JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.96.165.193

199.96.165.193 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 21%: ?

21%

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.96.165.193

Whois 199.96.165.193

IP Abuse Reports for 199.96.165.193:

This IP address has been reported a total of 10 times from 7 distinct sources. 199.96.165.193 was first reported on June 27th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇮 extremevital	2026-06-16 05:05:07 (11 hours ago)	...	Bad Web Bot
🇩🇪 HandyTreff.de	2026-06-06 13:52:43 (1 week ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.102 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -48.102 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1523.1 show less	Web App Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-13 20:31:32 (1 month ago)	(mod_security) mod_security (id:211030) triggered by 199.96.165.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:211030) triggered by 199.96.165.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 16:31:21.678720 2026] [security2:error] [pid 26014:tid 26014] [client 199.96.165.193:47087] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack\|\|www.genesis-castle.com\|F\|2"] [data "Matched Data: (%'%~%'%\|%\|%( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agTfmS0mzpIp3lCQOvEKXQAAACc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-04-18 01:12:03 (1 month ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇬🇧 consul.to	2026-03-16 13:08:59 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇩 Burayot	2026-01-03 01:43:33 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 199.96.165.193 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 199.96.165.193 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇮🇩 Burayot	2026-01-01 05:48:48 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 199.96.165.193 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 199.96.165.193 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇨🇭 backslash	2025-10-24 21:00:03 (7 months ago)		Web Spam
🇫🇷 solution.it	2025-08-15 02:46:55 (10 months ago)	[Fri Aug 15 04:46:51.197107 2025] [php7:error] [pid 1378783:tid 1378783] [client 199.96.165.193:1675 ... show more [Fri Aug 15 04:46:51.197107 2025] [php7:error] [pid 1378783:tid 1378783] [client 199.96.165.193:16759] script '/var/www/html/xmlrpc.php' not found or unable to stat show less	Web App Attack
🇺🇸 TPI-Abuse	2025-06-27 06:08:42 (11 months ago)	(mod_security) mod_security (id:225170) triggered by 199.96.165.193 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 199.96.165.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 27 02:08:37.538547 2025] [security2:error] [pid 2634324:tid 2634324] [client 199.96.165.193:56305] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hendersonhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hendersonhomes.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aF41ZeEVB-T-_nfwTEKFWAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.249

🇧🇩 165.101.132.59

🇰🇷 106.243.155.71

🇮🇩 103.148.100.146

🇨🇳 101.96.201.93

🇩🇪 5.180.253.97

🇷🇴 2.57.121.112

🇲🇽 189.147.19.238

🇵🇦 181.197.24.148

🇧🇷 177.44.117.235

🇧🇷 170.84.56.251

🇮🇳 117.218.75.251

🇲🇰 92.53.12.214

🇵🇹 185.153.151.140

🇵🇪 181.233.26.205

🇻🇨 162.212.211.24

🇳🇱 158.94.211.108

🇩🇪 152.53.22.186

🇹🇭 124.121.138.85

🇨🇳 106.63.26.155