JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 58.97.198.161

58.97.198.161 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 0%: ?

ISP	EZECOM CO., LTD.
Usage Type	Fixed Line ISP
ASN	AS131178
Domain Name	ezecom.com.kh
Country	🇰🇭 Cambodia
City	Phnom Penh, Phnom Penh

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 58.97.198.161

Whois 58.97.198.161

IP Abuse Reports for 58.97.198.161:

This IP address has been reported a total of 41 times from 21 distinct sources. 58.97.198.161 was first reported on February 16th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-05-05 04:17:08 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 58.97.198.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 58.97.198.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 05 00:16:51.642614 2025] [security2:error] [pid 726641:tid 726641] [client 58.97.198.161:41155] [client 58.97.198.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|jolankagroup.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jolankagroup.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBg7szCDgowoHR09jnsxOAAAAAU"], referer: https://jolankagroup.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 el-brujo	2025-05-03 06:56:01 (1 year ago)	05/03/2025-08:56:01.124804 58.97.198.161 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
🇺🇸 TPI-Abuse	2025-05-02 07:17:18 (1 year ago)	(mod_security) mod_security (id:225170) triggered by 58.97.198.161 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:225170) triggered by 58.97.198.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 02 03:17:04.957265 2025] [security2:error] [pid 1246929:tid 1246929] [client 58.97.198.161:35053] [client 58.97.198.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|manaplas.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "manaplas.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aBRxcLji5LPzzkm3c2HKGQAAAAU"], referer: https://manaplas.com/wp-json/wp/v2/users/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-04-23 22:32:11 (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/58.97.198.161	Brute-Force
🇫🇷 Nicolmn	2025-04-16 18:13:03 (1 year ago)	Web form spam ( id k.l )	Web Spam
🇨🇿 unhfree.net	2025-04-15 06:53:03 (1 year ago)	Apr 15 05:10:58 canopus postfix/smtpd[467812]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 55 ... show more Apr 15 05:10:58 canopus postfix/smtpd[467812]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 15 05:10:58 canopus postfix/smtpd[467812]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 15 05:10:58 canopus postfix/smtpd[467812]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 15 05:10:58 canopus postfix/smtpd[467812]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <yucelgunay0 ... show less	Brute-Force Exploited Host
🇨🇿 unhfree.net	2025-04-06 00:21:18 (1 year ago)	Apr 5 20:52:11 canopus postfix/smtpd[3695988]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 5 ... show more Apr 5 20:52:11 canopus postfix/smtpd[3695988]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 5 20:52:11 canopus postfix/smtpd[3695988]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 5 20:52:11 canopus postfix/smtpd[3695988]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Apr 5 20:52:11 canopus postfix/smtpd[3695988]: NOQUEUE: reject: RCPT from unknown[58.97.198. ... show less	Brute-Force Exploited Host
🇳🇱 Savvii	2025-03-31 19:49:44 (1 year ago)	20 attempts against mh_ha-misbehave-ban on thyme	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-31 06:08:05 (1 year ago)	Attempted brute force login to web vpn 2 time(s); last attempt for 2025.03.31 is noted in report tim ... show more Attempted brute force login to web vpn 2 time(s); last attempt for 2025.03.31 is noted in report timestamp show less	Hacking Brute-Force
Anonymous	2025-03-23 07:17:38 (1 year ago)	apache-wordpress-login	Brute-Force Web App Attack
🇨🇿 unhfree.net	2025-03-20 13:54:32 (1 year ago)	Mar 20 13:34:36 canopus postfix/smtpd[1931941]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 5 ... show more Mar 20 13:34:36 canopus postfix/smtpd[1931941]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 20 13:34:36 canopus postfix/smtpd[1931941]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 20 13:34:36 canopus postfix/smtpd[1931941]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 20 13:34:36 canopus postfix/smtpd[1931941]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recip ... show less	Brute-Force Exploited Host
🇲🇾 syokadmin	2025-03-19 16:34:58 (1 year ago)	58.97.198.161 (KH/Cambodia/-), 2 distributed smtpauth attacks on account [[email protected]] in t ... show more 58.97.198.161 (KH/Cambodia/-), 2 distributed smtpauth attacks on account [[email protected]] in the last 3600 secs show less	Brute-Force
🇨🇿 unhfree.net	2025-03-11 11:26:52 (1 year ago)	Mar 11 05:15:13 canopus postfix/smtpd[969631]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 55 ... show more Mar 11 05:15:13 canopus postfix/smtpd[969631]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 11 05:15:13 canopus postfix/smtpd[969631]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 11 05:15:13 canopus postfix/smtpd[969631]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <[email protected]>: Recipient address rejected: Maximum 20 messages per 60 minutes limit reached; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<localhost> Mar 11 05:15:13 canopus postfix/smtpd[969631]: NOQUEUE: reject: RCPT from unknown[58.97.198.161]: 554 5.7.1 <mcotton348@gm ... show less	Brute-Force Exploited Host
🇨🇳 ThreatBook.io	2025-03-01 22:46:54 (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/58.97.198.161	SSH
🇩🇪 rh24	2025-02-24 16:28:51 (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 58.97.198.161 (KH/Cambodia/-): (CF_ENA ... show more (mod_security) mod_security triggered on hostname [redacted] 58.97.198.161 (KH/Cambodia/-): (CF_ENABLE) show less	SQL Injection

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.81

🇹🇼 198.235.24.56

🇪🇹 196.188.187.21

🇧🇷 185.100.215.213

🇳🇱 77.239.124.237

🇺🇸 34.170.59.236

🇩🇪 217.239.15.14

🇬🇧 193.163.125.14

🇸🇬 159.223.85.210

🇺🇸 87.99.130.132

🇯🇲 69.160.102.249

🇳🇱 45.148.10.152

🇺🇸 45.33.14.5

🇬🇧 195.96.139.11

🇫🇮 147.185.133.60

🇩🇿 105.99.110.73

🇰🇷 49.247.202.239

🇬🇭 41.204.63.118

🇮🇳 14.102.101.248

🇨🇳 222.247.123.170