JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 199.96.166.172

199.96.166.172 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 10%: ?

10%

ISP	MyridWeb LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS26548
Domain Name	myridweb.com
Country	🇺🇸 United States of America
City	Seattle, Washington

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 199.96.166.172

Whois 199.96.166.172

IP Abuse Reports for 199.96.166.172:

This IP address has been reported a total of 13 times from 6 distinct sources. 199.96.166.172 was first reported on November 17th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇻 garmtech.com	2026-08-11 13:12:54 (2 weeks ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-12.199.96.166.172.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 16-12.199.96.166.172.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇬🇧 Oakley	2026-07-19 15:33:39 (1 month ago)	(mod_security) mod_security (id:900178) triggered by 199.96.166.172 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900178) triggered by 199.96.166.172 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇬🇧 Oakley	2026-06-06 16:45:37 (2 months ago)	(mod_security) mod_security (id:900177) triggered by 199.96.166.172 (US/United States/-): 5 in the l ... show more (mod_security) mod_security (id:900177) triggered by 199.96.166.172 (US/United States/-): 5 in the last 900 secs show less	Web App Attack Hacking
🇱🇻 garmtech.com	2026-06-01 19:11:33 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-11.199.96.166.172.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-11.199.96.166.172.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-31 19:53:26 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-53.199.96.166.172.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 22-53.199.96.166.172.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇱🇻 garmtech.com	2026-05-31 06:39:24 (2 months ago)	IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-39.199.96.166.172.web-spamm ... show more IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-39.199.96.166.172.web-spammers.v2.rbl.imunify.com._v4 succeeded. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-02-21 01:07:45 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 199.96.166.172 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 199.96.166.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 20 20:07:41.244346 2026] [security2:error] [pid 29500:tid 29500] [client 199.96.166.172:63031] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|greatwesternfirearms.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "greatwesternfirearms.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZkFXXXuQXw1uXhpXzRJ3gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-14 06:15:07 (6 months ago)	(mod_security) mod_security (id:225170) triggered by 199.96.166.172 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 199.96.166.172 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 14 01:15:03.371709 2026] [security2:error] [pid 21887:tid 21887] [client 199.96.166.172:48125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|zaril.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zaril.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZAS53JONGujNFhnYHmMAgAAAAE"], referer: https://www.google.com show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 backslash	2026-02-10 01:50:10 (6 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2026-01-27 10:06:16 (6 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.27 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.27 is noted in report timestamp show less	Hacking Brute-Force
🇨🇭 backslash	2026-01-06 02:20:16 (7 months ago)	block ruleset 798ECF92F12ADC636D3520C2890AF17ADEFDE3BE	Bad Web Bot
Anonymous	2025-11-21 09:54:57 (9 months ago)	VPN endpoint login attempts	Brute-Force
Anonymous	2025-11-17 07:41:42 (9 months ago)	Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report tim ... show more Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.17 is noted in report timestamp show less	Hacking Brute-Force

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 121.167.110.137

🇳🇱 91.92.47.117

🇺🇸 43.165.67.31

🇱🇹 213.176.26.72

🇭🇰 199.45.155.20

🇦🇷 179.60.24.9

🇻🇳 171.231.179.237

🇨🇳 171.11.16.240

🇩🇪 164.92.252.64

🇳🇱 94.154.43.254

🇪🇸 90.94.234.169

🇺🇸 82.26.208.89

🇺🇸 82.26.208.86

🇮🇳 182.95.110.42

🇧🇷 177.84.145.31

🇳🇱 172.217.40.28

🇸🇪 158.174.211.17

🇲🇽 158.23.184.117

🇷🇴 92.118.39.49

🇱🇹 91.224.92.127