JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 197.63.13.106

197.63.13.106 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 86%: ?

86%

ISP	TE Data-new
Usage Type	Fixed Line ISP
ASN	AS8452
Domain Name	te.eg
Country	🇪🇬 Egypt
City	Damietta, Damietta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 197.63.13.106

Whois 197.63.13.106

IP Abuse Reports for 197.63.13.106:

This IP address has been reported a total of 31 times from 15 distinct sources. 197.63.13.106 was first reported on August 18th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-08-25 12:30:46 (8 hours ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 08:30:38.075479 2026] [security2:error] [pid 25636:tid 25636] [client 197.63.13.106:65220] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|fltsiminc.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "fltsiminc.com"] [uri "/xmlrpc.php"] [unique_id "ao2K7heCw9STs7JpHNSCiAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 17:12:23 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 13:12:15.364329 2026] [security2:error] [pid 29003:tid 29003] [client 197.63.13.106:50480] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|roguetechtalks.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechtalks.com"] [uri "/xmlrpc.php"] [unique_id "aox7b-9SIIiboq9Ev81negAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-08-24 17:11:11 (1 day ago)	Blocked by CSF 13 firewall - Rule: XMLRPC EG/Egypt/-	Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 16:41:53 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 12:41:49.697153 2026] [security2:error] [pid 16062:tid 16062] [client 197.63.13.106:55656] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|joeordie.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "joeordie.com"] [uri "/xmlrpc.php"] [unique_id "aox0TUuLpWiUvjeRXVJq5QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-08-24 15:38:54 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇮 YF	2026-08-24 14:00:34 (1 day ago)	xmlrpc.php Potential DDoS or brute force	DDoS Attack Brute-Force
🇳🇱 debestelapp	2026-08-24 13:50:07 (1 day ago)		Web App Attack
🇺🇸 integrantservices.com	2026-08-24 13:25:01 (1 day ago)	(PERMBLOCK) 197.63.13.106 (EG/Egypt/-) has had more than 4 temp blocks	Hacking
🇺🇸 TPI-Abuse	2026-08-24 11:55:20 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 07:55:13.728276 2026] [security2:error] [pid 31725:tid 31725] [client 197.63.13.106:62248] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|kentsavagelaw.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kentsavagelaw.com"] [uri "/xmlrpc.php"] [unique_id "aowxIbvo1QqdlrqmfhVyiwAAAFg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-24 08:38:40 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 04:38:34.780315 2026] [security2:error] [pid 19470:tid 19484] [client 197.63.13.106:63394] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|tradersofficepark.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "tradersofficepark.com"] [uri "/xmlrpc.php"] [unique_id "aowDCkTZoDA91L4vcagRjgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-23 22:36:18 (1 day ago)	(wordpress) Failed wordpress login from 197.63.13.106 (EG/Egypt/Damietta Governorate/Damietta/-/[red ... show more (wordpress) Failed wordpress login from 197.63.13.106 (EG/Egypt/Damietta Governorate/Damietta/-/[redacted]) show less	Brute-Force
🇺🇸 integrantservices.com	2026-08-23 22:35:33 (1 day ago)	(wordpress) Failed wordpress login from 197.63.13.106 (EG/Egypt/-)	Brute-Force
🇺🇸 TPI-Abuse	2026-08-23 21:34:52 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 17:34:44.802572 2026] [security2:error] [pid 22798:tid 22798] [client 197.63.13.106:55796] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|aquanauticsige.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "aquanauticsige.com"] [uri "/xmlrpc.php"] [unique_id "aotndCysxDYrHntnVi7U9gAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-23 19:33:21 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 197.63.13.106 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 15:33:16.195223 2026] [security2:error] [pid 1678:tid 1678] [client 197.63.13.106:57952] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 197.63.13.106 (+1 hits since last alert)\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "exhaustthelimits.org"] [uri "/xmlrpc.php"] [unique_id "aotK_AiNBuYfoaEhbGzVQgAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 grassau.com	2026-08-23 19:01:18 (2 days ago)	(wordpress) Failed wordpress login from 197.63.13.106 (EG/Egypt/Damietta Governorate/Damietta/-)	Brute-Force

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.176

🇧🇪 198.235.24.129

🇧🇩 120.89.66.1

🇯🇵 110.233.163.180

🇧🇦 92.36.164.176

🇹🇷 88.254.94.174

🇨🇳 27.222.88.141

🇷🇴 193.46.255.86

🇲🇽 186.96.145.241

🇨🇳 175.0.195.198

🇺🇸 157.230.239.134

🇨🇳 106.119.165.171

🇸🇬 47.128.48.206

🇧🇷 200.155.66.2

🇳🇱 195.178.110.30

🇰🇷 183.109.153.173

🇨🇴 181.119.64.79

🇧🇷 172.253.234.29

🇩🇪 134.122.93.100

🇳🇱 45.148.10.152