JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.96.164.154

199.96.164.154 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 10%: ?

10%

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.96.164.154

Whois 199.96.164.154

IP Abuse Reports for 199.96.164.154:

This IP address has been reported a total of 16 times from 9 distinct sources. 199.96.164.154 was first reported on May 7th 2025, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-22 11:53:48 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.164.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.164.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:53:42.949936 2026] [security2:error] [pid 12353:tid 12353] [client 199.96.164.154:22025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zerotaxlab.com"] [uri "/wp-config.bak"] [unique_id "ahBDxvaHpiMAgQqirSGedwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 ipoac.nl	2026-05-21 17:29:50 (3 weeks ago)	ipoac.nl:80 199.96.164.154 - - [21/May/2026:19:29:49 +0200] - "HEAD /wp-login.php HTTP/1.1" 403 554 ... show more ipoac.nl:80 199.96.164.154 - - [21/May/2026:19:29:49 +0200] - "HEAD /wp-login.php HTTP/1.1" 403 554 "-" "Go-http-client/1.1" show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-20 15:24:10 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.164.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.164.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 11:24:02.246984 2026] [security2:error] [pid 22531:tid 22531] [client 199.96.164.154:52363] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "briannalls.com"] [uri "/wp-config.php.dist"] [unique_id "ag3SEuhuQ7xpzj-DLwiY1AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 03:12:01 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.164.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.164.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 23:11:57.743366 2026] [security2:error] [pid 10090:tid 10090] [client 199.96.164.154:55675] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proyectando.com"] [uri "/wp-config.txt"] [unique_id "ag0mff956hSygSdyFP2j5AAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 tilellit.pro	2026-02-12 07:59:30 (4 months ago)	Fail2Ban banned 199.96.164.154 for security violations in jail wp-armour. Log: 2026/02/12 07:59:29 [ ... show more Fail2Ban banned 199.96.164.154 for security violations in jail wp-armour. Log: 2026/02/12 07:59:29 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 199.96.164.154 \| Target: wplogin" , client: 199.96.164.154, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less	Web Spam
Anonymous	2025-12-23 16:47:33 (5 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.23 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.23 is noted in report timestamp show less	Hacking Brute-Force
🇫🇷 masterguru	2025-12-23 11:20:25 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 199.96.164.154 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 199.96.164.154 (US/United States/-): 1 in the last 3600 secs (0-197) show less	Hacking
🇫🇷 masterguru	2025-12-23 11:02:04 (5 months ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 199.96.164.154 (US/United States/-): 1 in the ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 199.96.164.154 (US/United States/-): 1 in the last 3600 secs (0-193) show less	Hacking
Anonymous	2025-12-12 14:03:00 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.12 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.12.12 is noted in report timestamp show less	Hacking Brute-Force
🇺🇸 fbarela	2025-11-25 16:00:49 (6 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force
🇺🇸 [email protected]	2025-11-01 00:08:41 (7 months ago)	Fail2Ban jail apache-json-scanners detected activity on 2025-11-01T00:08:41Z	Brute-Force
🇺🇸 oncord	2025-05-16 14:52:49 (1 year ago)	Form spam	Web Spam
🇺🇸 nowyouknow	2025-05-14 09:30:11 (1 year ago)	(From [email protected]) Dices Rolled! Discover the top-tier crypto-powered casino at GoPlay, wh ... show more (From [email protected]) Dices Rolled! Discover the top-tier crypto-powered casino at GoPlay, where exciting slots, live dealer games, and unique bonuses await your first spin. Take advantage of ultra-fast deposits and withdrawals in cryptocurrency while you go after jaw-dropping jackpots. Want to hit it big? Visit https://goplay.se Like us on Facebook at https://www.facebook.com/goplay.se, and follow us on Instagram at https://www.instagram.com/goplay.se to get started now show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-14 00:29:59 (1 year ago)	(From [email protected]) The Dice Are Cast! Discover the top-tier crypto-powered casino at G ... show more (From [email protected]) The Dice Are Cast! Discover the top-tier crypto-powered casino at GoPlay, where exciting slots, live dealer games, and special bonuses await your first spin. Take advantage of lightning-fast deposits and withdrawals in cryptocurrency while you chase jaw-dropping jackpots. Want to hit it big? Visit https://goplay.se Like us on Facebook at https://www.facebook.com/goplay.se, and follow us on Instagram at https://www.instagram.com/goplay.se to get started now show less	Phishing Web Spam
🇺🇸 nowyouknow	2025-05-08 03:47:33 (1 year ago)	Malicious Traffic/Form Submission	Phishing Web Spam

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.233.197

🇲🇽 149.104.90.95

🇮🇳 103.164.161.6

🇩🇪 43.228.157.10

🇧🇪 35.187.22.79

🇨🇳 222.129.138.13

🇧🇷 205.210.31.211

🇺🇸 205.210.31.51

🇩🇪 162.249.127.51

🇺🇸 152.32.234.97

🇻🇳 112.137.143.2

🇨🇳 106.75.156.189

🇺🇸 91.242.95.88

🇳🇱 91.92.40.12

🇺🇸 52.186.182.35

🇳🇱 45.153.34.32

🇧🇪 35.205.119.122

🇳🇱 34.91.200.60

🇧🇪 34.14.122.221

🇺🇸 8.231.189.209