)\|wp-content(?:/\|$)\|wp-includes(?:/\|$)\|wp-login\\\\.php$\|wp-editor\\\\.php$\|wp-mail\\\\.php$\|xmlrpc\\\\.php$)" at REQUEST_URI. [file "/etc/httpd/modsecurity.d/local_rules/100-s ... show less	Bad Web Bot Web App Attack
🇹🇷 rtbh.com.tr	2026-02-17 20:11:37 UTC · (8 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Mr.Singh	2026-02-15 18:30:19 UTC · (8 months ago)	NFT blocked 188.166.54.91 on 16-Feb-2026..	Port Scan Brute-Force
Anonymous	2026-02-15 17:44:02 UTC · (8 months ago)	Port Scanner	Port Scan
🇩🇪 ghostwarriors	2026-02-15 17:20:29 UTC · (8 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇩🇪 snhosting	2026-02-15 16:54:57 UTC · (8 months ago)	2026-02-15T17:51:58.941594+01:00 www4 sshd-session[1809863]: Failed password for root from 188.166.54.91 port 55950 ssh2 2026-02-15T17:53:25.838929+01:00 www4 sshd-session[1813538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more 2026-02-15T17:51:58.941594+01:00 www4 sshd-session[1809863]: Failed password for root from 188.166.54.91 port 55950 ssh2 2026-02-15T17:53:25.838929+01:00 www4 sshd-session[1813538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.91 user=root 2026-02-15T17:53:27.718649+01:00 www4 sshd-session[1813538]: Failed password for root from 188.166.54.91 port 42028 ssh2 2026-02-15T17:54:47.106339+01:00 www4 sshd-session[1816604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.91 user=root 2026-02-15T17:54:48.829694+01:00 www4 sshd-session[1816604]: Failed password for root from 188.166.54.91 port 57906 ssh2 ... show less	Phishing Email Spam Brute-Force Web App Attack SSH
Anonymous	2026-02-15 16:54:47 UTC · (8 months ago)	2026-02-15T17:49:02.019291+01:00 hvs sshd-session[14144]: Connection closed by authenticating user root 188.166.54.91 port 60018 [preauth] 2026-02-15T17:50:33.518639+01:00 hvs sshd-session[14156]: Connection closed by authenticating user root 188.166 ... show more 2026-02-15T17:49:02.019291+01:00 hvs sshd-session[14144]: Connection closed by authenticating user root 188.166.54.91 port 60018 [preauth] 2026-02-15T17:50:33.518639+01:00 hvs sshd-session[14156]: Connection closed by authenticating user root 188.166.54.91 port 59512 [preauth] 2026-02-15T17:51:58.091528+01:00 hvs sshd-session[14166]: Connection closed by authenticating user root 188.166.54.91 port 56154 [preauth] 2026-02-15T17:53:27.740322+01:00 hvs sshd-session[14195]: Connection closed by authenticating user root 188.166.54.91 port 59196 [preauth] 2026-02-15T17:54:46.768043+01:00 hvs sshd-session[14208]: Connection closed by authenticating user root 188.166.54.91 port 45994 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-02-15 16:52:13 UTC · (8 months ago)	2026-02-15T17:50:46.261223+01:00 hosting15 sshd[680523]: Failed password for root from 188.166.54.91 port 35412 ssh2 2026-02-15T17:52:10.063645+01:00 hosting15 sshd[680825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh r ... show more 2026-02-15T17:50:46.261223+01:00 hosting15 sshd[680523]: Failed password for root from 188.166.54.91 port 35412 ssh2 2026-02-15T17:52:10.063645+01:00 hosting15 sshd[680825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.91 user=root 2026-02-15T17:52:12.277550+01:00 hosting15 sshd[680825]: Failed password for root from 188.166.54.91 port 43396 ssh2 ... show less	Brute-Force SSH
