JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

188.166.70.8

Activity Trending Down

Abuse Confidence Score

15% Caution

56 reports

32 reporters · latest 3 weeks ago

ISP: Digital Ocean, Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

56 from 32 distinct reporters

First reported

January 25th 2026

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 3 🇩🇪 Germany 1

Most common categories Port Scan 3 Hacking 1 DDoS Attack 1 Web App Attack 1 Blog Spam 1

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 chronos	2026-10-21 02:46:59 UTC · (3 weeks ago)	[AUTORAVALT][[20/10/2026 - 23:46:58 -03:00 UTC] Attack from [188.166.70.8][104738.forestengine.net] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum ... show more [AUTORAVALT][[20/10/2026 - 23:46:58 -03:00 UTC] Attack from [188.166.70.8][104738.forestengine.net] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to pr] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇺🇸 RAP	2026-09-15 02:42:56 UTC · (1 month ago)	2026-09-15 02:42:56 UTC Unauthorized activity to TCP port 3306.	Port Scan
🇺🇸 xmission.com	2026-09-15 02:01:13 UTC · (1 month ago)	Blocked by UFW (TCP on 3333) Source port: 61011 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 188.166.70.8) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2026-09-15 01:05:43 UTC · (1 month ago)	denied traffic to a honeypot network. destination port 5000.	Port Scan Hacking
🇬🇧 PeravixGroup	2026-05-05 09:08:36 UTC · (6 months ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 3306. Severity: HIGH. Aaran.cloud	Hacking Exploited Host
🇺🇸 RAP	2026-05-05 08:26:26 UTC · (6 months ago)	2026-05-05 08:26:26 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 MPL	2026-05-05 08:05:59 UTC · (6 months ago)	tcp/6939	Port Scan
🇳🇱 i-turnradio.nl	2026-03-10 10:47:42 UTC · (8 months ago)	2026-03-10 11:47:42 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇹🇷 rtbh.com.tr	2026-02-03 08:11:22 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-01-27 20:11:15 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-01-26 20:11:14 UTC · (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-01-26 03:02:42 UTC · (9 months ago)	Fail2Ban detection - brute-force attempt (jail: sshd)	Brute-Force
🇨🇭 GAS	2026-01-25 22:38:59 UTC · (9 months ago)	SSH Honeypot attack. {"client_version":"SSH-2.0-Go","destinationServicename":"sshd","dpt":"2222","dst":"REDACTED.2","duser":"root","level":"info","msg":"Request with password","password":"1234567890","product":"ssh-auth-logger","server_key_type":"ssh ... show more SSH Honeypot attack. {"client_version":"SSH-2.0-Go","destinationServicename":"sshd","dpt":"2222","dst":"REDACTED.2","duser":"root","level":"info","msg":"Request with password","password":"1234567890","product":"ssh-auth-logger","server_key_type":"ssh-ed25519","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","spt":"40416","src":"188.166.70.8","time":"2026-01-25T20:51:12+01:00"} {"client_version":"SSH-2.0-Go","destinationServicename":"sshd","dpt":"2222","dst":"REDACTED.2","duser":"root","level":"info","msg":"Request with password","password":"password1","product":"ssh-auth-logger","server_key_type":"ssh-ed25519","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","spt":"34900","src":"188.166.70.8","time":"2026-01-25T20:51:53+01:00"} {"client_version":"SSH-2.0-Go","destinationServicename":"sshd","dpt":"2222","dst":"REDACTED.2","duser":"root","level":"info","msg":"Request with password","password":"admin123","product":"ssh-auth-logger","server_key_type":"ssh-ed25519","server_version":"SSH-2.0 ... show less	Brute-Force SSH
🇩🇪 laotuo	2026-01-25 21:12:37 UTC · (9 months ago)	Jan 25 22:12:35 h2930838 sshd[31236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.70.8 Jan 25 22:12:37 h2930838 sshd[31236]: Failed password for invalid user weblogic from 188.166.70.8 port 40112 s ... show more Jan 25 22:12:35 h2930838 sshd[31236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.70.8 Jan 25 22:12:37 h2930838 sshd[31236]: Failed password for invalid user weblogic from 188.166.70.8 port 40112 ssh2 show less	Brute-Force SSH
🇩🇪 mueller-nils.com	2026-01-25 21:12:11 UTC · (9 months ago)	Jan 25 22:11:40 [host] sshd[20919]: Connection closed by invalid user weblogic 188.166.70.8 port 477 Jan 25 22:12:08 [host] sshd[20946]: Invalid user weblogic from 188.166.70.8 port 39488 Jan 25 22:12:08 [host] sshd[20946]: pam_unix(sshd:auth): authe ... show more Jan 25 22:11:40 [host] sshd[20919]: Connection closed by invalid user weblogic 188.166.70.8 port 477 Jan 25 22:12:08 [host] sshd[20946]: Invalid user weblogic from 188.166.70.8 port 39488 Jan 25 22:12:08 [host] sshd[20946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid Jan 25 22:12:10 [host] sshd[20946]: Failed password for invalid user weblogic from 188.166.70.8 port Jan 25 22:12:10 [host] sshd[20946]: Connection closed by invalid user weblogic 188.166.70.8 port 394 show less	Brute-Force SSH

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 178.16.141.244

🇺🇸 65.49.1.207

🇭🇰 209.33.167.17

🇰🇪 197.248.159.55

🇩🇪 195.182.16.183

🇺🇸 152.232.241.225

🇺🇸 96.62.71.90

🇷🇴 92.118.39.77

🇵🇱 81.162.210.36

🇺🇸 68.202.162.190

🇳🇱 45.148.10.141

🇺🇸 43.110.37.217

🇬🇧 2.57.17.64

🇨🇳 223.13.120.51

🇭🇰 129.226.50.175

🇸🇬 114.119.143.51

🇧🇩 103.187.95.51

🇺🇸 100.50.17.159

🇺🇸 71.226.84.31

🇫🇷 5.196.82.241