JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 167.99.96.113

167.99.96.113 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 2%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 167.99.96.113

Whois 167.99.96.113

IP Abuse Reports for 167.99.96.113:

This IP address has been reported a total of 15 times from 10 distinct sources. 167.99.96.113 was first reported on November 29th 2020, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Oakley	2026-05-28 12:17:09 (2 weeks ago)	(confirmed_bot_sig) Confirmed bot	Hacking
🇩🇪 kjaerulff	2025-11-24 12:05:37 (6 months ago)	Failed Wordpress login using xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2025-11-06 19:39:52 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 167.99.96.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 167.99.96.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 14:39:43.866294 2025] [security2:error] [pid 18612:tid 18625] [client 167.99.96.113:40710] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|pamper.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "pamper.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQz5fyGD08W_1osawLHmXwAAAIs"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-06 16:47:39 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 167.99.96.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 167.99.96.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 06 11:47:34.007521 2025] [security2:error] [pid 3116988:tid 3116988] [client 167.99.96.113:41232] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|starrmail.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "starrmail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "aQzRJqI_wOX5ETzS_yvR7gAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-05 12:01:28 (7 months ago)	(mod_security) mod_security (id:225170) triggered by 167.99.96.113 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 167.99.96.113 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 05 07:01:23.238122 2025] [security2:error] [pid 23345:tid 23345] [client 167.99.96.113:46780] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|interiorsolutions-stuart.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "interiorsolutions-stuart.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aQs8k242VT86Yb_JHUEFRQAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-08-04 15:50:06 (10 months ago)	Botnet - login attempts with leaked random user/pass lists	Hacking Brute-Force Web App Attack
🇮🇹 Progetto1	2025-07-25 00:49:02 (10 months ago)	Mail - Multiple failed login attempts	Brute-Force Exploited Host
🇨🇳 ThreatBook.io	2025-02-01 23:09:46 (1 year ago)	ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/167.99.96.113 2025-02-01 ... show more ThreatBook Intelligence: vpn_proxy more details on http://threatbook.io/ip/167.99.96.113 2025-02-01 01:33:06 //195.133.91.50:3001 2025-02-01 01:32:56 //195.189.109.109:443 2025-02-01 01:32:54 //194.87.173.187:3000 2025-02-01 01:32:56 //195.189.108.88:21 2025-02-01 01:32:55 //195.133.91.18:3000 2025-02-01 01:32:56 //195.189.110.72:21 show less	Web App Attack
Anonymous	2024-07-17 01:07:40 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-21 03:30:47 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
Anonymous	2024-06-19 06:42:34 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
🇩🇪 BestFans.com	2024-04-10 18:22:02 (2 years ago)	Credential brute-force attacks on webpage logins	Brute-Force
🇪🇸 saima.info	2024-02-05 10:33:11 (2 years ago)	Port scanning, proxy abuse	Port Scan Brute-Force
🇪🇸 saima.info	2024-02-05 10:33:11 (2 years ago)	Port scanning, proxy abuse	Port Scan Brute-Force
🇨🇦 nextoo.de	2020-11-29 21:28:25 (5 years ago)	Chat Spam	Web Spam

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 220.247.13.210

🇬🇧 185.192.71.245

🇮🇳 172.253.226.113

🇹🇭 118.194.250.127

🇳🇱 93.123.72.183

🇨🇦 85.217.149.74

🇨🇦 24.77.168.25

🇳🇱 2.58.56.61

🇹🇼 198.235.24.75

🇹🇳 197.27.103.27

🇳🇱 195.178.110.30

🇰🇷 118.33.113.91

🇨🇳 112.97.201.131

🇺🇿 87.192.224.131

🇩🇪 64.89.163.89

🇱🇹 45.227.254.170

🇧🇷 45.205.1.243

🇧🇷 45.205.1.241

🇺🇸 45.92.229.24

🇬🇧 34.105.254.53