AbuseIPDB » 197.221.255.215
197.221.255.215 was found in our database!
This IP was reported 9 times. Confidence of
Abuse
is 4% : ?
ISP
MPLS ADSL Broadband
Usage Type
Fixed Line ISP
ASN
AS37204
Domain Name
telone.co.zw
Country
๐ฟ๐ผ
Zimbabwe
City
Harare, Harare
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 197.221.255.215 :
This IP address has been reported a total of
9
times from
9 distinct
sources.
197.221.255.215 was first reported on
July 6th 2021 , and the most recent report was
15 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐ฉ๐ช
botreporter
2026-06-30 09:26:12
(15 hours ago)
botnet ignoring robots.txt
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2024-03-16 09:52:05
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 197.221.255.215 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:225170) triggered by 197.221.255.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 16 05:52:01.448136 2024] [security2:error] [pid 31066] [client 197.221.255.215:50162] [client 197.221.255.215] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ralphharris.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ralphharris.org"] [uri "/wp-json/wp/v2/users/1"] [unique_id "ZfVrwYMybMPPjOxZpcH53AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
ASPAN
2023-09-24 04:10:16
(2 years ago)
Unsolicited connection attempt(s), port:445.
Port Scan
๐ฆ๐บ
MAGIC
2023-08-02 14:00:22
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
๐ง๐ช
Ivo Vynckier
2023-06-28 16:48:55
(3 years ago)
197.221.255.215 - - [28/Jun/2023:08:51:47 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5. ...
show more
197.221.255.215 - - [28/Jun/2023:08:51:47 +0200] "GET /wp-login.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
197.221.255.215 - - [28/Jun/2023:08:51:47 +0200] "GET /xmlrpc.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
show less
Web App Attack
๐ซ๐ฎ
bittiguru.fi
2023-06-03 12:18:34
(3 years ago)
197.221.255.215 - [03/Jun/2023:15:18:31 +0300] "POST /xmlrpc.php HTTP/1.1" 301 203 "-" "Mozilla/5.0 ...
show more
197.221.255.215 - [03/Jun/2023:15:18:31 +0300] "POST /xmlrpc.php HTTP/1.1" 301 203 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-"
197.221.255.215 - [03/Jun/2023:15:18:33 +0300] "POST /xmlrpc.php HTTP/1.1" 404 46052 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko" "-"
...
show less
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
niceshops.com
2023-05-30 00:19:54
(3 years ago)
Web Attack (May 23 02:19:54 ScriptKiddie: request for /wp-login.php )
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TheMadBeaker
2023-05-17 12:37:21
(3 years ago)
Fail2Ban Ban Triggered
Wordpress Attack Attempt
Brute-Force
Web App Attack
๐ฉ๐ช
Little Iguana
2021-07-06 14:50:57
(4 years ago)
trying to access non-authorized port
Port Scan
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: