JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 166.1.131.47

166.1.131.47 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 2%: ?

ISP	Ace Data Centers, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS35830
Domain Name	acedatacenter.com
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 166.1.131.47

Whois 166.1.131.47

IP Abuse Reports for 166.1.131.47:

This IP address has been reported a total of 14 times from 5 distinct sources. 166.1.131.47 was first reported on August 4th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ambor	2026-05-30 09:01:33 (2 weeks ago)	Honeypot access: WordPress admin access attempt. Path: /wp-login.php	Brute-Force Web App Attack
🇨🇿 lp	2025-03-20 16:23:00 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-20T16:12:45+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-20T16:12:45+01:00 vpn Access-Reject 'dannyg' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-19 13:23:48 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-19T12:59:09+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-19T12:59:09+01:00 vpn Access-Reject 'fancy' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-18 17:51:24 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-18T18:43:22+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-18T18:43:22+01:00 vpn Access-Reject 'brehznev' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-16 01:21:15 (1 year ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 166.1.131.47 2025-03-16T01:07:11+01:0 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 166.1.131.47 2025-03-16T01:07:11+01:00 vpn Access-Reject 'm5driver' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2025-03-16T01:07:49+01:00 vpn Access-Reject 'mack45' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-15 01:21:41 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-15T01:53:17+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-15T01:53:17+01:00 vpn Access-Reject 'holmes' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2025-03-13 13:23:44 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-13T13:02:31+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-03-13T13:02:31+01:00 vpn Access-Reject '4555529' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2025-03-07 00:12:54 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 166.1.131.47 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 166.1.131.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 06 19:12:46.517590 2025] [security2:error] [pid 11546:tid 11546] [client 166.1.131.47:46989] [client 166.1.131.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jhollingshead.com"] [uri "/.env"] [unique_id "Z8o5_k7fuO0d787rKJyOowAAAAQ"], referer: https://tasamm.com/about/ggg191.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-02-16 15:39:26 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 166.1.131.47 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 166.1.131.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 16 10:39:22.809084 2025] [security2:error] [pid 1045:tid 1045] [client 166.1.131.47:46293] [client 166.1.131.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bostonmarathonstories.com"] [uri "/.env"] [unique_id "Z7IGqrEOqrQmUSJo0xmX5gAAAAY"], referer: https://tasamm.com/about/bbb73.html show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2025-02-15 07:21:54 (1 year ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-02-15T07:09:22+01:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 166.1.131.47 2025-02-15T07:09:22+01:00 vpn Access-Reject 'miguel' station: 166.1.131.47 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇸🇪 OnTheEdge	2025-02-13 05:44:33 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-02-11 08:20:20 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇸🇪 OnTheEdge	2025-01-31 14:49:54 (1 year ago)	Password spraying. Multiple unauthorized login attempts	Hacking Web App Attack
🇮🇩 hermawan	2024-08-04 23:31:16 (1 year ago)	[Mon Aug 05 06:12:47.450222 2024] [authz_core:error] [pid 278238:tid 139481248171584] [client 166.1. ... show more [Mon Aug 05 06:12:47.450222 2024] [authz_core:error] [pid 278238:tid 139481248171584] [client 166.1.131.47:30561] AH01630: client denied by server configuration: /var/www/administrator/ [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[278280] [L23UsjtoMwY] [ZrAK70dDWVGYfZJQGwuyiAAAAYA] keep_alive=[0] [2024-08-05 06:12:47.450227] [R:ZrAK70dDWVGYfZJQGwuyiAAAAYA] UA:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8' Accept-Encoding:'gzip, deflate Accept-Language:'en-US,en;q=0.5 Upgrade-Insecure-Requests:'1 ... show less	Hacking Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.59.201.12

🇳🇱 172.217.96.18

🇺🇸 69.61.66.250

🇨🇳 220.179.87.204

🇹🇼 218.161.48.241

🇺🇸 207.90.244.4

🇵🇭 180.195.45.153

🇻🇳 171.231.181.252

🇮🇳 163.223.48.92

🇻🇳 118.70.239.231

🇫🇷 91.231.89.9

🇺🇸 91.230.168.30

🇶🇦 34.18.62.244

🇨🇳 222.189.99.199

🇪🇸 217.160.226.51

🇬🇧 195.206.182.205

🇩🇪 167.94.146.50

🇫🇷 143.244.57.82

🇺🇸 138.197.204.198

🇫🇷 91.231.89.133