188.166.56.252

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
32% Elevated
21 reports
20 reporters · latest 3 weeks ago
ISP
Digital Ocean, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇳🇱 Netherlands
City
Amsterdam, North Holland
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇨🇦 Canada 2 🇺🇸 United States of America 2
Most common categories Web App Attack 10 Bad Web Bot 5 Port Scan 3 Exploited Host 2 SSH 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
Anonymous
denied SSH access attempt. destination port 22.
Port Scan Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/8848 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning, Backup file probing
Bad Web Bot Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning, Backup file probing
Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting
Aggressive scanning resulting into 404
Bad Web Bot
🇩🇪 todix
WebAttack or semilar from 188.166.56.252
Web App Attack
🇺🇸 tedmichalik.com
188.166.56.252 - - [20/Sep/2026:16:23:49 -0400] "HEAD /blog/ HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" ...
Web App Attack
🇮🇹 abuseiphack
Automatic report for brute force attack
Web App Attack
🇺🇸 OceanTreasure
tcp/80; Silent legacy software probe: "HEAD /old/" @ 2026-09-20T18:57:34Z [proxy]
Web App Attack
🇫🇮 kumiko
[2026-09-20 21:49:54] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 0 seconds)
Bad Web Bot
🇩🇪 big-cloud.nl
Try to access /old/
Web App Attack
🇵🇱 nfsec.pl
Web App Attack Exploited Host
🇩🇪 FeG Deutschland
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host Web App Attack
Anonymous
SecLists/Directory Fuzzing Scanner. Automated Subnet Quarantine.
Port Scan Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇳 203.145.165.2
🇨🇴 186.117.163.222
🇳🇱 178.62.200.37
🇵🇱 172.64.200.191
🇺🇸 153.66.225.134
🇭🇰 152.32.251.44
🇮🇳 122.165.162.117
🇳🇱 86.38.187.145
🇮🇹 185.15.168.195
🇸🇬 146.190.97.104
🇺🇸 136.85.172.215
🇺🇸 71.41.4.165
🇫🇮 46.29.26.203
🇧🇪 35.206.190.200
🇨🇳 1.95.142.34
🇺🇸 199.165.159.105
feedback