JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.254.29.214

197.254.29.214 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 11%: ?

11%

ISP	AccessKenya Group Ltd
Usage Type	Fixed Line ISP
ASN	AS15808
Hostname(s)	197.254.29.214.acesskenya.net
Domain Name	global.ntt
Country	🇰🇪 Kenya
City	Mlolongo, Machakos County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.254.29.214

Whois 197.254.29.214

IP Abuse Reports for 197.254.29.214:

This IP address has been reported a total of 21 times from 10 distinct sources. 197.254.29.214 was first reported on May 28th 2024, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 burger	2026-06-18 10:57:47 (5 days ago)	Cloudflare l7ddos, Mozilla/5.0 (Windows NT 10.0; Win64; x64)	DDoS Attack
🇩🇪 SMARTNET	2026-05-27 06:03:53 (3 weeks ago)	Aisuru(Mirai variant) DDoS \| Incident ID: 22ada211-5b5c-463a-b46f-60fd11dc639d	DDoS Attack
🇳🇱 exxos	2025-10-09 15:03:01 (8 months ago)	Attacks with Bad user agents	Hacking
🇩🇪 Packets-Decreaser.NET	2025-09-15 14:25:33 (9 months ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
🇳🇱 exxos	2025-08-02 08:11:40 (10 months ago)	http-no-verb	Hacking
🇺🇸 octageeks.com	2024-10-12 04:06:04 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 octageeks.com	2024-10-11 04:06:04 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 octageeks.com	2024-10-10 04:06:04 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 octageeks.com	2024-10-09 04:06:04 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 octageeks.com	2024-10-08 04:06:04 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 octageeks.com	2024-10-07 04:06:04 (1 year ago)	Wordpress malicious attack:[octawp]	Web App Attack
🇺🇸 TPI-Abuse	2024-09-28 23:40:07 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 197.254.29.214 (197.254.29.214.acesskenya.net): ... show more (mod_security) mod_security (id:240335) triggered by 197.254.29.214 (197.254.29.214.acesskenya.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 28 19:40:03.363521 2024] [security2:error] [pid 7460:tid 7460] [client 197.254.29.214:33279] [client 197.254.29.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.254.29.214 (+1 hits since last alert)\|lightningbug.farm\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lightningbug.farm"] [uri "/xmlrpc.php"] [unique_id "ZviT069w0435ERgQ_3G1OgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-09-28 09:23:02 (1 year ago)	apache-wordpress-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-09-28 08:15:14 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 197.254.29.214 (197.254.29.214.acesskenya.net): ... show more (mod_security) mod_security (id:240335) triggered by 197.254.29.214 (197.254.29.214.acesskenya.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 28 04:15:06.604456 2024] [security2:error] [pid 31283:tid 31283] [client 197.254.29.214:35567] [client 197.254.29.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.254.29.214 (+1 hits since last alert)\|engine-watch.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "engine-watch.com"] [uri "/xmlrpc.php"] [unique_id "Zve7CplNHqckS5Kis_kLwgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2024-09-28 03:44:35 (1 year ago)	(mod_security) mod_security (id:240335) triggered by 197.254.29.214 (197.254.29.214.acesskenya.net): ... show more (mod_security) mod_security (id:240335) triggered by 197.254.29.214 (197.254.29.214.acesskenya.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 27 23:44:31.600237 2024] [security2:error] [pid 31814:tid 31814] [client 197.254.29.214:50352] [client 197.254.29.214] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.254.29.214 (+1 hits since last alert)\|www.accommodation-perthairport.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.accommodation-perthairport.com"] [uri "/xmlrpc.php"] [unique_id "Zvd7n-LvT9feIwNkmYy8FAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.71.115

🇩🇪 213.209.159.242

🇩🇪 213.209.159.225

🇳🇨 203.104.54.127

🇫🇷 185.222.242.30

🇨🇷 179.48.248.245

🇧🇷 177.155.95.141

🇮🇹 172.253.12.157

🇲🇶 143.105.239.252

🇧🇬 95.87.248.223

🇸🇬 85.203.21.45

🇫🇷 80.241.216.50

🇺🇸 64.62.156.56

🇩🇪 43.228.157.10

🇩🇪 18.197.221.111

🇸🇦 178.73.108.100

🇫🇮 147.185.133.93

🇬🇧 132.145.29.224

🇨🇳 106.75.239.166

🇫🇷 80.241.223.90