JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.198.158.68

41.198.158.68 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 37%: ?

37%

ISP	Echotel Pty Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS327693
Domain Name	echosp.co.za
Country	🇿🇦 South Africa
City	Delmas, Mpumalanga

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.198.158.68

Whois 41.198.158.68

IP Abuse Reports for 41.198.158.68:

This IP address has been reported a total of 88 times from 46 distinct sources. 41.198.158.68 was first reported on April 26th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MusicLibrary	2026-07-01 03:53:38 (1 day ago)	Attempted access to non existent wordpress urls	Bad Web Bot
🇩🇪 FeG Deutschland	2026-06-28 09:32:57 (3 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 28	Exploited Host Web App Attack
🇭🇺 Lacika555	2026-06-28 05:59:49 (3 days ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇫🇷 Baking333	2026-06-13 10:34:40 (2 weeks ago)	[redacted] 41.198.158.68 - - [13/Jun/2026:11:34:36 +0100] "GET /merchant/[redacted] HTTP/1.1" 302 15 ... show more [redacted] 41.198.158.68 - - [13/Jun/2026:11:34:36 +0100] "GET /merchant/[redacted] HTTP/1.1" 302 1518 0/45219 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" [redacted] 41.198.158.68 - - [13/Jun/2026:11:34:38 +0100] "GET / HTTP/1.1" 200 9308 0/41592 "https://[redacted]/merchant/[redacted]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
Anonymous	2026-06-07 23:25:12 (3 weeks ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
Anonymous	2026-06-02 04:00:47 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇮🇹 VHosting	2026-06-02 02:32:37 (1 month ago)	Detected mail brute force attack from 4 different servers	Brute-Force
Anonymous	2026-05-25 02:55:32 (1 month ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
Anonymous	2026-05-23 07:55:03 (1 month ago)	2026-05-23T09:55:03.074603+02:00 zanati wp(www.sahpa.co.za)[494144]: Blocked authentication attempt ... show more 2026-05-23T09:55:03.074603+02:00 zanati wp(www.sahpa.co.za)[494144]: Blocked authentication attempt for [email protected] from 41.198.158.68 ... show less	Web App Attack
🇨🇭 Origon	2026-05-09 04:40:30 (1 month ago)	NOQUEUE - IP: 41.198.158.68 - May 9 06:40:30 plesk postfix/smtpd[3199340]: NOQUEUE: reject: RCPT fr ... show more NOQUEUE - IP: 41.198.158.68 - May 9 06:40:30 plesk postfix/smtpd[3199340]: NOQUEUE: reject: RCPT from unknown[41.198.158.68]: 554 5.7.1 Service unavailable; Client host [41.198.158.68] blocked using dnsbl-3.uceprotect.net; Your ISP ECHO-SP, ZA/AS327693 is UCEPROTECT-Level3 listed because of a spamscore of 431.3. See: http://www.uceprotect.net/rblcheck.php?ipr=41.198.158.68; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<giadaechiararanch.com> show less	Email Spam
Anonymous	2026-04-29 17:35:31 (2 months ago)	2026-04-29T19:35:30.663945+02:00 mx1 postfix/smtpd[2798169]: NOQUEUE: reject: RCPT from unknown[41.1 ... show more 2026-04-29T19:35:30.663945+02:00 mx1 postfix/smtpd[2798169]: NOQUEUE: reject: RCPT from unknown[41.198.158.68]: 550 5.1.1 <*@.de>: Recipient address rejected: User unknown in virtual mailbox table; from=<[email protected]> to=<@*.de> proto=ESMTP helo=<aksusistem.com> show less	Email Spam Brute-Force
Anonymous	2026-04-27 23:10:20 (2 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking
🇨🇭 Origon	2026-04-27 17:30:29 (2 months ago)	NOQUEUE - IP: 41.198.158.68 - Apr 27 19:30:29 plesk postfix/smtpd[2977740]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 41.198.158.68 - Apr 27 19:30:29 plesk postfix/smtpd[2977740]: NOQUEUE: reject: RCPT from unknown[41.198.158.68]: 554 5.7.1 Service unavailable; Client host [41.198.158.68] blocked using dnsbl-1.uceprotect.net; IP 41.198.158.68 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=41.198.158.68; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<e-storefront.co.uk> show less	Email Spam
🇨🇭 Origon	2026-04-24 02:46:30 (2 months ago)	NOQUEUE - IP: 41.198.158.68 - Apr 24 04:46:30 plesk postfix/smtpd[1173653]: NOQUEUE: reject: RCPT f ... show more NOQUEUE - IP: 41.198.158.68 - Apr 24 04:46:30 plesk postfix/smtpd[1173653]: NOQUEUE: reject: RCPT from unknown[41.198.158.68]: 554 5.7.1 Service unavailable; Client host [41.198.158.68] blocked using dnsbl-1.uceprotect.net; IP 41.198.158.68 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=41.198.158.68; from=<[email protected]> to=<REDACTED@REDACTED> proto=ESMTP helo=<vakantiezon.be> show less	Email Spam
Anonymous	2026-03-20 09:06:29 (3 months ago)	XMLRPC BRUTEFORCE - HTTP (Request)	Hacking

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 185.100.87.136

🇺🇸 64.62.197.21

🇬🇧 35.203.210.59

🇵🇱 23.230.84.44

🇬🇧 217.146.80.125

🇺🇸 184.105.139.78

🇺🇸 162.144.58.21

🇷🇴 151.242.30.224

🇺🇸 147.185.132.205

🇬🇷 83.235.16.111

🇩🇪 69.5.169.166

🇺🇸 64.62.197.138

🇹🇼 61.220.9.90

🇨🇳 61.52.187.177

🇳🇱 45.198.224.15

🇲🇩 45.15.226.100

🇨🇳 220.181.108.175

🇹🇼 198.235.24.80

🇨🇳 122.9.40.50

🇮🇩 103.188.177.46