🇫🇷 Nazariel	2026-02-15 16:52:08 UTC · (8 months ago)	2026-02-15T17:50:41.517793+01:00 caddy sshd[69415]: Failed password for root from 188.166.54.91 port 39752 ssh2 2026-02-15T17:52:05.121881+01:00 caddy sshd[69436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos ... show more 2026-02-15T17:50:41.517793+01:00 caddy sshd[69415]: Failed password for root from 188.166.54.91 port 39752 ssh2 2026-02-15T17:52:05.121881+01:00 caddy sshd[69436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.91 user=root 2026-02-15T17:52:07.316679+01:00 caddy sshd[69436]: Failed password for root from 188.166.54.91 port 38204 ssh2 ... show less	Brute-Force SSH
🇩🇪 KeksGauner	2026-02-15 16:52:04 UTC · (8 months ago)	2026-02-15T17:50:39.565738+01:00 PrivateGSM sshd[2083555]: Failed password for root from 188.166.54.91 port 60968 ssh2 2026-02-15T17:52:01.497858+01:00 PrivateGSM sshd[2083605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more 2026-02-15T17:50:39.565738+01:00 PrivateGSM sshd[2083555]: Failed password for root from 188.166.54.91 port 60968 ssh2 2026-02-15T17:52:01.497858+01:00 PrivateGSM sshd[2083605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.91 user=root 2026-02-15T17:52:03.474780+01:00 PrivateGSM sshd[2083605]: Failed password for root from 188.166.54.91 port 40672 ssh2 ... show less	Brute-Force SSH
🇩🇪 moretrix	2026-02-15 16:51:59 UTC · (8 months ago)	2026-02-15T17:50:34.163245+01:00 ieyasu.moretrix.com sshd-session[718659]: User root from 188.166.54.91 not allowed because none of user's groups are listed in AllowGroups 2026-02-15T17:51:57.714124+01:00 ieyasu.moretrix.com sshd-session[718669]: Con ... show more 2026-02-15T17:50:34.163245+01:00 ieyasu.moretrix.com sshd-session[718659]: User root from 188.166.54.91 not allowed because none of user's groups are listed in AllowGroups 2026-02-15T17:51:57.714124+01:00 ieyasu.moretrix.com sshd-session[718669]: Connection from 188.166.54.91 port 53196 on 176.9.64.17 port 22 rdomain "" 2026-02-15T17:51:59.113905+01:00 ieyasu.moretrix.com sshd-session[718669]: User root from 188.166.54.91 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇩🇪 1000grad.com	2026-02-15 16:51:36 UTC · (8 months ago)	Feb 15 17:50:09 epaper-docker-02 sshd[857665]: User root from 188.166.54.91 not allowed because none of user's groups are listed in AllowGroups Feb 15 17:50:10 epaper-docker-02 sshd[857665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Feb 15 17:50:09 epaper-docker-02 sshd[857665]: User root from 188.166.54.91 not allowed because none of user's groups are listed in AllowGroups Feb 15 17:50:10 epaper-docker-02 sshd[857665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.91 user=root Feb 15 17:50:12 epaper-docker-02 sshd[857665]: Failed password for invalid user root from 188.166.54.91 port 38488 ssh2 Feb 15 17:51:34 epaper-docker-02 sshd[872354]: Connection from 188.166.54.91 port 33290 on 176.9.120.211 port 22 rdomain "" Feb 15 17:51:35 epaper-docker-02 sshd[872354]: User root from 188.166.54.91 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇵🇱 Samuil Warshan	2026-02-15 16:51:32 UTC · (8 months ago)	F2B blocked SSH BF	Brute-Force SSH
🇨🇭 ale	2026-02-15 16:50:44 UTC · (8 months ago)	SSH auth scanning - multiple failed logins	Brute-Force SSH
🇷🇺 iGor2024	2026-02-15 16:50:37 UTC · (8 months ago)	$f2bV_matches	Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 161.120.172.166

🇺🇸 68.44.42.168

🇫🇮 46.29.26.203

🇰🇷 20.214.165.240

🇮🇳 157.245.108.6

🇨🇳 118.145.107.219

🇧🇭 109.161.196.135

🇳🇬 105.113.85.195

🇧🇩 103.41.244.128

🇩🇪 2.26.18.76

🇵🇱 2400:cb00:1055:1000:c2f6:a9b8:9249:e28d

🇲🇾 202.188.35.124

🇮🇶 169.224.86.235

🇺🇸 66.80.28.68

🇩🇪 64.89.163.94

🇳🇱 34.178.173.159

🇺🇸 3.129.187.38

🇳🇱 193.47.62.69

🇯🇵 160.251.255.178

🇪🇨 157.100.66.122