JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 175.100.59.96

175.100.59.96 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 98%: ?

98%

ISP	VIETTEL (CAMBODIA) PTE., LTD.
Usage Type	Fixed Line ISP
ASN	AS38623
Hostname(s)	dynamic-ip-adsl.metfone.com.kh
Domain Name	viettel.com.vn
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 175.100.59.96

Whois 175.100.59.96

IP Abuse Reports for 175.100.59.96:

This IP address has been reported a total of 28 times from 23 distinct sources. 175.100.59.96 was first reported on March 17th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-07-16 00:18:57 (3 days ago)	cloudlinux2 fail2ban: 2026-07-16 02:14:39,547 fail2ban.filter [1812]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-16 02:14:39,547 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 193.19.109.130 - 2026-07-16 02:14:39cloudlinux2 fail2ban: 2026-07-16 02:14:56,725 fail2ban.filter [1812]: INFO [plesk-modsecurity] Found 193.36.225.227 - 2026-07-16 02:14:56cloudlinux2 fail2ban: 2026-07-16 02:15:05,171 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.185 - 2026-07-16 02:15:03cloudlinux2 fail2ban: 2026-07-16 02:15:04,092 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.214 - 2026-07-16 02:15:02cloudlinux2 fail2ban: 2026-07-16 02:15:33,950 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 173.239.214.209 - 2026-07-16 02:15:33cloudlinux2 fail2ban: 2026-07-16 02:15:51,981 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 98.159.37.81 - 2026-07-16 02:15:50cloudlinux2 fail2ban: 2026-07-16 02:15:51,873 fail2ban.filter [1812]: INFO [plesk-wordpress] Found 98.159.37.85 - 2026-07-16 02:15:50c show less	Web App Attack
🇫🇷 ELYAZ	2026-07-15 23:52:33 (3 days ago)	(y4) Failed scan -byebye- from 175.100.59.96 (KH/Cambodia/-): (CF_ENABLE)	Hacking
🇳🇱 MM-bot	2026-07-15 23:30:02 (3 days ago)	URL-probe: HTTP/1.1 GET request on /sftp-config.json (2026-07-16 01:30:02 UTC+2)	Web App Attack Hacking
🇩🇪 Interceptor_HQ	2026-07-15 21:23:59 (3 days ago)	request_uri: /sftp-config.json -- automatic report --	Brute-Force Hacking
🇨🇿 ddw	2026-07-15 18:44:54 (3 days ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇧🇪 cmbplf	2026-07-15 17:33:07 (3 days ago)	149 requests with url.path sftp.json 126 requests with url.path config.json	Brute-Force Bad Web Bot
🇵🇱 miriks	2026-07-15 17:10:34 (3 days ago)	Automated scan detected: GET /.vscode/sftp.json — UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; ... show more Automated scan detected: GET /.vscode/sftp.json — UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 show less	Port Scan Web App Attack
Anonymous	2026-07-15 14:49:37 (3 days ago)	175.100.59.96 - - [15/Jul/2026:14:49:36 +0000] "GET /sftp-config.json HTTP/1.1" 404 437 "-" "Mozilla ... show more 175.100.59.96 - - [15/Jul/2026:14:49:36 +0000] "GET /sftp-config.json HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-07-15 14:37:11 (3 days ago)	Try to access /.vscode/sftp.json	Web App Attack
🇦🇺 paulshipley.com.au	2026-07-15 04:48:47 (4 days ago)	[Wed Jul 15 14:48:46.095071 2026] [security2:error] [pid 331930] [client 175.100.59.96:35140] [clien ... show more [Wed Jul 15 14:48:46.095071 2026] [security2:error] [pid 331930] [client 175.100.59.96:35140] [client 175.100.59.96] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "iaki.com.au"] [uri "/sftp-config.json"] [unique_id "alcRLhaSFapF2xgx64WlSQAAAAM"] ... show less	Web App Attack
🇨🇭 4server	2026-07-14 21:45:04 (4 days ago)	[TueJul1423:45:00.9112282026][security2:error][pid461062:tid461555][client175.100.59.96:0]ModSecurit ... show more [TueJul1423:45:00.9112282026][security2:error][pid461062:tid461555][client175.100.59.96:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mm-ingegneria.ch\"][uri\"/sftp-config.json\"][unique_id\"alat3KOxrv5Bd68R0Bs8LgAAAEs\"] show less	Hacking Web App Attack
🇦🇺 paulshipley.com.au	2026-07-14 17:59:43 (4 days ago)	[Wed Jul 15 03:59:42.900688 2026] [security2:error] [pid 264010] [client 175.100.59.96:19012] [clien ... show more [Wed Jul 15 03:59:42.900688 2026] [security2:error] [pid 264010] [client 175.100.59.96:19012] [client 175.100.59.96] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "indigi-print-merch.com.au"] [uri "/sftp-config.json"] [unique_id "alZ5DlGRnEs3x9noGi9kOAAAAAE"] ... show less	Web App Attack
🇮🇹 Progetto1	2026-07-14 17:05:03 (4 days ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇬🇧 consul.to	2026-07-14 16:38:15 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-07-14 16:32:28 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 219.91.213.26

🇦🇴 193.163.125.168

🇺🇸 162.216.149.196

🇨🇳 121.227.31.13

🇸🇬 114.119.151.133

🇳🇱 91.92.40.43

🇺🇸 64.227.109.89

🇨🇦 20.104.96.117

🇺🇸 184.105.139.80

🇧🇷 181.233.191.41

🇸🇬 168.144.129.97

🇸🇬 152.42.188.59

🇨🇳 106.54.215.69

🇻🇳 103.143.207.31

🇫🇮 74.125.74.16

🇹🇭 43.164.0.21

🇺🇸 40.124.81.157

🇩🇪 167.94.146.70

🇹🇷 94.154.43.114

🇨🇦 85.217.149.60