AbuseIPDB » 197.250.51.106
197.250.51.106 was found in our database!
This IP was reported 10 times. Confidence of
Abuse
is 32% : ?
ISP
Vodacom Tanzania Ltd
Usage Type
Fixed Line ISP
ASN
AS36908
Domain Name
vodacom.co.tz
Country
๐น๐ฟ
Tanzania, the United Republic of
City
Dar es Salaam, Dar es Salaam Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 197.250.51.106 :
This IP address has been reported a total of
10
times from
7 distinct
sources.
197.250.51.106 was first reported on
August 20th 2025 , and the most recent report was
6 hours ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
WeekendWeb
2026-06-26 14:15:22
(6 hours ago)
Wordpress Vunerability attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 13:17:00
(7 hours ago)
(mod_security) mod_security (id:240335) triggered by 197.250.51.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 197.250.51.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 09:16:56.442568 2026] [security2:error] [pid 22084:tid 22084] [client 197.250.51.106:7207] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 197.250.51.106 (+1 hits since last alert)|michaelthompson.biz|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "michaelthompson.biz"] [uri "/xmlrpc.php"] [unique_id "aj57yAQxAgov7ApHVSVP1gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-06-20 11:16:04
(6 days ago)
Attempted access to non existent wordpress urls
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-10 07:18:07
(2 weeks ago)
(mod_security) mod_security (id:240335) triggered by 197.250.51.106 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 197.250.51.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 03:18:02.756871 2026] [security2:error] [pid 16123:tid 16123] [client 197.250.51.106:29255] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 197.250.51.106 (+1 hits since last alert)|puckerbikini.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "puckerbikini.com"] [uri "/xmlrpc.php"] [unique_id "aikPqmuhkHP4lhXvQAcHcwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
factor1
2026-06-10 07:15:01
(2 weeks ago)
Fail2ban at saturn Reports Abuse.
Brute-Force
Web App Attack
๐ณ๐ฑ
soverin
2026-06-05 15:45:00
(3 weeks ago)
spam
Email Spam
๐ณ๐ฑ
soverin
2026-05-24 18:46:03
(1 month ago)
spam
Email Spam
๐จ๐ญ
Origon
2026-04-24 17:38:23
(2 months ago)
NOQUEUE - IP: 197.250.51.106 - Apr 24 19:38:23 plesk postfix/smtpd[2284059]: NOQUEUE: reject: RCPT ...
show more
NOQUEUE - IP: 197.250.51.106 - Apr 24 19:38:23 plesk postfix/smtpd[2284059]: NOQUEUE: reject: RCPT from unknown[197.250.51.106]: 554 5.7.1 Service unavailable; Client host [197.250.51.106] blocked using dnsbl-1.uceprotect.net; IP 197.250.51.106 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=197.250.51.106; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<[197.250.51.106]>
show less
Email Spam
๐ท๐บ
Agrohim
2025-11-13 00:15:26
(7 months ago)
Gate Inet blocked for categories:
DDoS Attack
Ping of Death
Port Scan
Hacking
Brute-Force
๐ท๐บ
Agrohim
2025-08-20 00:31:15
(10 months ago)
Gate Inet blocked for categories:
DDoS Attack
Ping of Death
Port Scan
Hacking
Brute-Force
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: