AbuseIPDB » 166.1.131.40
166.1.131.40
This IP was reported 8 times. Confidence of
Abuse
is 24% : ?
ISP
Ace Data Centers, Inc.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS35830
Domain Name
acedatacenter.com
Country
🇿🇦
South Africa
City
Cape Town, Western Cape
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 166.1.131.40 :
This IP address has been reported a total of
8
times from
5 distinct
sources.
166.1.131.40 was first reported on
July 30th 2024 , and the most recent report was
21 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
dynamix
2026-06-12 14:43:09
(21 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 22:19:06
(2 days ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 18:19:00.312755 2026] [security2:error] [pid 10849:tid 10849] [client 166.1.131.40:46745] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||superlamb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superlamb.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aini1MOhB7UESSHZmpA9IgAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 02:11:21
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 22:11:17.894414 2026] [security2:error] [pid 5618:tid 5618] [client 166.1.131.40:64095] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||kampinenlaw.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kampinenlaw.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiOBxYGlESTt_vUIVijY2gAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-05-25 13:46:34
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 13:17:25
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 166.1.131.40 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 166.1.131.40 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 09:17:20.754591 2026] [security2:error] [pid 32183:tid 32183] [client 166.1.131.40:62325] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||norinpaco.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "norinpaco.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahBXYPIIIYzO4YXR6G37eAAAAAE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-05-18 21:11:48
(3 weeks ago)
Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /wp-login.php (wordpress_login). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
show less
Web App Attack
🇺🇸
nyt
2026-05-17 13:40:58
(3 weeks ago)
WP User Enumeration, WP Author Enumeration
Web App Attack
🇺🇸
MrDD
2024-07-30 14:43:39
(1 year ago)
Attempted brute force attack on Cisco web VPN
Brute-Force
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: