JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.61.40.166

194.61.40.166 was found in our database!

This IP was reported 194 times. Confidence of Abuse is 70%: ?

70%

ISP	VPN Consumer Mumbai, India
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137409
Domain Name	vpnconsumer.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.61.40.166

Whois 194.61.40.166

IP Abuse Reports for 194.61.40.166:

This IP address has been reported a total of 194 times from 83 distinct sources. 194.61.40.166 was first reported on November 24th 2023, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 sssrit	2026-08-22 11:23:41 (17 hours ago)	194.61.40.166 - - [22/Aug/2026:12:50:47 +0200] "POST /wp-login.php HTTP/1.1" 200 5059 "-" "Mozilla/5 ... show more 194.61.40.166 - - [22/Aug/2026:12:50:47 +0200] "POST /wp-login.php HTTP/1.1" 200 5059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" 194.61.40.166 - - [22/Aug/2026:13:09:48 +0200] "POST /wp-login.php HTTP/1.1" 200 5062 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" 194.61.40.166 - - [22/Aug/2026:13:23:41 +0200] "POST /wp-login.php HTTP/1.1" 200 5059 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-08-22 02:05:34 (1 day ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 dynamix	2026-08-22 01:00:05 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-08-18 14:16:17 (4 days ago)	[18/Aug/2026:17:16:17 +0300] -- 194.61.40.166 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-l ... show more [18/Aug/2026:17:16:17 +0300] -- 194.61.40.166 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-08-17 08:49:09 (5 days ago)	Scanning for exploits - /wp-login.php	Web App Attack
🇩🇪 FeG Deutschland	2026-08-16 01:50:52 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12	Exploited Host Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-15 17:18:41 (1 week ago)	Blocked by CSF 13 firewall - Rule: WPLOGIN NL/Netherlands/-	Web App Attack
🇺🇦 URAN Publishing Service	2026-08-15 11:37:20 (1 week ago)	[15/Aug/2026:14:37:19 +0300] -- 194.61.40.166 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-l ... show more [15/Aug/2026:14:37:19 +0300] -- 194.61.40.166 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-login.php HTTP/1.1 show less	Bad Web Bot Web App Attack
🇲🇹 Malta	2026-08-09 19:54:26 (1 week ago)	194.61.40.166 - - [09/Aug/2026:21:54:26 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows N ... show more 194.61.40.166 - - [09/Aug/2026:21:54:26 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇫🇷 Baking333	2026-08-08 07:06:15 (2 weeks ago)	[redacted] 194.61.40.166 - - [08/Aug/2026:08:06:13 +0100] "GET /[redacted] HTTP/1.1" 302 6768 0/6304 ... show more [redacted] 194.61.40.166 - - [08/Aug/2026:08:06:13 +0100] "GET /[redacted] HTTP/1.1" 302 6768 0/63049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; rv:143.0) Gecko/20100101 Firefox/143.0" [redacted] 194.61.40.166 - - [08/Aug/2026:08:06:14 +0100] "GET /wp-admin/ HTTP/1.1" 301 5828 0/284 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15" show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-08-07 22:15:33 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh \| URI: /wp-login.php \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-07 04:03:51 (2 weeks ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇹🇷 neron	2026-07-29 06:19:38 (3 weeks ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 masterguru	2026-07-26 09:25:33 (3 weeks ago)	(joomla_vulnerability) Apache: Massive search core.js (joomla) from 194.61.40.166 (IN/India/-): 1 in ... show more (joomla_vulnerability) Apache: Massive search core.js (joomla) from 194.61.40.166 (IN/India/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 Octopuce	2026-07-23 03:55:32 (1 month ago)	Aggressive web search of vulnerable pages: /atomlib.php /wp-includes/js/jquery/bypass.php /wp-includ ... show more Aggressive web search of vulnerable pages: /atomlib.php /wp-includes/js/jquery/bypass.php /wp-includes/xl2023.php /wp-includes/certificates/adm ... show less	Web App Attack

Showing 1 to 15 of 194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 2a06:4880:6000::83

🇨🇦 216.73.162.41

🇧🇪 198.235.24.185

🇬🇧 185.192.71.183

🇺🇸 184.105.247.195

🇺🇸 170.106.153.232

🇹🇭 165.154.120.30

🇨🇦 136.144.17.102

🇺🇸 47.251.125.230

🇺🇸 45.55.153.86

🇧🇪 34.62.112.240

🇯🇵 8.216.12.140

🇮🇪 4.210.91.174

🇫🇷 2400:cb00:1036:1000:147c:ddcc:990e:a5f

🇭🇰 199.45.154.183

🇨🇴 190.5.200.98

🇵🇭 143.44.165.203

🇹🇼 114.34.106.146

🇺🇸 68.225.60.172

🇬🇧 35.203.210.16