AbuseIPDB » 199.180.9.116
199.180.9.116
This IP was reported 7 times. Confidence of
Abuse
is 0% : ?
ISP
Skyway Frieght Systems
Usage Type
Data Center/Web Hosting/Transit
ASN
AS394380
Domain Name
skywayinc.com
Country
🇺🇸
United States of America
City
Dallas, Texas
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 199.180.9.116 :
This IP address has been reported a total of
7
times from
5 distinct
sources.
199.180.9.116 was first reported on
June 18th 2025 , and the most recent report was
4 months ago
Old Reports:
The most recent abuse report for this IP address is from
4 months ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-01-22 10:22:31
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 199.180.9.116 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 199.180.9.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 05:22:27.302876 2026] [security2:error] [pid 17662:tid 17662] [client 199.180.9.116:52273] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k2servicesinc.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k2servicesinc.net"] [uri "/wp-json/wp/v2/users/1"] [unique_id "aXH6YxFl9bGStA9eBJ_p8AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-22 10:01:11
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 199.180.9.116 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:225170) triggered by 199.180.9.116 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 22 05:01:08.128482 2026] [security2:error] [pid 2914881:tid 2914922] [client 199.180.9.116:50149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||teritemme.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "teritemme.com"] [uri "/wp-json/wp/v2/users/2"] [unique_id "aXH1ZHzt0syQMPcATJz3VAAAAkw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2025-11-06 13:28:05
(7 months ago)
blocked for webapp attack | path requested: /.env | seen at 2025-11-06 13:27:14.589 |
Web App Attack
🇸🇪
Johan Finn
2025-09-13 03:55:18
(8 months ago)
malicious activity, botnet
Web App Attack
🇵🇱
sefinek.net
2025-09-11 15:32:18
(8 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36 OPR/89.0.4447.51
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇨🇴
j458rjqwi348fhjq46
2025-08-12 16:47:12
(9 months ago)
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.e ...
show more
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.env), Suspicious short random path, Suspicious URL detected (extended rules). Activity: 70 requests to 5 URLs. Period: 2025-08-12 11:34:43 - 2025-08-12 11:34:43 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
Hacking
Web App Attack
🇵🇱
sefinek.net
2025-06-18 06:57:29
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /genshin-stella-mod
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: