JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 188.66.255.56

188.66.255.56 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 77%: ?

77%

ISP	Omani Qatari Telecommunication Company SAOC
Usage Type	Fixed Line ISP
ASN	AS50010
Hostname(s)	dynamic.isp.ooredoo.om
Domain Name	ooredoo.om
Country	🇴🇲 Oman
City	Seeb, Muscat

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 188.66.255.56

Whois 188.66.255.56

IP Abuse Reports for 188.66.255.56:

This IP address has been reported a total of 24 times from 13 distinct sources. 188.66.255.56 was first reported on June 25th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-29 20:12:06 (6 hours ago)	(mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 16:11:58.814572 2026] [security2:error] [pid 7426:tid 7426] [client 188.66.255.56:53050] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 188.66.255.56 (+1 hits since last alert)\|d-sinema.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "d-sinema.com"] [uri "/xmlrpc.php"] [unique_id "akLRjh9ys4K9t0pDfAPaaQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-29 19:40:38 (6 hours ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)	Hacking
🇺🇸 WeekendWeb	2026-06-29 19:09:41 (7 hours ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 14:25:30 (12 hours ago)	(mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 10:25:23.213995 2026] [security2:error] [pid 9872:tid 9872] [client 188.66.255.56:58485] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 188.66.255.56 (+1 hits since last alert)\|techoutletec.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "techoutletec.com"] [uri "/xmlrpc.php"] [unique_id "akKAU5HaF6H5eriCyfXlWwAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-29 13:20:36 (13 hours ago)	Blocked by CSF 13 firewall - Rule: XMLRPC OM/Oman/dynamic.isp.ooredoo.om	Web App Attack
🇺🇸 TPI-Abuse	2026-06-29 12:21:44 (14 hours ago)	(mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 08:21:39.942035 2026] [security2:error] [pid 29893:tid 29893] [client 188.66.255.56:62422] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 188.66.255.56 (+1 hits since last alert)\|lightningbug.farm\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightningbug.farm"] [uri "/xmlrpc.php"] [unique_id "akJjU7KNLglwESmaWFbFuAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-06-28 21:36:33 (1 day ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
Anonymous	2026-06-28 21:13:38 (1 day ago)	[ssd5.kdns.gr] httpd-xmlrpc-post: sites=weihnachtsbasar-athen.gr; logs=/var/log/httpd/domains/weihna ... show more [ssd5.kdns.gr] httpd-xmlrpc-post: sites=weihnachtsbasar-athen.gr; logs=/var/log/httpd/domains/weihnachtsbasar-athen.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
Anonymous	2026-06-28 18:21:28 (1 day ago)	(wordpress) Failed wordpress login from 188.66.255.56 (OM/Oman/dynamic.isp.ooredoo.om)	Brute-Force
Anonymous	2026-06-28 16:47:53 (1 day ago)	188.66.255.56 - - [28/Jun/2026:18:47:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by W ... show more 188.66.255.56 - - [28/Jun/2026:18:47:32 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 188.66.255.56 - - [28/Jun/2026:18:47:33 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)" 188.66.255.56 - - [28/Jun/2026:18:47:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 188.66.255.56 - - [28/Jun/2026:18:47:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.4)" 188.66.255.56 - - [28/Jun/2026:18:47:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 593 "-" "WordPress.com; https://wordpress.com" ... show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 14:07:10 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 10:07:05.081552 2026] [security2:error] [pid 6555:tid 6555] [client 188.66.255.56:64040] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 188.66.255.56 (+1 hits since last alert)\|gacstoday.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gacstoday.com"] [uri "/xmlrpc.php"] [unique_id "akEqiV5_271xS73Kmh9PHgAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 20:01:17 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 16:01:10.595569 2026] [security2:error] [pid 8126:tid 8126] [client 188.66.255.56:49396] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 188.66.255.56 (+1 hits since last alert)\|indiahouseportland.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "indiahouseportland.com"] [uri "/xmlrpc.php"] [unique_id "akAsBmCH0xIGfpnl9JRJigAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-06-27 12:11:40 (2 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 10:35:21 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 188.66.255.56 (dynamic.isp.ooredoo.om): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:35:18.482943 2026] [security2:error] [pid 24411:tid 24535] [client 188.66.255.56:57584] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 188.66.255.56 (+1 hits since last alert)\|jofdt.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jofdt.com"] [uri "/xmlrpc.php"] [unique_id "aj-nZqJl4iArRixTRCa_XAAAAMo"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-26 20:38:10 (3 days ago)	Attac	Brute-Force

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.146

🇪🇹 196.188.93.169

🇺🇸 162.216.150.169

🇩🇪 144.31.51.9

🇺🇸 104.234.19.64

🇺🇸 65.49.20.119

🇨🇳 45.126.120.53

🇻🇳 14.225.206.187

🇰🇷 158.180.87.26

🇵🇱 146.59.32.16

🇺🇸 130.131.162.246

🇨🇳 49.75.11.176

🇧🇷 45.229.91.34

🇰🇷 223.171.94.26

🇷🇺 217.168.240.63

🇺🇸 209.163.119.231

🇲🇲 136.228.161.66

🇺🇸 50.84.211.204

🇬🇧 31.14.254.100

🇨🇳 27.155.92.28