JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

188.166.55.74

Recent Activity

Abuse Confidence Score

100% Critical

100 reports

79 reporters · latest 26 minutes ago

ISP: Digital Ocean, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

100 from 79 distinct reporters

First reported

October 16th 2022

Most recent report

26 minutes ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 9 🇩🇪 Germany 6 🇺🇸 United States of America 6

Most common categories Web App Attack 22 Bad Web Bot 15 Brute-Force 9 Hacking 7 SSH 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-06 15:36:25 UTC · (26 minutes ago)	PSCSERV WPSCAN 188.166.55.74	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-06 15:04:13 UTC · (58 minutes ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: idp.goblinpot.site \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: idp.goblinpot.site \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 13:53:55 UTC · (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 188.166.55.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:53:49.313310 2026] [security2:error] [pid 14553:tid 14553] [client 188.166.55.74:1350] Mo ... show more (mod_security) mod_security (id:210492) triggered by 188.166.55.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:53:49.313310 2026] [security2:error] [pid 14553:tid 14553] [client 188.166.55.74:1350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kinnairdenterprisesllc.com.pages4you.com"] [uri "/.env"] [unique_id "au3b7W_v8Id2q5t09WKcVQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-11-06 12:02:17 UTC · (4 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: billing.definitelynotahoneypot.top \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: billing.definitelynotahoneypot.top \| Path: /.env \| User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 10:36:48 UTC · (5 hours ago)	(mod_security) mod_security (id:248270) triggered by 188.166.55.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:36:43.932854 2026] [security2:error] [pid 12247:tid 12247] [client 188.166.55.74:43496] M ... show more (mod_security) mod_security (id:248270) triggered by 188.166.55.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:36:43.932854 2026] [security2:error] [pid 12247:tid 12247] [client 188.166.55.74:43496] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?\|rmi\|dns\|iiop\|nis\|nds\|corba\|\\\\$\\\\{(?:lower\|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j\|\|weddingnapkins.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "weddingnapkins.com"] [uri "/"] [unique_id "au2tu0HaCf1Qf77yBbYExwAAAAc"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe} show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 rh24	2026-11-06 09:54:55 UTC · (6 hours ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 188.166.55.74 (NL/The Netherlands/-)	Hacking
🇳🇱 Site.eu	2026-11-06 09:40:57 UTC · (6 hours ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-11-06 09:31:52 UTC · (6 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 paissangroup	2026-11-06 09:22:23 UTC · (6 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 Keith Beucler	2026-11-06 06:02:32 UTC · (10 hours ago)	K5 Services fail2ban jail nginx-k5-web-probes detected high-confidence web abuse. Local web ban applied. Categories: 19,21.	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-11-06 05:15:27 UTC · (10 hours ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 188.166.55.74 - - [06/Nov/2026:06:15:16 +0100] "GET /.git/HEAD HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 188.166.55.74 - - [06/Nov/2026:06:15:16 +0100] "GET /.git/HEAD HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇧🇪 cmbplf	2026-11-06 04:40:04 UTC · (11 hours ago)	103 requests with url.path *config.json	Brute-Force Bad Web Bot
🇩🇪 yvoictra	2026-11-06 04:30:03 UTC · (11 hours ago)	Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/CVE-2017-9841	Brute-Force
🇺🇸 TPI-Abuse	2026-11-06 04:04:13 UTC · (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 188.166.55.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:04:08.042537 2026] [security2:error] [pid 18719:tid 18789] [client 188.166.55.74:57162] M ... show more (mod_security) mod_security (id:210492) triggered by 188.166.55.74 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:04:08.042537 2026] [security2:error] [pid 18719:tid 18789] [client 188.166.55.74:57162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "navinole.com"] [uri "/.git/HEAD"] [unique_id "au1RuFgPrf-buXC8CD9pdwAAAcY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-11-06 02:26:58 UTC · (13 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 188.166.55.74 (NL/The Netherlands/-)	SQL Injection

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.89

🇺🇸 205.210.31.74

🇧🇫 102.180.239.151

🇧🇷 205.210.31.238

🇺🇸 205.210.31.2

🇸🇪 194.195.91.11

🇳🇱 193.176.31.217

🇺🇸 71.208.185.191

🇳🇱 23.109.155.204

🇧🇷 205.210.31.170

🇧🇷 205.210.31.154

🇺🇸 205.210.31.17

🇵🇭 149.30.146.122

🇨🇳 116.147.148.233

🇵🇱 94.26.68.133

🇬🇪 80.241.241.170

🇰🇷 220.116.117.213

🇧🇷 205.210.31.150

🇧🇷 205.210.31.137

🇳🇱 200.138.46.21