JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.96.165.241

199.96.165.241 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 19%: ?

19%

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.96.165.241

Whois 199.96.165.241

IP Abuse Reports for 199.96.165.241:

This IP address has been reported a total of 15 times from 13 distinct sources. 199.96.165.241 was first reported on September 3rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-05-23 13:17:10 (1 week ago)	IM360 WAF: SQL Injection Attack: Common DB Names Detected	SQL Injection
🇱🇻 garmtech.com	2026-05-21 15:25:05 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-25.199.96.165.241.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 18-25.199.96.165.241.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇩🇪 Lino Project	2026-05-10 16:01:47 (3 weeks ago)	199.96.165.241 - - [10/May/2026:18:01:46 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "http ... show more 199.96.165.241 - - [10/May/2026:18:01:46 +0200] "GET /wp-admin/post-new.php HTTP/1.1" 403 6488 "https://www.primobio.it/mio-account/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-05-06 08:15:41 (4 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-15.199.96.165.241.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-15.199.96.165.241.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇬🇧 SilverZippo	2026-04-30 06:29:30 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-04-26 06:39:35 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 199.96.165.241 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 199.96.165.241 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 26 02:39:29.482803 2026] [security2:error] [pid 13095:tid 13095] [client 199.96.165.241:26929] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|scriptediting.uk\|F\|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scriptediting.uk"] [uri "/s3cmd.ini"] [unique_id "ae2zIR_C7i8NZu1t0kJ5gwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-02-09 05:09:20 (3 months ago)	Accessed trap at '/xmlrpc.php'	Web App Attack
🇪🇸 10dencehispahard SL	2026-01-28 05:55:53 (4 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
Anonymous	2026-01-20 03:07:46 (4 months ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.20 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2026.01.20 is noted in report timestamp show less	Hacking Brute-Force
🇮🇩 Burayot	2025-12-31 11:57:30 (5 months ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 199.96.165.241 (US/United States/-) ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 199.96.165.241 (US/United States/-): 1 in the last 3600 secs show less	Web App Attack
🇩🇪 Packets-Decreaser.NET	2025-12-29 14:02:11 (5 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇨🇦 wil.com	2025-11-30 12:29:44 (6 months ago)	GlobalProtect login attempts with user maro.	VPN IP Brute-Force
🇺🇸 mind5t0rm	2025-10-18 09:36:17 (7 months ago)	(WPLOGIN) WP Login Attack 199.96.165.241 (US/United States/-): 3 in the last 3600 secs; Ports: ; Di ... show more (WPLOGIN) WP Login Attack 199.96.165.241 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 199.96.165.241 - - [18/Oct/2025:16:35:48 +0700] "GET /wp-login.php HTTP/1.1" 200 2577 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 199.96.165.241 - - [18/Oct/2025:16:36:04 +0700] "POST /wp-login.php HTTP/1.1" 200 2778 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" 199.96.165.241 - - [18/Oct/2025:16:36:13 +0700] "POST /wp-login.php HTTP/1.1" 200 2792 "https://zerowaterthailand.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.198 Safari/537.36" show less	Port Scan
Anonymous	2025-10-06 04:32:42 (7 months ago)	Failed login attempt detected by Fail2Ban in plesk-panel jail	Brute-Force
🇺🇸 masterguru	2025-09-03 05:30:25 (9 months ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-169)	Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 182.95.48.154

🇻🇳 27.79.45.129

🇺🇸 20.169.105.85

🇰🇷 222.239.251.12

🇬🇧 198.178.235.41

🇹🇳 197.5.145.150

🇺🇦 185.237.106.201

🇮🇳 182.95.48.122

🇺🇸 162.216.149.53

🇺🇸 107.175.75.137

🇺🇸 104.243.37.202

🇰🇷 59.21.37.60

🇳🇱 45.153.34.195

🇳🇱 45.148.10.151

🇸🇬 119.28.101.155

🇮🇩 43.129.44.66

🇮🇳 27.123.94.10

🇮🇳 182.95.223.90

🇮🇳 103.226.90.137

🇷🇴 92.118.39.236