JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.188.132.222

197.188.132.222 was found in our database!

This IP was reported 87 times. Confidence of Abuse is 100%: ?

100%

ISP	Telecom Namibia
Usage Type	Fixed Line ISP
ASN	AS36996
Domain Name	telecom.na
Country	🇳🇦 Namibia
City	Windhoek, Khomas Region

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.188.132.222

Whois 197.188.132.222

IP Abuse Reports for 197.188.132.222:

This IP address has been reported a total of 87 times from 53 distinct sources. 197.188.132.222 was first reported on January 22nd 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 cwytech	2026-06-29 17:08:30 (1 day ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wp-us-login-only-high.	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-06-29 16:29:31 (1 day ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
Anonymous	2026-06-29 11:00:21 (1 day ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-29 10:48:03 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 06:47:55.928713 2026] [security2:error] [pid 27386:tid 27621] [client 197.188.132.222:16835] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.188.132.222 (+1 hits since last alert)\|seriousgames-system.info\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "seriousgames-system.info"] [uri "/xmlrpc.php"] [unique_id "akJNW9mmd_QTv8mrU368WQAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-29 06:21:21 (1 day ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇫🇷 YF	2026-06-27 05:30:37 (3 days ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇺🇸 TPI-Abuse	2026-06-27 03:20:34 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 23:20:30.661430 2026] [security2:error] [pid 23890:tid 23890] [client 197.188.132.222:22233] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.188.132.222 (+1 hits since last alert)\|eileensharaga.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eileensharaga.com"] [uri "/xmlrpc.php"] [unique_id "aj9BfkxarbH_I08zrmfBBgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-27 02:20:02 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 22:19:53.122873 2026] [security2:error] [pid 27944:tid 27944] [client 197.188.132.222:26356] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.188.132.222 (+1 hits since last alert)\|tarekshohaieb.online\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tarekshohaieb.online"] [uri "/xmlrpc.php"] [unique_id "aj8zSWNN4FNmYpO-e4cV6QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-06-27 00:30:05 (4 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 18:41:21 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 14:41:15.685718 2026] [security2:error] [pid 10010:tid 10010] [client 197.188.132.222:20303] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.188.132.222 (+1 hits since last alert)\|hsoftwaresystems.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "hsoftwaresystems.net"] [uri "/xmlrpc.php"] [unique_id "aj7HyzYf4M--YN5IDyUkzQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Apache	2026-06-26 18:38:31 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (NA/Namibia/-): 5 in the last 3 ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (NA/Namibia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 15:01:27 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 11:01:23.770157 2026] [security2:error] [pid 13927:tid 13927] [client 197.188.132.222:21806] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.188.132.222 (+1 hits since last alert)\|deborahbein.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "deborahbein.com"] [uri "/xmlrpc.php"] [unique_id "aj6UQ4EBLAJCo1HXDiKiEwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 14:03:32 (4 days ago)	(mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:240335) triggered by 197.188.132.222 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 10:03:26.562554 2026] [security2:error] [pid 24706:tid 24706] [client 197.188.132.222:3123] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.188.132.222 (+1 hits since last alert)\|schlegelcreative.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "schlegelcreative.com"] [uri "/xmlrpc.php"] [unique_id "aj6GrpoA0paJALtatLDS6QAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-06-25 21:41:47 (5 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-24 15:38:10 (6 days ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack

Showing 1 to 15 of 87 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.142.253.189

🇲🇾 202.184.156.3

🇳🇱 176.65.148.242

🇺🇸 147.185.132.90

🇸🇬 101.47.8.188

🇹🇷 94.154.43.192

🇧🇬 79.124.62.134

🇩🇪 64.225.109.132

🇸🇬 43.172.198.241

🇨🇳 39.72.195.37

🇮🇩 36.95.221.140

🇳🇱 193.176.31.252

🇲🇽 187.161.104.30

🇨🇭 185.201.130.218

🇮🇳 172.217.38.23

🇺🇸 162.216.150.120

🇸🇬 143.198.208.150

🇭🇰 118.193.33.130

🇨🇳 112.0.0.87

🇧🇷 58.68.212.198