JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.96.165.213

199.96.165.213 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 15%: ?

15%

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.96.165.213

Whois 199.96.165.213

IP Abuse Reports for 199.96.165.213:

This IP address has been reported a total of 23 times from 15 distinct sources. 199.96.165.213 was first reported on August 4th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-05-20 21:10:53 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:10:46.891495 2026] [security2:error] [pid 15903:tid 15903] [client 199.96.165.213:24691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ismaelcavazos.com"] [uri "/wp-config.php.bak"] [unique_id "ag4jVmyOU81xl-ALB5KuaQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 19:14:38 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 15:14:33.430266 2026] [security2:error] [pid 29036:tid 29036] [client 199.96.165.213:31723] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iconconstructors.com"] [uri "/wp-config.php.orig"] [unique_id "ag4IGRW9mOl2Xfd2T2_ScgAAACI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 12:43:59 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 08:43:52.790327 2026] [security2:error] [pid 13739:tid 13739] [client 199.96.165.213:19677] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceren.kircali.net"] [uri "/wp-config.php.save"] [unique_id "ag2siPEI9o8zp4PGhh4gWQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 02:36:50 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.165.213 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 19 22:36:42.217811 2026] [security2:error] [pid 12976:tid 12976] [client 199.96.165.213:47943] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.denroydannursery.edgeimprov.com"] [uri "/wp-config.php.old"] [unique_id "ag0eOtqhuSVXvNdnkkaahwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 [email protected]	2026-05-13 08:23:50 (3 weeks ago)	[Wed May 13 10:23:49.227626 2026] [authz_core:error] [pid 529800:tid 529878] [client 199.96.165.213: ... show more [Wed May 13 10:23:49.227626 2026] [authz_core:error] [pid 529800:tid 529878] [client 199.96.165.213:33315] AH01630: client denied by server configuration: /var/www/html/MyWeb/Wordpress_www/.wp-config.php.bck show less	Brute-Force Web App Attack
🇩🇪 todix	2026-04-17 05:26:23 (1 month ago)	WebAttack or semilar from 199.96.165.213	Web App Attack
🇩🇪 HandyTreff.de	2026-03-13 13:38:06 (2 months ago)	Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.096 (Bad < -10 / Very Bad < -20 ... show more Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -40.096 (Bad < -10 / Very Bad < -20 / Extreme < -35) \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.1602.2 show less	Web App Attack Bad Web Bot
🇨🇭 backslash	2026-03-11 18:03:10 (2 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
🇫🇮 Shaik Sai Meera	2026-02-18 09:05:18 (3 months ago)	IM360 WAF: Request indicates a Headless browser	Brute-Force Web App Attack
🇮🇩 sockominfo	2026-02-07 10:00:44 (3 months ago)	ModSecurity rejected a query. Threat Score: 4.6/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
🇮🇩 sockominfo	2026-02-07 09:00:44 (3 months ago)	ModSecurity rejected a query. Threat Score: 4.7/10 (MEDIUM). Reported by TangerangKota-CSIRT	Hacking Web App Attack
Anonymous	2026-01-30 16:38:00 (4 months ago)		Web App Attack
Anonymous	2026-01-25 20:05:28 (4 months ago)	wordpress-trap	Web App Attack
Anonymous	2026-01-18 05:38:39 (4 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.18 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.18 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2026-01-04 21:31:00 (5 months ago)	This IP was involved in a brute force and password spray attack.	Brute-Force Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 193.36.225.77

🇬🇪 178.236.57.136

🇷🇺 178.185.136.57

🇺🇸 173.174.180.175

🇺🇸 91.230.168.102

🇮🇳 45.127.223.206

🇺🇸 44.254.81.7

🇷🇺 31.173.84.87

🇮🇩 180.244.156.228

🇸🇦 178.73.101.84

🇺🇸 167.160.48.163

🇰🇷 121.66.212.27

🇸🇬 101.47.156.21

🇵🇱 95.214.53.157

🇮🇹 93.92.78.9

🇸🇬 74.91.224.229

🇺🇸 66.132.172.177

🇫🇷 51.159.104.219

🇺🇸 40.112.183.29

🇬🇧 35.203.210.247