JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.253.121.66

188.253.121.66 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 16%: ?

16%

ISP	Akari Networks (Singapore)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38136
Domain Name	akari.hk
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.253.121.66

Whois 188.253.121.66

IP Abuse Reports for 188.253.121.66:

This IP address has been reported a total of 18 times from 12 distinct sources. 188.253.121.66 was first reported on October 24th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-07-13 17:54:33 (1 month ago)	IM360 WAF: Unauthenticated file upload / RCE in Joomla iCagenda registration.submit (CVE-2026-48939) ... show more IM360 WAF: Unauthenticated file upload / RCE in Joomla iCagenda registration.submit (CVE-2026-48939) MV:ic_b464840115.php show less	Hacking
🇺🇸 TPI-Abuse	2026-07-02 09:20:04 (1 month ago)	(mod_security) mod_security (id:225170) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:19:56.292975 2026] [security2:error] [pid 13156:tid 13156] [client 188.253.121.66:39616] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|champschallenge.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "champschallenge.org"] [uri "/wp-json/wp/v2/users"] [unique_id "akYtPP0VFX1LnJnRZ5q1fwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-01 17:48:30 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 13:48:24.670847 2026] [security2:error] [pid 25429:tid 25429] [client 188.253.121.66:24912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brevardzen.org"] [uri "/.env.example"] [unique_id "akVS6AnHItpAzghrCPvRRwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-01 17:39:57 (1 month ago)	Aggressive web search of vulnerable pages: /wp-config.php /docker-compose.yml /docker-compose.overri ... show more Aggressive web search of vulnerable pages: /wp-config.php /docker-compose.yml /docker-compose.override.yml /config.yml /config/database.yml ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 23:49:46 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 19:49:38.769026 2026] [security2:error] [pid 4636:tid 4636] [client 188.253.121.66:24384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-bukhari.org"] [uri "/.env.development"] [unique_id "akMEkpALW6hGNjikMqOq2AAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-28 21:00:04 (1 month ago)	\| [Dangerous/Australia] Aggressive IP 188.253.121.66 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Australia] Aggressive IP 188.253.121.66 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 mccsoft.io	2026-06-27 02:37:07 (1 month ago)	Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ... show more Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received). show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-25 17:38:29 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:38:23.189226 2026] [security2:error] [pid 15884:tid 15884] [client 188.253.121.66:38632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphatar.io"] [uri "/.env.production"] [unique_id "aj1nj_lc6z47e3JjSuszEQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-24 17:19:23 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 188.253.121.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 13:19:19.000101 2026] [security2:error] [pid 16919:tid 16919] [client 188.253.121.66:26418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madisonmedia.ai"] [uri "/.env.local"] [unique_id "ajwRlqGMc4lqS7sS8ujoKgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-06-24 14:11:57 (2 months ago)	/.env	Hacking Web App Attack
🇳🇱 Savvii	2026-06-01 04:19:17 (2 months ago)	20 attempts against mh-misbehave-ban on pf102960	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-08-24 22:29:55 (1 year ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/188.253.121.66 2025-08-24 1 ... show more ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/188.253.121.66 2025-08-24 15:32:24 /static/x.js 2025-08-24 15:32:24 /static/jquery.min.js 2025-08-24 15:32:22 / 2025-08-24 15:32:24 /static/login.min.css?ver=5.2.2 2025-08-24 15:32:23 /static/dashicons.min.css?ver=5.2.2 2025-08-24 15:32:24 /static/forms.min.css?ver=5.2.2 2025-08-24 15:32:24 /static/buttons.min.css show less	Web App Attack
🇺🇸 cpxducky	2025-06-30 05:22:14 (1 year ago)	2025-06-30 05:22:14: Minecraft server scan detected from 188.253.121.66 on port 25565 of mail.cpxduc ... show more 2025-06-30 05:22:14: Minecraft server scan detected from 188.253.121.66 on port 25565 of mail.cpxducky.com show less	Port Scan
🇺🇸 cpxducky	2025-06-28 02:43:37 (1 year ago)	2025-06-28 02:43:37: Minecraft server scan detected from 188.253.121.66 on port 25565 of mail.cpxduc ... show more 2025-06-28 02:43:37: Minecraft server scan detected from 188.253.121.66 on port 25565 of mail.cpxducky.com show less	Port Scan
Anonymous	2025-04-23 06:48:00 (1 year ago)	23-04-2025 08:48:00.4 ERROR util.AccessViolations - 188.253.121.66 report to fail2ban - action: bloc ... show more 23-04-2025 08:48:00.4 ERROR util.AccessViolations - 188.253.121.66 report to fail2ban - action: block ... show less	Hacking Brute-Force Bad Web Bot

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.67.157.167

🇫🇷 91.231.89.115

🇬🇧 194.50.235.144

🇺🇸 162.216.149.56

🇩🇪 69.5.169.43

🇺🇸 65.49.1.155

🇺🇸 64.62.156.80

🇨🇳 58.19.104.78

🇺🇸 45.33.40.18

🇮🇹 4.232.148.111

🇨🇭 209.99.185.81

🇵🇱 194.180.48.39

🇷🇴 92.118.39.49

🇺🇸 64.62.156.125

🇰🇷 43.155.230.249

🇬🇧 35.203.210.246

🇨🇦 15.157.135.226

🇦🇷 181.20.69.212

🇳🇱 176.65.148.243

🇮🇳 152.59.147.11