JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.57.255.97

197.57.255.97 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 88%: ?

88%

ISP	TE Data
Usage Type	Fixed Line ISP
ASN	AS8452
Domain Name	tedata.net
Country	🇪🇬 Egypt
City	Cairo, Cairo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.57.255.97

Whois 197.57.255.97

IP Abuse Reports for 197.57.255.97:

This IP address has been reported a total of 25 times from 17 distinct sources. 197.57.255.97 was first reported on June 1st 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-08-23 17:58:46 (2 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇩🇪 big-cloud.nl	2026-08-23 17:51:30 (2 days ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇷 Kenshin869	2026-08-23 17:34:17 (2 days ago)	Wordpress unauthorized access attempt	Brute-Force
🇺🇸 TPI-Abuse	2026-08-23 12:02:12 (2 days ago)	(mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 08:02:07.710224 2026] [security2:error] [pid 6673:tid 6673] [client 197.57.255.97:50770] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|takemehomedogrescue.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "takemehomedogrescue.org"] [uri "/wp-json/wp/v2/users"] [unique_id "aorhP7qtrwWME81NoErOOQAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-23 10:06:55 (3 days ago)	(PERMBLOCK) 197.57.255.97 (EG/Egypt/-) has had more than 4 temp blocks	Hacking
Anonymous	2026-08-23 09:50:30 (3 days ago)	(wordpress) Failed wordpress login from 197.57.255.97 (EG/Egypt/-)	Brute-Force
🇺🇸 bigwavedave	2026-08-23 05:50:40 (3 days ago)	Wordpress Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 05:45:06 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 01:45:00.974184 2026] [security2:error] [pid 1340:tid 1340] [client 197.57.255.97:58452] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|mobileonlinecasinos.co\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mobileonlinecasinos.co"] [uri "/wp-json/wp/v2/users"] [unique_id "aoqI3JW32W-KOgXN4GESygAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Tripwire	2026-08-23 01:38:00 (3 days ago)	Probing for Wordpress - /xmlrpc.php	Brute-Force Web App Attack
🇫🇷 LRob	2026-08-22 19:59:44 (3 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /xmlrpc.php \| ua: Mozilla/5.0 (Windows NT 6.3; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.0.0 Safari/537.36 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 15:29:19 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 11:29:15.590736 2026] [security2:error] [pid 1960:tid 1960] [client 197.57.255.97:53628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|barecreationsaz.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barecreationsaz.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aonAS6Oxb_6s1P8p5hsCnQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-21 22:04:40 (4 days ago)	[SatAug2200:04:34.9664982026][security2:error][pid1630136:tid1630212][client197.57.255.97:0]ModSecur ... show more [SatAug2200:04:34.9664982026][security2:error][pid1630136:tid1630212][client197.57.255.97:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"globalhorizon.ch\"][uri\"/xmlrpc.php\"][unique_id\"aojLclzCinvp8R8ZfIrOegAAAZY\"] show less	Port Scan Brute-Force Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-21 15:31:59 (4 days ago)	Blocked by CSF 13 firewall - Rule: XMLRPC EG/Egypt/-	Web App Attack
🇨🇭 4server	2026-08-21 09:50:44 (5 days ago)	[FriAug2111:50:42.2174742026][security2:error][pid1199754:tid1199951][client197.57.255.97:0]ModSecur ... show more [FriAug2111:50:42.2174742026][security2:error][pid1199754:tid1199951][client197.57.255.97:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"468\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"ristrutturazione-case.ch\"][uri\"/xmlrpc.php\"][unique_id\"aogfcq-5sAqYrt3012ng9QAAAUE\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-21 03:50:47 (5 days ago)	(mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 197.57.255.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 20 23:50:43.861689 2026] [security2:error] [pid 26467:tid 26467] [client 197.57.255.97:51769] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hotelkona.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hotelkona.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aofLE6GGsVh7StQ1FcFI1wAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 163.7.9.55

🇳🇱 45.148.10.157

🇦🇿 37.61.117.83

🇯🇵 20.63.219.114

🇺🇸 165.154.134.152

🇨🇳 116.177.172.64

🇳🇱 94.154.43.201

🇧🇾 93.85.235.72

🇨🇳 61.52.41.31

🇳🇱 45.148.10.151

🇨🇳 27.17.76.170

🇩🇪 193.124.20.248

🇳🇱 192.42.116.104

🇳🇵 157.15.58.45

🇷🇺 128.0.136.107

🇵🇰 123.108.92.215

🇻🇳 103.78.2.68

🇮🇳 2409:40c1:211f:f675:2881:200f:5613:ab38

🇩🇪 217.92.206.203

🇱🇹 213.176.26.52