JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 41.198.164.133

41.198.164.133 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 49%: ?

49%

ISP	Echotel Pty Ltd
Usage Type	Fixed Line ISP
ASN	AS327693
Domain Name	echosp.co.za
Country	🇿🇦 South Africa
City	Cape Town, Western Cape

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 41.198.164.133

Whois 41.198.164.133

IP Abuse Reports for 41.198.164.133:

This IP address has been reported a total of 26 times from 12 distinct sources. 41.198.164.133 was first reported on July 23rd 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-13 15:57:44 (3 days ago)	(mod_security) mod_security (id:225170) triggered by 41.198.164.133 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:225170) triggered by 41.198.164.133 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:57:40.507919 2026] [security2:error] [pid 17469:tid 17469] [client 41.198.164.133:51509] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.vansfanz.rollinchassis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.vansfanz.rollinchassis.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "as5U9OMQPVE8n5q36Jx-7AAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-10-12 01:51:23 (5 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 kosada.com	2026-10-09 04:03:59 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]?topics%5B2%5D=45&topics%5B4%5D=55&topics%5B5%5D=59&topics%5B6%5D=37 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇩🇪 FeG Deutschland	2026-10-08 21:06:26 (1 week ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 2	Exploited Host Web App Attack
🇩🇪 neckaralb-admin.de	2026-10-08 16:01:48 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-10-02 18:45:20 (2 weeks ago)	Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/S ... show more Large-scale coordinated botnet (6M+ IPs). Ordered by Alexander Pen'kov (alexander-pen-kov-7b41aa6a/Shursky [yordim\|LIS\|MOW]): Retaliation after theft; Attacker: Mikhail Smirnov (mikhail-smirnov-79830323/Aidan [MOW]): Employed by Angara Technologies Group \| Offpeak: Sessionless Catalog Access Blocked: /communications/shopby/manufacturer-cisco-polycom-audiocodes-netgear-crestron-bosch-dis-bxb-sony-xclaim-fortinet-revolabs-spectralink-unify.html \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 \| (Magento Site) show less	Hacking Bad Web Bot
🇫🇮 saamkuu	2026-09-27 05:40:29 (2 weeks ago)	DDoS botnet: TCP connection flood, 27 connections to port 443.	DDoS Attack
🇺🇸 鬼影233	2026-09-24 10:39:36 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:01:05 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-19 19:00:14 (3 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-18 09:09:25 (4 weeks ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-13 16:44:58 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇨🇭 backslash	2026-09-11 02:12:02 (1 month ago)	block ruleset 333FBABBA6DC06D7D20EDF60700DF5D9612E6F09	Bad Web Bot
🇺🇸 kosada.com	2026-09-07 07:20:05 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A319&f%5B1%5D=digest_key_terms%3A322&f%5B2%5D=digest_key_terms%3A391&field_article_edition%5B504%5D=504&field_key_terms%5B495%5D=495 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0") show less	DDoS Attack Bad Web Bot
🇺🇸 鬼影233	2026-09-05 19:15:06 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.176.31.249

🇨🇳 112.51.5.102

🇳🇱 77.239.124.102

🇬🇧 193.163.125.251

🇲🇽 177.227.77.171

🇺🇸 51.8.102.157

🇰🇷 211.104.198.147

🇧🇷 177.20.165.170

🇦🇷 170.246.181.5

🇷🇺 109.63.145.141

🇺🇸 45.79.172.21

🇺🇸 20.169.85.79

🇷🇴 2.57.121.112

🇸🇪 104.23.217.86

🇳🇱 103.214.5.133

🇱🇰 61.245.170.180

🇲🇾 47.250.37.179

🇮🇩 103.241.205.82

🇺🇸 74.235.108.235

🇳🇱 45.148.10.240