AbuseIPDB » 58.137.200.50

58.137.200.50 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 47%: ?

47%

ISP	IBM Thailand Company Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	csloxinfo.com
Country	Thailand
City	Bangkok, Krung Thep Maha Nakhon

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 58.137.200.50

Whois 58.137.200.50

IP Abuse Reports for 58.137.200.50:

This IP address has been reported a total of 25 times from 14 distinct sources. 58.137.200.50 was first reported on July 28th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-08-30 15:39:11 (2 weeks ago)	apache-wordpress-login	Brute-Force Web App Attack
TPI-Abuse	2024-08-30 15:36:06 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 11:35:58.967875 2024] [security2:error] [pid 22244:tid 22244] [client 58.137.200.50:64395] [client 58.137.200.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|calvarycavaliers.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "calvarycavaliers.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZtHm3qqy8CWHfNEkhy1HMAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
pusathosting.com	2024-08-30 15:09:09 (2 weeks ago)	2ds22 bruteforce	Brute-Force Web App Attack
TPI-Abuse	2024-08-30 15:03:17 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 11:03:12.360474 2024] [security2:error] [pid 707102:tid 707102] [client 58.137.200.50:16957] [client 58.137.200.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fredlandia.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fredlandia.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZtHfMKQG2FM8k1c2mSep2gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Dolphi	2024-08-30 14:50:03 (2 weeks ago)	POST //xmlrpc.php	Brute-Force Web App Attack
TPI-Abuse	2024-08-30 14:42:08 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 10:42:00.635923 2024] [security2:error] [pid 12552:tid 12552] [client 58.137.200.50:4178] [client 58.137.200.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.rodatrack.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.rodatrack.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZtHaOClDcQQXKtuIpq5EBAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-30 13:32:53 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Port ... show more(mod_security) mod_security (id:225170) triggered by 58.137.200.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 30 09:32:46.444701 2024] [security2:error] [pid 22994:tid 22994] [client 58.137.200.50:51707] [client 58.137.200.50] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.mcbrearty.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.mcbrearty.org"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZtHJ_qxJSswKDlM6xZzZXAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
RLDD	2024-08-21 23:47:33 (3 weeks ago)	WP probing -jts	Web App Attack
syokadmin	2024-08-21 12:38:03 (3 weeks ago)	(mod_security) mod_security (id:77140967) triggered by 58.137.200.50 (-): 1 in the last 3600 secs	Brute-Force
syokadmin	2024-08-19 23:54:20 (3 weeks ago)	(mod_security) mod_security (id:77140967) triggered by 58.137.200.50 (-): 1 in the last 3600 secs	Brute-Force
Sefinek	2024-08-17 20:56:39 (3 weeks ago)	IP 58.137.200.50 [TH] triggered Cloudflare WAF (firewallCustom). Action taken: BLOCK ASN ... show moreIP 58.137.200.50 [TH] triggered Cloudflare WAF (firewallCustom). Action taken: BLOCK ASN: 45458 (SBN-AWN-AS-02-AP SBN-ISPAWN-ISP and SBN-NIXAWN-NIX) Protocol: HTTP/1.1 (method PUT) Domain: patrons.sefinek.net Endpoint: /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php Timestamp: 2024-08-17T12:55:46Z Ray ID: 8b49d2036e5a0c87 Rule ID: 28ce88ae31c84d638aec7f360a4f64af User agent: python-requests/2.32.3 Report generated by Node-Cloudflare-WAF-AbuseIPDB (https://github.com/sefinek24/Node-Cloudflare-WAF-AbuseIPDB) show less	Bad Web Bot
Anonymous	2024-08-17 14:37:33 (4 weeks ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
RoboSOC	2024-08-17 10:38:32 (4 weeks ago)	phpunit Remote Code Execution Vulnerability, PTR: PTR record not found	Hacking
Smel	2024-08-17 09:22:01 (4 weeks ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
Anonymous	2024-08-15 15:24:58 (4 weeks ago)	Ports: 25,465,587; Direction: 0; Trigger: LF_DISTATTACK	Brute-Force SSH