JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.167.147.66

199.167.147.66 was found in our database!

This IP was reported 208 times. Confidence of Abuse is 77%: ?

77%

ISP	HIVELOCITY, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS29802
Hostname(s)	server.vipreseller30ssd.com
Domain Name	hivelocity.net
Country	🇺🇸 United States of America
City	Tampa, Florida

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.167.147.66

Whois 199.167.147.66

IP Abuse Reports for 199.167.147.66:

This IP address has been reported a total of 208 times from 73 distinct sources. 199.167.147.66 was first reported on December 27th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-06-09 06:35:19 (1 day ago)	199.167.147.66 - - [09/Jun/2026:08:35:19 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Fedor ... show more 199.167.147.66 - - [09/Jun/2026:08:35:19 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 Hazzard	2026-06-09 04:32:43 (1 day ago)	(wordpress) Failed wordpress login from 199.167.147.66 (US/United States/Florida/Tampa/server.vipres ... show more (wordpress) Failed wordpress login from 199.167.147.66 (US/United States/Florida/Tampa/server.vipreseller30ssd.com/[redacted]): (CF_ENABLE) show less	Brute-Force
🇲🇹 Malta	2026-06-07 20:18:11 (2 days ago)	199.167.147.66 - - [07/Jun/2026:22:18:11 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ... show more 199.167.147.66 - - [07/Jun/2026:22:18:11 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-07 18:30:26 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 199.167.147.66 (server.vipreseller30ssd.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 199.167.147.66 (server.vipreseller30ssd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:30:20.079507 2026] [security2:error] [pid 7975:tid 7975] [client 199.167.147.66:53018] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|tonydelov.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "tonydelov.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiW4vJ3udBZxCus_Ww-jZwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-07 12:44:40 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 199.167.147.66 (server.vipreseller30ssd.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 199.167.147.66 (server.vipreseller30ssd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 08:44:33.187386 2026] [security2:error] [pid 27961:tid 27965] [client 199.167.147.66:0] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.mindgardens.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mindgardens.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiVnsbgPAAbomoBC6edlgQAAAQI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 ELYAZ	2026-06-06 08:07:37 (4 days ago)	(wordpress) Failed wordpress login from 199.167.147.66 (US/United States/server.vipreseller30ssd.com ... show more (wordpress) Failed wordpress login from 199.167.147.66 (US/United States/server.vipreseller30ssd.com): (CF_ENABLE) show less	Brute-Force
🇲🇹 Malta	2026-06-05 18:14:06 (5 days ago)	199.167.147.66 - - [05/Jun/2026:20:14:05 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux ... show more 199.167.147.66 - - [05/Jun/2026:20:14:05 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇺🇸 wordpresshosting.solutions	2026-06-05 09:53:01 (5 days ago)	WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 199.167.147.66 - - [05/Jun/2026 ... show more WordPress login/xmlrpc abuse or user enumeration detected. Evidence: 199.167.147.66 - - [05/Jun/2026:09:53:00 +0000] "GET /wp-login.php HTTP/1.1" 200 6661 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 199.167.147.66 - - [05/Jun/2026:09:53:00 +0000] "POST /wp-login.php HTTP/1.1" 503 20462 "https://[DOMAIN]/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-05 07:16:14 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 199.167.147.66 (server.vipreseller30ssd.com): 1 ... show more (mod_security) mod_security (id:225170) triggered by 199.167.147.66 (server.vipreseller30ssd.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 03:16:08.384423 2026] [security2:error] [pid 12283:tid 12329] [client 199.167.147.66:54964] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|atlasrecordssearch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "atlasrecordssearch.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "aiJ3uKQ-Uy94jdKvK1977AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-06-03 15:54:35 (1 week ago)	199.167.147.66 - - [03/Jun/2026:17:54:35 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; ... show more 199.167.147.66 - - [03/Jun/2026:17:54:35 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" Brute-force password attempt show less	Hacking Web App Attack Brute-Force
🇩🇪 FeG Deutschland	2026-06-03 01:35:55 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 xxkodedxx	2026-06-02 20:39:37 (1 week ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: US / AS29802 HIVELOCITY, Inc. Active: 20:39:21 UTC Volume: 1 HTTP req Probed: /?author=29 Status mix: 444×1 Vhost fishing: cards.zvxlabs.com UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-02 08:18:48 (1 week ago)	(modsec_5040) ModSec 5040: API Basic Auth blocked from 199.167.147.66 (US/United States/server.vipre ... show more (modsec_5040) ModSec 5040: API Basic Auth blocked from 199.167.147.66 (US/United States/server.vipreseller30ssd.com): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 solution.it	2026-05-31 22:41:01 (1 week ago)	[Mon Jun 01 00:41:00.956530 2026] [php7:error] [pid 17949:tid 17949] [client 199.167.147.66:42214] s ... show more [Mon Jun 01 00:41:00.956530 2026] [php7:error] [pid 17949:tid 17949] [client 199.167.147.66:42214] script '/var/www/html/blog.solution.it/wp-login.php' not found or unable to stat show less	Web App Attack
🇫🇷 tecnicorioja	2026-05-30 22:00:27 (1 week ago)	wp-login attack [30/May/2026:08:34:37	Brute-Force Web App Attack

Showing 1 to 15 of 208 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 150.255.95.220

🇨🇳 139.170.73.40

🇺🇸 138.197.200.106

🇸🇬 47.84.202.173

🇳🇱 45.148.10.147

🇺🇸 34.106.194.94

🇪🇹 196.190.41.137

🇨🇭 193.32.127.195

🇵🇰 175.107.0.69

🇩🇪 165.22.71.222

🇺🇸 45.79.207.129

🇺🇸 40.124.176.81

🇵🇱 31.179.197.26

🇮🇳 20.219.39.254

🇨🇿 2a02:598:128:8a00::b00:15

🇨🇳 222.176.201.129

🇨🇳 182.254.228.33

🇨🇳 124.167.20.72

🇨🇳 112.94.189.68

🇨🇳 106.12.74.119