JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

199.96.166.171

Recent Activity

Abuse confidence score ?

26% Elevated

16 reports

12 reporters · latest 10 hours ago

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 199.96.166.171

Export CSV

This IP address has been reported a total of 16 times from 12 distinct sources. 199.96.166.171 was first reported on April 30th 2025, and the most recent report was 10 hours ago. In the last 60 days, the top reporter locations were: Czechia with 3 reports; Latvia with 1 report; Mexico with 1 report. The most common categories in these recent reports were: Brute-Force 4 times; Web App Attack 4 times; VPN IP 2 times; Hacking 2 times; Blog Spam 1 time; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-10-04 04:09:57 (10 hours ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇨🇿 Countryman	2026-09-16 00:10:02 (2 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇨🇿 Countryman	2026-09-14 00:10:01 (2 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇸🇮 administrator	2026-09-11 22:55:52 (3 weeks ago)	2026-09-06 00:17:26,258 fail2ban.actions [1054]: NOTICE [apache-fakegooglebot] Ban 199.96.16 ... show more 2026-09-06 00:17:26,258 fail2ban.actions [1054]: NOTICE [apache-fakegooglebot] Ban 199.96.166.171 2026-09-06 00:17:26,258 fail2ban.actions [1054]: NOTICE [apache-fakegooglebot] Ban 199.96.166.171 2026-09-06 00:17:26,258 fail2ban.actions [1054]: NOTICE [apache-fakegooglebot] Ban 199.96.166.171 ... show less	Bad Web Bot Web Spam Email Spam Blog Spam Port Scan Brute-Force Web App Attack
🇨🇿 lp	2026-09-11 09:22:35 (3 weeks ago)	Unauthorized VPN login attempts: 2 attempts were recorded from 199.96.166.171 2026-09-11T10:49:51+02 ... show more Unauthorized VPN login attempts: 2 attempts were recorded from 199.96.166.171 2026-09-11T10:49:51+02:00 vpn Access-Reject 'lobby005' station: 199.96.166.171 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' 2026-09-11T10:51:21+02:00 vpn Access-Reject 'lobby007' station: 199.96.166.171 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇱🇻 garmtech.com	2026-08-25 02:23:58 (1 month ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-23.199.96.166.171.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-23.199.96.166.171.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-22 11:05:54 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 199.96.166.171 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.166.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 07:05:47.756159 2026] [security2:error] [pid 11415:tid 11415] [client 199.96.166.171:40459] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dceabronwilliams.com"] [uri "/wp-config.txt"] [unique_id "ahA4iwaRPMffHJKAbAFUOgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 21:41:58 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 199.96.166.171 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.166.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 17:41:51.354907 2026] [security2:error] [pid 11926:tid 11926] [client 199.96.166.171:35013] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fattoria-rendena.it"] [uri "/.wp-config.php.swp"] [unique_id "ag4qn3AuHRPwzYy0lKqruwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-20 16:14:17 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 199.96.166.171 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 199.96.166.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 20 12:14:12.822663 2026] [security2:error] [pid 21019:tid 21019] [client 199.96.166.171:53377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stantontownship.org"] [uri "/wp-config.php.dist"] [unique_id "ag3d1HQxRXpaRUpDUKag5gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 todix	2026-05-18 07:41:25 (4 months ago)	WebAttack or semilar from 199.96.166.171	Web App Attack
🇬🇧 nigelrbfurness	2026-05-18 07:25:00 (4 months ago)	attempted xmlrpc.php exploit	Web App Attack
🇱🇻 garmtech.com	2025-12-29 09:56:05 (9 months ago)	IM360 WAF: Attempt to upload malware	Hacking
🇩🇪 Packets-Decreaser.NET	2025-12-10 14:34:40 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇺🇸 NetGuard	2025-12-08 20:34:53 (9 months ago)	🚨 CRITICAL: Real-time threat on Tanner \| unknown \| Port 80 \| PhantomGrid Real-time Defense	Hacking
🇺🇸 fbarela	2025-12-08 01:00:20 (9 months ago)	FortiGate SSL VPN login failures.	Hacking Brute-Force

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 125.142.37.91

🇳🇱 176.65.149.31

🇺🇸 166.62.41.190

🇭🇰 144.48.243.18

🇺🇸 104.22.24.235

🇷🇺 195.239.242.118

🇧🇷 191.7.26.131

🇳🇱 109.160.32.103

🇩🇪 85.190.108.184

🇳🇴 84.215.92.173

🇺🇸 40.76.250.59

🇮🇱 213.8.79.42

🇺🇸 198.2.130.182

🇲🇽 177.242.9.8

🇺🇸 173.28.193.174

🇺🇸 172.174.235.111

🇺🇸 136.107.172.10

🇫🇷 86.196.187.44

🇰🇷 220.80.223.144

🇰🇷 211.51.132.104