JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.136.12.21

197.136.12.21 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 100%: ?

100%

ISP	Infrastructure at KENET USIU
Usage Type	University/College/School
ASN	AS36914
Domain Name	kenet.or.ke
Country	🇰🇪 Kenya
City	Nairobi, Nairobi County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.136.12.21

Whois 197.136.12.21

IP Abuse Reports for 197.136.12.21:

This IP address has been reported a total of 99 times from 79 distinct sources. 197.136.12.21 was first reported on October 14th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-10-21 22:21:38 (1 day ago)		Brute-Force Web App Attack
🇨🇦 zXero	2026-10-21 12:27:24 (1 day ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack
🇫🇷 SpaceHost-Server	2026-10-17 22:20:29 (5 days ago)		Brute-Force Web App Attack
🇨🇱 Fernando Soto	2026-10-17 03:05:08 (6 days ago)	WAF propio vps1 (CL): sensx16 score 20 en 1h. sondeo rutas sensibles.	Web App Attack
🇮🇩 zam	2026-10-16 12:36:52 (6 days ago)	197.136.12.21 - - [16/Oct/2026:12:36:47 +0000] "POST /xmlrpc.php HTTP/1.1" 301 289	Web App Attack
🇫🇷 UnixPrime	2026-10-16 11:57:18 (6 days ago)	197.136.12.21 - - [16/Oct/2026:13:57:16 +0200] "GET /xmlrpc.php HTTP/1.1" 404 146 "https://arkaniaz. ... show more 197.136.12.21 - - [16/Oct/2026:13:57:16 +0200] "GET /xmlrpc.php HTTP/1.1" 404 146 "https://arkaniaz.fr/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0" 197.136.12.21 - - [16/Oct/2026:13:57:18 +0200] "GET /xmlrpc.php HTTP/1.1" 404 548 "https://arkaniaz.fr/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 david.houstin	2026-10-16 11:10:29 (6 days ago)	197.136.12.21 - - [16/Oct/2026:13:10:24 +0200] "POST /xmlrpc.php HTTP/1.1" 404 8546 "-" "Mozilla/5.0 ... show more 197.136.12.21 - - [16/Oct/2026:13:10:24 +0200] "POST /xmlrpc.php HTTP/1.1" 404 8546 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 7320 - 197.136.12.21 - - [16/Oct/2026:13:10:24 +0200] "POST /xmlrpc.php HTTP/1.1" 404 8545 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 9273 - 197.136.12.21 - - [16/Oct/2026:13:10:27 +0200] "POST /blog/xmlrpc.php HTTP/1.1" 404 8544 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 10054 - 197.136.12.21 - - [16/Oct/2026:13:10:27 +0200] "POST /wp/xmlrpc.php HTTP/1.1" 404 3502 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 11439 - 197.136.12.21 - - [16/Oct/2026:13:10:27 +0200] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 3502 "-" "Mozilla/5.0 (Windows NT 10.0; W ... show less	Web App Attack Bad Web Bot
🇺🇸 island-freaks.com	2026-10-16 10:18:47 (6 days ago)	Attack Type: WordPress Exploit Bot attempt on /wp-admin/ \| DNS 197.136.12.21 \| Agent: Mozilla/5.0 (W ... show more Attack Type: WordPress Exploit Bot attempt on /wp-admin/ \| DNS 197.136.12.21 \| Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 show less	Port Scan Hacking Bad Web Bot Exploited Host Web App Attack
🇺🇸 dot.mg	2026-10-16 09:58:30 (6 days ago)	Scan of vulnerable files	Web App Attack
🇺🇸 Victor López	2026-10-16 08:19:39 (6 days ago)	empresarioexpress.com 197.136.12.21 - - [16/Oct/2026:03:19:36 -0500] "POST /xmlrpc.php HTTP/1.1" 444 ... show more empresarioexpress.com 197.136.12.21 - - [16/Oct/2026:03:19:36 -0500] "POST /xmlrpc.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" - empresarioexpress.com 197.136.12.21 - - [16/Oct/2026:03:19:37 -0500] "POST /xmlrpc.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" - empresarioexpress.com 197.136.12.21 - - [16/Oct/2026:03:19:38 -0500] "POST /xmlrpc.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" - ... show less	Hacking Web App Attack
🇬🇧 Bytemark	2026-10-16 07:22:41 (6 days ago)	197.136.12.21 - - [16/Oct/2026:08:22:31 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/x ... show more 197.136.12.21 - - [16/Oct/2026:08:22:31 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 197.136.12.21 - - [16/Oct/2026:08:22:32 +0100] "GET /xmlrpc.php HTTP/1.1" 404 27 "http://xiaomi.eu/xmlrpc.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" 197.136.12.21 - - [16/Oct/2026:08:22:40 +0100] "GET /wp-login.php HTTP/1.1" 404 27 "http://xiaomi.eu/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" show less	Brute-Force Web App Attack
🇦🇺 A.i.D.A.N.N	2026-10-16 06:34:40 (6 days ago)	A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web vulnerability scanning detected	Web App Attack
🇿🇦 vanderhost	2026-10-16 06:27:22 (6 days ago)	[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin via rule: /wp- ... show more [Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /wp-admin via rule: /wp-admin show less	Web App Attack Bad Web Bot
🇮🇩 David Koswari	2026-10-16 05:12:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇨🇦 zXero	2026-10-16 04:52:58 (1 week ago)	Fail2Ban automatic report - jail: no-wordpress	Brute-Force SSH DDoS Attack

Showing 1 to 15 of 99 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.171

🇺🇸 174.97.133.42

🇺🇸 173.244.60.139

🇧🇴 166.114.155.157

🇨🇳 101.96.196.4

🇳🇱 45.148.10.151

🇸🇬 43.173.175.142

🇺🇸 18.225.206.49

🇫🇷 212.18.127.156

🇧🇪 207.175.66.99

🇦🇺 198.251.85.243

🇺🇸 172.212.226.229

🇻🇳 171.243.149.113

🇵🇰 154.208.32.138

🇺🇸 147.185.132.159

🇺🇸 107.173.233.125

🇦🇺 20.53.239.152

🇺🇸 13.68.214.34

🇬🇧 185.230.216.5

🇬🇧 148.252.141.117