JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.247.225.57

196.247.225.57 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 51%: ?

51%

ISP	FIBERZA
Usage Type	Data Center/Web Hosting/Transit
ASN	AS57858
Domain Name	fibergrid.co.za
Country	🇸🇪 Sweden
City	Stockholm, Stockholm

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.247.225.57

Whois 196.247.225.57

IP Abuse Reports for 196.247.225.57:

This IP address has been reported a total of 21 times from 9 distinct sources. 196.247.225.57 was first reported on July 9th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Mundo Bueno	2026-07-25 00:33:34 (10 hours ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: SE \| UA: PHP/6.3.31	Hacking Web App Attack
🇩🇪 big-cloud.nl	2026-07-23 10:57:35 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇬🇧 Mendip_Defender	2026-07-21 23:33:14 (3 days ago)	196.247.225.57 - - [22/Jul/2026:00:33:05 +0100] "GET /index.php/4x4-response-uk-coverage/ HTTP/1.1" ... show more 196.247.225.57 - - [22/Jul/2026:00:33:05 +0100] "GET /index.php/4x4-response-uk-coverage/ HTTP/1.1" 301 162 "http://4x4response.uk/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 Edg/136.0.0.0" 196.247.225.57 - - [22/Jul/2026:00:33:10 +0100] "POST /xmlrpc.php HTTP/1.1" 403 146 "https://4x4response.uk/index.php/4x4-response-uk-coverage/" "PHP/7.2.67" 196.247.225.57 - - [22/Jul/2026:00:33:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 146 "https://4x4response.uk/index.php/4x4-response-uk-coverage/" "PHP/7.2.67" ... show less	Hacking Web App Attack
🇩🇪 LRob	2026-07-20 02:43:23 (5 days ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: PHP/5.3.39	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-07-19 23:54:47 (5 days ago)	Try to access /xmlrpc.php	Web App Attack
🇩🇪 LRob	2026-07-18 21:07:56 (6 days ago)	CrowdSec: lrob/wp-xmlrpc-bf \| req: /xmlrpc.php \| UA: PHP/5.2.56	Brute-Force Web App Attack
🇦🇺 paulshipley.com.au	2026-07-17 09:21:23 (1 week ago)	[Fri Jul 17 19:21:22.220299 2026] [security2:error] [pid 629088] [client 196.247.225.57:51444] [clie ... show more [Fri Jul 17 19:21:22.220299 2026] [security2:error] [pid 629088] [client 196.247.225.57:51444] [client 196.247.225.57] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "aln0EjSO28BC5j8n1aHR_wAAAAI"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/ ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-07-15 20:34:14 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇧🇪 taivas.nl	2026-07-14 14:32:10 (1 week ago)	Wordpress_xmlrpc_attack	Bad Web Bot
🇩🇪 paissangroup	2026-07-14 06:41:19 (1 week ago)	Multiple WAF Violations	Web App Attack
🇩🇪 big-cloud.nl	2026-07-12 10:53:55 (1 week ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 Mundo Bueno	2026-07-12 04:58:03 (1 week ago)	[ISILIA Protection v2.1] Tentative d'accès: /xmlrpc.php \| Pays: SE \| UA: PHP/7.3.48	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-07-11 22:25:48 (1 week ago)	[Sun Jul 12 08:25:47.703301 2026] [security2:error] [pid 843561] [client 196.247.225.57:39892] [clie ... show more [Sun Jul 12 08:25:47.703301 2026] [security2:error] [pid 843561] [client 196.247.225.57:39892] [client 196.247.225.57] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/xmlrpc.php"] [unique_id "alLC6y5omEH0ARUs4PFGwQAAAAQ"], referer: https://levellapromotions.com.au/the-gist-of-gifts-promotional-products-ideas-that-will-surely-work/ ... show less	Web App Attack
🇺🇸 mnsf	2026-07-11 20:05:18 (1 week ago)	Xmlrpc Caught (6)	Brute-Force Web App Attack
🇩🇪 Lino Project	2026-07-11 17:38:56 (1 week ago)	196.247.225.57 - - [11/Jul/2026:19:38:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5442 "https://biomak ... show more 196.247.225.57 - - [11/Jul/2026:19:38:56 +0200] "POST /xmlrpc.php HTTP/1.1" 403 5442 "https://biomakeup.it/" "PHP/6.3.47" ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.17.113.148

🇰🇷 211.114.81.212

🇧🇬 79.110.114.233

🇮🇳 35.207.202.141

🇧🇷 200.181.139.120

🇳🇱 172.94.9.51

🇩🇪 169.150.201.19

🇮🇳 157.48.241.146

🇺🇸 147.185.132.41

🇱🇹 77.90.185.100

🇩🇪 57.129.15.177

🇬🇧 35.203.210.83

🇳🇱 217.22.16.134

🇬🇧 193.176.29.10

🇧🇷 179.224.19.201

🇵🇱 176.53.159.197

🇺🇸 172.71.155.17

🇺🇸 139.144.235.132

🇷🇴 92.118.39.14

🇺🇸 75.112.23.30