JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.1.131.211

166.1.131.211 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 3%: ?

ISP	Ace Data Centers, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	acedatacenter.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.1.131.211

Whois 166.1.131.211

IP Abuse Reports for 166.1.131.211:

This IP address has been reported a total of 11 times from 6 distinct sources. 166.1.131.211 was first reported on July 14th 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tilellit.pro	2026-06-15 02:28:05 (2 days ago)	Fail2Ban banned 166.1.131.211 for security violations in jail wp-armour. Log: 2026/06/15 02:28:05 [e ... show more Fail2Ban banned 166.1.131.211 for security violations in jail wp-armour. Log: 2026/06/15 02:28:05 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 166.1.131.211 \| Target: wplogin" , client: 166.1.131.211, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
🇩🇪 Packets-Decreaser.NET	2025-12-10 14:37:39 (6 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇿 lp	2025-11-13 08:51:52 (7 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.211 2025-11-13T09:43:18+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.211 2025-11-13T09:43:18+01:00 vpn Access-Reject 'isaac.cooper' station: 166.1.131.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-11-11 14:51:00 (7 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.211 2025-11-11T15:40:39+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.211 2025-11-11T15:40:39+01:00 vpn Access-Reject 'storagesilo' station: 166.1.131.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-10-12 21:54:08 (8 months ago)	(mod_security) mod_security (id:225170) triggered by 166.1.131.211 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 166.1.131.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 12 17:54:00.596651 2025] [security2:error] [pid 13332:tid 13332] [client 166.1.131.211:40083] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|blacksheepoffroad.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "blacksheepoffroad.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aOwjeP6ZZN2xQM8aOxuiMAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-07-02 15:21:12 (11 months ago)	Unauthorized VPN login attempts: 3 attempts were recorded from 166.1.131.211 2025-07-02T16:15:29+02: ... show more Unauthorized VPN login attempts: 3 attempts were recorded from 166.1.131.211 2025-07-02T16:15:29+02:00 vpn Access-Reject 't.davis' station: 166.1.131.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-02T16:17:44+02:00 vpn Access-Reject 'k.thompson' station: 166.1.131.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-07-02T16:22:47+02:00 vpn Access-Reject 'k.johnson' station: 166.1.131.211 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-04-29 22:57:36 (1 year ago)	ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/166.1.131.211 2025 ... show more ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/166.1.131.211 2025-04-29 06:55:22 /+CSCOE+/logon.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-26 22:45:20 (1 year ago)	ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/166.1.131.211 2025 ... show more ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/166.1.131.211 2025-04-26 13:07:25 /+CSCOE+/logon.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-25 22:50:38 (1 year ago)	ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/166.1.131.211 2025 ... show more ThreatBook Intelligence: http_proxy,Spam more details on https://threatbook.io/ip/166.1.131.211 2025-04-25 05:23:11 /+CSCOE+/logon.html show less	Web App Attack
🇬🇧 essinghigh	2024-07-16 07:41:08 (1 year ago)	1721115667 # Service_probe # SIGNATURE_SEND # source_ip:166.1.131.211 # dst_port:60000 ...	Port Scan
🇬🇧 essinghigh	2024-07-14 20:39:09 (1 year ago)	1720989549 # Service_probe # SIGNATURE_SEND # source_ip:166.1.131.211 # dst_port:60000 ...	Port Scan

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.233.50.28

🇬🇧 213.165.91.70

🇰🇷 211.249.46.100

🇧🇷 200.108.174.4

🇺🇸 107.174.47.187

🇫🇷 91.196.152.243

🇺🇸 64.62.156.35

🇺🇸 204.152.216.158

🇲🇽 189.217.130.86

🇬🇧 172.253.82.22

🇺🇸 152.67.250.86

🇰🇷 125.209.235.172

🇨🇳 122.225.202.130

🇨🇳 120.26.46.187

🇨🇳 115.190.150.8

🇰🇷 114.111.32.26

🇷🇺 109.75.202.218

🇨🇳 101.96.195.102

🇫🇷 91.231.89.133

🇺🇸 52.177.169.196