AbuseIPDB » 172.96.5.215
172.96.5.215
This IP was reported 5 times. Confidence of
Abuse
is 23% : ?
ISP
Internet Utilities NA LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS9009
Domain Name
iana.org
Country
🇺🇸
United States of America
City
New York City, New York
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 172.96.5.215 :
This IP address has been reported a total of
5
times from
3 distinct
sources.
172.96.5.215 was first reported on
September 20th 2026 , and the most recent report was
10 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-23 04:52:43
(10 hours ago)
(mod_security) mod_security (id:217210) triggered by 172.96.5.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217210) triggered by 172.96.5.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 00:52:38.953150 2026] [security2:error] [pid 15539:tid 15571] [client 172.96.5.215:24767] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||kwainet.com|F|4"] [data "GET http://kwainet.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kwainet.com"] [uri "/"] [unique_id "arNbFkW0tBLefqfSSx5v-AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 20:29:32
(18 hours ago)
(mod_security) mod_security (id:217210) triggered by 172.96.5.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217210) triggered by 172.96.5.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:29:27.478927 2026] [security2:error] [pid 28569:tid 28580] [client 172.96.5.215:38317] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||thetooheys.com|F|4"] [data "GET http://thetooheys.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thetooheys.com"] [uri "/"] [unique_id "arLlJ568ubmIqLgR_mKjRwAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
SilverZippo
2026-09-22 17:05:36
(22 hours ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 07:30:57
(2 days ago)
(mod_security) mod_security (id:217210) triggered by 172.96.5.215 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217210) triggered by 172.96.5.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 03:30:53.063024 2026] [security2:error] [pid 9943:tid 9943] [client 172.96.5.215:12721] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./]*(?::\\\\d+)?)?/[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?|options \\\\*)\\\\s+[\\\\w\\\\./]+|get /[^?#]*(?:\\\\?[^#\\\\s]*)?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line||westonimports.com|F|4"] [data "GET http://westonimports.com HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "westonimports.com"] [uri "/"] [unique_id "arDdLfBGkI4XiDTkc_Mt_wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-09-20 09:25:41
(3 days ago)
Web attack/Malicious activity detected
Web App Attack
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: