JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 165.56.14.97

165.56.14.97 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 58%: ?

58%

ISP	Zambia Telecommunications Company Ltd aka ZAMTEL
Usage Type	Fixed Line ISP
ASN	AS37154
Domain Name	zamtel.co.zm
Country	🇿🇲 Zambia
City	Lusaka, Lusaka Province

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 165.56.14.97

Whois 165.56.14.97

IP Abuse Reports for 165.56.14.97:

This IP address has been reported a total of 13 times from 9 distinct sources. 165.56.14.97 was first reported on July 23rd 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-24 08:48:28 (20 hours ago)	(mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:48:23.617567 2026] [security2:error] [pid 3739246:tid 3739246] [client 165.56.14.97:55855] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 165.56.14.97 (+1 hits since last alert)\|medusakenya.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "medusakenya.com"] [uri "/xmlrpc.php"] [unique_id "amMm19vXQK24UnIjxUmTswAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-24 06:43:49 (22 hours ago)	[redacted] 165.56.14.97 - - [24/Jul/2026:08:43:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Je ... show more [redacted] 165.56.14.97 - - [24/Jul/2026:08:43:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 165.56.14.97 - - [24/Jul/2026:08:43:17 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/13.0; WordPress/6.4; http://site76851209.com" [redacted] 165.56.14.97 - - [24/Jul/2026:08:43:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com" [redacted] 165.56.14.97 - - [24/Jul/2026:08:43:37 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)" [redacted] 165.56.14.97 - - [24/Jul/2026:08:43:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1)" ... show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-07-24 04:40:43 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 akasolutions.de	2026-07-24 04:40:18 (1 day ago)	(wordpress) Failed wordpress login from 165.56.14.97 (ZM/Zambia/-)	Brute-Force
Anonymous	2026-07-24 03:40:39 (1 day ago)	[ns65.kdns.gr] httpd-xmlrpc-post: sites=www.hatzifotis.gr; logs=/var/log/httpd/domains/hatzifotis.gr ... show more [ns65.kdns.gr] httpd-xmlrpc-post: sites=www.hatzifotis.gr; logs=/var/log/httpd/domains/hatzifotis.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-07-24 02:57:30 (1 day ago)	(wordpress) Failed wordpress login from 165.56.14.97 (ZM/Zambia/-): (CF_ENABLE)	Brute-Force
🇺🇸 TPI-Abuse	2026-07-23 19:41:22 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 15:41:15.444082 2026] [security2:error] [pid 3099265:tid 3099265] [client 165.56.14.97:38679] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 165.56.14.97 (+1 hits since last alert)\|directcch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "directcch.com"] [uri "/xmlrpc.php"] [unique_id "amJuW1kyAOtHF-ecDf_IQgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-23 18:04:08 (1 day ago)	[redacted] 165.56.14.97 - - [23/Jul/2026:20:03:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Je ... show more [redacted] 165.56.14.97 - - [23/Jul/2026:20:03:24 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 165.56.14.97 - - [23/Jul/2026:20:03:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)" [redacted] 165.56.14.97 - - [23/Jul/2026:20:03:45 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 165.56.14.97 - - [23/Jul/2026:20:03:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 165.56.14.97 - - [23/Jul/2026:20:04:06 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.1)" ... show less	Hacking Web App Attack
🇫🇷 dynamix	2026-07-23 16:04:34 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 12:51:17 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 08:51:10.224334 2026] [security2:error] [pid 2765988:tid 2765988] [client 165.56.14.97:20226] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 165.56.14.97 (+1 hits since last alert)\|nolaanime.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nolaanime.com"] [uri "/xmlrpc.php"] [unique_id "amIOPozfAOC-Ukdbk9hi_AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-23 11:46:51 (1 day ago)	Blocked by YFC Security on https://brixzly.com — type: xmlrpc_attempts	Brute-Force Web App Attack
🇺🇸 WeekendWeb	2026-07-23 09:43:28 (1 day ago)	Wordpress Vunerability attack	Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 09:15:29 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:240335) triggered by 165.56.14.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 05:15:24.504553 2026] [security2:error] [pid 11881:tid 11881] [client 165.56.14.97:30516] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 165.56.14.97 (+1 hits since last alert)\|produktives.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "produktives.com"] [uri "/xmlrpc.php"] [unique_id "amHbrAZ7Lt1SzW9igkGdKQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.58.167.244

🇮🇳 120.56.213.161

🇮🇶 62.201.212.54

🇺🇸 45.148.233.226

🇬🇧 2a06:4880:a000::c2

🇵🇰 223.123.124.70

🇨🇳 222.176.200.242

🇦🇷 181.169.28.164

🇲🇽 177.245.68.156

🇧🇷 177.81.34.206

🇵🇱 176.53.159.197

🇺🇸 172.174.244.189

🇰🇷 112.216.129.27

🇮🇳 103.168.33.56

🇺🇦 77.87.40.114

🇺🇦 62.122.69.113

🇳🇱 46.151.178.13

🇭🇰 45.64.74.51

🇶🇦 34.153.64.84

🇦🇴 193.163.125.94