JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.1.131.240

166.1.131.240 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 23%: ?

23%

ISP	Ace Data Centers, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	acedatacenter.com
Country	🇸🇪 Sweden
City	Marsta, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.1.131.240

Whois 166.1.131.240

IP Abuse Reports for 166.1.131.240:

This IP address has been reported a total of 23 times from 9 distinct sources. 166.1.131.240 was first reported on March 11th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-05-28 01:23:40 (1 week ago)	2026-05-28 @ 03:23:40 (CET) ~ Blocked for trying to access: /wp-login.php	Web App Attack
🇨🇭 backslash	2026-05-22 18:57:00 (2 weeks ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇺🇸 ne1for23	2026-05-20 17:10:20 (2 weeks ago)	166.1.131.240 - - [20/May/2026:17:10:19 +0000] "GET /wp-login.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 ... show more 166.1.131.240 - - [20/May/2026:17:10:19 +0000] "GET /wp-login.php HTTP/1.1" 403 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" show less	Web App Attack
🇩🇪 kjaerulff	2026-05-10 13:53:46 (3 weeks ago)	Failed Wordpress login using wp-login.php	Web App Attack
🇺🇸 www.winos.me	2026-02-16 14:19:42 (3 months ago)	Banned due to high error rate on HTTP/1.1 protocol	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-01-22 12:01:40 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 166.1.131.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 166.1.131.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 07:01:31.599401 2026] [security2:error] [pid 8895:tid 8895] [client 166.1.131.240:10183] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pakistanvision.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pakistanvision.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIRm8cFYaI1m2P8K200kwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-22 11:46:25 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 166.1.131.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 166.1.131.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 06:46:19.054311 2026] [security2:error] [pid 2221:tid 2270] [client 166.1.131.240:56811] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|arizonasolutionsgroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "arizonasolutionsgroup.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXIOC0OhP1rcjCw-pqwjYQAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-22 09:05:46 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 166.1.131.240 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 166.1.131.240 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 04:05:40.182249 2026] [security2:error] [pid 26512:tid 26512] [client 166.1.131.240:61855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|babylontravelone.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "babylontravelone.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aXHoZOli-4N-QmbSNAR2nwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2024-12-30 20:49:39 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-30T21:33:33+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-30T21:33:33+01:00 vpn Access-Reject 'alphacloud' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-26 20:49:46 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-26T20:36:22+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-26T20:36:22+01:00 vpn Access-Reject 'capitaling' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-25 01:21:13 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-25T01:29:48+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-25T01:29:48+01:00 vpn Access-Reject 'browning' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-22 22:21:03 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-22T21:44:40+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-22T21:44:40+01:00 vpn Access-Reject 'villarreal' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-22 02:50:04 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-22T03:19:07+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-22T03:19:07+01:00 vpn Access-Reject 'leon' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-19 21:41:05 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-19T22:25:17+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-19T22:25:17+01:00 vpn Access-Reject 'william' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-12-15 22:26:45 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-15T22:40:37+01: ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.240 2024-12-15T22:40:37+01:00 vpn Access-Reject 'american' station: 166.1.131.240 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 143.42.173.60

🇺🇸 107.152.44.215

🇳🇱 89.21.67.163

🇵🇱 85.128.143.147

🇫🇷 82.208.20.149

🇫🇷 82.102.18.126

🇧🇪 66.249.93.168

🇺🇸 62.146.169.114

🇭🇰 47.82.66.61

🇺🇸 45.156.129.85

🇨🇳 223.84.209.188

🇺🇸 205.210.31.89

🇨🇴 181.48.154.10

🇩🇪 178.27.90.142

🇺🇸 174.96.91.179

🇺🇸 74.125.224.49

🇧🇪 66.249.93.166

🇺🇸 66.249.70.38

🇹🇼 61.61.20.206

🇳🇱 45.198.224.141