JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.55.123.223

197.55.123.223 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 59%: ?

59%

ISP	TE Data
Usage Type	Fixed Line ISP
ASN	AS8452
Domain Name	tedata.net
Country	🇪🇬 Egypt
City	Alexandria, Alexandria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.55.123.223

Whois 197.55.123.223

IP Abuse Reports for 197.55.123.223:

This IP address has been reported a total of 11 times from 10 distinct sources. 197.55.123.223 was first reported on September 16th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇪 Jim Keir	2026-09-23 12:05:34 (1 day ago)	2026-09-23 12:05:33 197.55.123.223 File scanning, blocking 197.55.123.223 for 5 minutes	Web App Attack
🇩🇪 4server	2026-09-22 10:34:58 (2 days ago)	[TueSep2212:34:52.5483322026][security2:error][pid609039:tid609173][client197.55.123.223:0]ModSecuri ... show more [TueSep2212:34:52.5483322026][security2:error][pid609039:tid609173][client197.55.123.223:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"selenemodestipastrydetails.it\"][uri\"/xmlrpc.php\"][unique_id\"arJZzAkNLKz_BoySWvlG6wAAAQQ\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 kosada.com	2026-09-21 17:31:13 (3 days ago)	Repeated requests for suspicious nonexistent URLs, for example: /xmlrpc.php (HTTP/1.1 port 443, user ... show more Repeated requests for suspicious nonexistent URLs, for example: /xmlrpc.php (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/15.0.0.0 Safari/537.36") show less	Web App Attack
🇮🇹 Inartis	2026-09-20 16:47:12 (4 days ago)	197.55.123.223 - - [20/Sep/2026:18:47:11 +0200] "POST /xmlrpc.php HTTP/1.1" 302 5044 "-" "Mozilla/5. ... show more 197.55.123.223 - - [20/Sep/2026:18:47:11 +0200] "POST /xmlrpc.php HTTP/1.1" 302 5044 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/85.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 Olexiy Backend	2026-09-20 14:53:57 (4 days ago)	197.55.123.223 ...	Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-09-19 15:34:16 (5 days ago)	Web App Attack	Web App Attack
🇫🇷 giulio gorobey	2026-09-19 11:57:58 (5 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /xmlrpc.php	Web App Attack
Anonymous	2026-09-18 13:31:16 (6 days ago)	[redacted] 197.55.123.223 - - [18/Sep/2026:15:30:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" " ... show more [redacted] 197.55.123.223 - - [18/Sep/2026:15:30:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 6.2; x86) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/88.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [18/Sep/2026:15:30:29 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Windows NT 10.0; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/91.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [18/Sep/2026:15:30:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Safari/11.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [18/Sep/2026:15:30:30 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; x86) AppleWebKit/537.36 (KHTML, like Gecko) Opera/77.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [18/Sep/2026:15:30:47 +0200] "POST /xmlrpc.php HTTP/1.1" 200 418 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Hacking Web App Attack
Anonymous	2026-09-17 14:37:10 (1 week ago)	[redacted] 197.55.123.223 - - [17/Sep/2026:16:36:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" " ... show more [redacted] 197.55.123.223 - - [17/Sep/2026:16:36:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/89.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [17/Sep/2026:16:36:03 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.3; x64) AppleWebKit/537.36 (KHTML, like Gecko) Opera/64.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [17/Sep/2026:16:36:36 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/91.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [17/Sep/2026:16:36:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/100.0.0.0 Safari/537.36" [redacted] 197.55.123.223 - - [17/Sep/2026:16:37:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ... show less	Hacking Web App Attack
🇮🇹 VHosting	2026-09-17 14:05:04 (1 week ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇿 Tripwire	2026-09-16 14:47:28 (1 week ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.55

🇺🇸 48.214.147.201

🇻🇳 203.167.15.64

🇳🇱 195.178.110.15

🇦🇷 181.46.9.102

🇺🇦 176.103.2.218

🇫🇮 147.185.133.123

🇫🇷 91.231.89.74

🇨🇦 89.251.0.128

🇱🇹 62.60.130.253

🇳🇱 45.148.10.119

🇳🇱 185.93.89.35

🇸🇬 103.134.154.235

🇳🇬 102.89.47.121

🇧🇬 46.10.201.90

🇨🇻 41.221.207.152

🇯🇵 35.200.9.106

🇮🇷 31.47.55.133

🇲🇾 203.121.40.210

🇺🇸 148.153.56.174