JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.96.164.217

199.96.164.217 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 27%: ?

27%

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.96.164.217

Whois 199.96.164.217

IP Abuse Reports for 199.96.164.217:

This IP address has been reported a total of 17 times from 11 distinct sources. 199.96.164.217 was first reported on August 27th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-05-21 09:05:47 (2 weeks ago)	Scanning/Probing (24)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 16:22:18 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.164.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.164.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:22:12.809691 2026] [security2:error] [pid 17051:tid 17051] [client 199.96.164.217:59869] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kavahawaii.com.kh6jim.com"] [uri "/wp-config.php.old"] [unique_id "ag3ftM1yY8Sg60sbpyKz4AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:04:32 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.164.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.164.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:04:25.402553 2026] [security2:error] [pid 18892:tid 18892] [client 199.96.164.217:24785] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "naturalhomebuilders.com"] [uri "/wp-config.txt"] [unique_id "ag2jSX9iSJ-ZZbey_uPfbwAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 00:29:08 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 199.96.164.217 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 199.96.164.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 20:29:00.599321 2026] [security2:error] [pid 25304:tid 25304] [client 199.96.164.217:12359] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|activethinkers.net\|F\|2"] [data ".inc"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "activethinkers.net"] [uri "/wp-config.inc"] [unique_id "ag0ATHGEXzUCpzCwiGLv9wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-05-18 05:42:01 (2 weeks ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇮🇹 [email protected]	2026-05-17 20:20:22 (2 weeks ago)	199.96.164.217 - - [17/May/2026:20:05:51 +0200] "GET /wp-content/debug.log HTTP/1.1" 404 5043 "-" "M ... show more 199.96.164.217 - - [17/May/2026:20:05:51 +0200] "GET /wp-content/debug.log HTTP/1.1" 404 5043 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"199.96.164.217 - - [17/May/2026:20:05:51 +0200] "GET /db.sql HTTP/1.1" 404 5043 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"199.96.164.217 - - [17/May/2026:20:05:51 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 5043 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-05-17 18:05:51 (2 weeks ago)	[Sun May 17 20:05:51.487106 2026] [authz_core:error] [pid 1326918:tid 1327019] [client 199.96.164.21 ... show more [Sun May 17 20:05:51.487106 2026] [authz_core:error] [pid 1326918:tid 1327019] [client 199.96.164.217:33639] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/.wp-config.php.swp show less	Brute-Force Web App Attack
🇩🇪 AlexEventfahrtenIPDB	2026-05-14 19:59:45 (3 weeks ago)	[Thu May 14 21:59:44.811043 2026] [authz_core:error] [pid 576757:tid 576757] [client 199.96.164.217: ... show more [Thu May 14 21:59:44.811043 2026] [authz_core:error] [pid 576757:tid 576757] [client 199.96.164.217:45619] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php [Thu May 14 21:59:45.136467 2026] [authz_core:error] [pid 576757:tid 576757] [client 199.96.164.217:45619] AH01630: client denied by server configuration: /var/www/std-sites/cadillac/wp-login.php, referer: https://alex-eventfahrten.de/wp-login.php ... show less	Brute-Force Web App Attack
🇨🇭 backslash	2026-04-16 12:03:12 (1 month ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇪🇸 masterguru	2026-03-25 18:59:15 (2 months ago)	(wplogin) Failed WordPress login from 199.96.164.217 (US/United States/-): 5 in the last 3600 secs ( ... show more (wplogin) Failed WordPress login from 199.96.164.217 (US/United States/-): 5 in the last 3600 secs (0-122) show less	Hacking
🇱🇻 garmtech.com	2026-02-01 03:40:23 (4 months ago)	Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized prob ... show more Attempted access to sensitive endpoint (/wp-login.php) detected. Automated scan or unauthorized probing. show less	Web App Attack
Anonymous	2026-01-28 13:44:36 (4 months ago)	$f2bV_matches	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-10-27 16:31:58 (7 months ago)	Failed Wordpress login	Hacking Brute-Force Web App Attack
🇨🇦 polycoda	2025-10-24 14:23:28 (7 months ago)	🔑 Wordpress login brute force attempt	Hacking Web App Attack
🇨🇿 lp	2025-09-09 21:25:31 (8 months ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.164.217 2025-09-09T22:57:58+02 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 199.96.164.217 2025-09-09T22:57:58+02:00 vpn Access-Reject 'hr' station: 199.96.164.217 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2620:171:fe:f0:9999::244

🇺🇸 205.210.31.103

🇬🇧 193.163.125.65

🇰🇿 178.170.221.95

🇳🇱 138.124.67.103

🇮🇳 125.19.188.98

🇨🇳 118.122.196.230

🇨🇳 112.47.128.74

🇫🇷 94.176.161.158

🇺🇸 2607:f8b0:4001:c74::126

🇫🇮 147.185.133.123

🇻🇳 103.228.36.70

🇮🇳 103.161.93.53

🇫🇮 80.223.192.112

🇲🇾 49.124.159.188

🇳🇱 45.148.10.147

🇺🇸 20.221.57.26

🇳🇱 2a0b:8bc0:2:3bb6::1

🇸🇬 172.253.236.209

🇷🇴 102.129.186.123