JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.0.37

169.58.0.37 was found in our database!

This IP was reported 59 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3433529.contaboserver.net
Domain Name	contabo.com
Country	🇩🇪 Germany
City	Munich, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.0.37

Whois 169.58.0.37

IP Abuse Reports for 169.58.0.37:

This IP address has been reported a total of 59 times from 42 distinct sources. 169.58.0.37 was first reported on July 12th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 edena	2026-07-19 01:28:38 (5 hours ago)	169.58.0.37 - - [19/Jul/2026:03:28:37 +0200] "GET /.env HTTP/1.0" 403 322 "-" "-" 169.58.0.37 - - [1 ... show more 169.58.0.37 - - [19/Jul/2026:03:28:37 +0200] "GET /.env HTTP/1.0" 403 322 "-" "-" 169.58.0.37 - - [19/Jul/2026:03:28:37 +0200] "GET /.env HTTP/1.0" 403 322 "-" "-" 169.58.0.37 - - [19/Jul/2026:03:28:38 +0200] "GET /phpmyadmin/ HTTP/1.0" 403 322 "-" "-" ... show less	Web App Attack Bad Web Bot
🇧🇪 sid3windr	2026-07-18 22:11:17 (8 hours ago)	GET /.env (Tarpitted for , wasted 120B)	Web App Attack
🇩🇪 pigro	2026-07-18 21:47:18 (9 hours ago)	169.58.0.37 - - [18/Jul/2026:23:47:17 +0200] "GET /wp-login.php HTTP/1.0" 404 153 "-" "-" 169.58.0.3 ... show more 169.58.0.37 - - [18/Jul/2026:23:47:17 +0200] "GET /wp-login.php HTTP/1.0" 404 153 "-" "-" 169.58.0.37 - - [18/Jul/2026:23:47:17 +0200] "GET /phpmyadmin/ HTTP/1.0" 404 153 "-" "-" ... show less	Web App Attack
🇫🇮 oh.mg	2026-07-18 17:11:53 (13 hours ago)	[Sat Jul 18 19:11:52.110746 2026] [security2:error] [pid 1024862:tid 1024886] [client 169.58.0.37:50 ... show more [Sat Jul 18 19:11:52.110746 2026] [security2:error] [pid 1024862:tid 1024886] [client 169.58.0.37:50145] [client 169.58.0.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "x"] [uri "/.env"] [unique_id "aluz2Jcbce1W8gp_sYnnXAAAAJI"] [Sat Jul 18 19:11:52.787130 2026] [security2:error] [pid 1024862:tid 1024875] [client 169.58.0.37:50546] [client 169.58.0.37] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] ... show less	Web App Attack Bad Web Bot
🇩🇪 bescared	2026-07-18 15:52:53 (15 hours ago)	F2B - Malicious activity detected. URL Probing. -c0423ad6-	Hacking Web App Attack
🇩🇪 gadix	2026-07-18 13:13:38 (17 hours ago)	[18/Jul/2026:15:13:37.750291 +0200] alt8AS1lM-871vS8Du1knAAAAAU 169.58.0.37 51686 127.0.0.1 7080 [18 ... show more [18/Jul/2026:15:13:37.750291 +0200] alt8AS1lM-871vS8Du1knAAAAAU 169.58.0.37 51686 127.0.0.1 7080 [18/Jul/2026:15:13:38.132863 +0200] alt8ArbpQ99Finy1B3qoAAAAAAA 169.58.0.37 51722 127.0.0.1 7080 [18/Jul/2026:15:13:38.485044 +0200] alt8AnDTY3-LUlw_8paOAwAAAAI 169.58.0.37 51734 127.0.0.1 7080 ... show less	Web App Attack
🇺🇸 LotPhantom	2026-07-18 03:58:34 (1 day ago)	169.58.0.37 - - [18/Jul/2026:03:57:34 +0000] "GET /wp-login.php HTTP/1.0" 404 146 "-" "-" "0" ...	Web App Attack
🇬🇧 sandra361	2026-07-17 18:23:34 (1 day ago)	Port scan detected: 39 attempts across 2 ports (80,443). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC= ... show more Port scan detected: 39 attempts across 2 ports (80,443). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=169.58.0.37 LEN=40 TOS=0x00 PREC=0x00 TTL=116 ID=5539 PROTO=TCP SPT=53881 DPT=80 WINDOW=65392 RES=0x00 ACK FIN URGP=0 show less	Port Scan
🇪🇸 alferez	2026-07-17 14:16:21 (1 day ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
Anonymous	2026-07-17 12:08:50 (1 day ago)	169.58.0.37 - - [17/Jul/2026:12:01:17 +0000] "GET /mail.txt HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Wind ... show more 169.58.0.37 - - [17/Jul/2026:12:01:17 +0000] "GET /mail.txt HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 169.58.0.37 - - [17/Jul/2026:12:01:17 +0000] "GET /mail-config.txt HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 169.58.0.37 - - [17/Jul/2026:12:08:49 +0000] "GET /mailgun.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" ... show less	Web App Attack
🇩🇪 gadix	2026-07-17 10:42:17 (1 day ago)	[17/Jul/2026:12:42:14.807814 +0200] aloHBpfdZXPm_GXW7OqiYQAAAAA 169.58.0.37 41702 127.0.0.1 7080 [17 ... show more [17/Jul/2026:12:42:14.807814 +0200] aloHBpfdZXPm_GXW7OqiYQAAAAA 169.58.0.37 41702 127.0.0.1 7080 [17/Jul/2026:12:42:15.429189 +0200] aloHB3iCXRWYvdV_IE91RgAAAAc 169.58.0.37 41744 127.0.0.1 7080 [17/Jul/2026:12:42:15.471012 +0200] aloHB6WS0Njfw2t3Swj0fQAAAAU 169.58.0.37 41752 127.0.0.1 7080 ... show less	Web App Attack
🇮🇹 CoreTech srl	2026-07-17 02:24:01 (2 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact	Hacking
🇬🇧 OptimusGO	2026-07-17 01:15:40 (2 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-17 02:15:40 UTC Log evidence: 169.58.0.37 - - [17/Jul/2026:02:15:38 +0100] "GET /language/en-GB/en-GB.xml HTTP/1.0" 404 146 "-" "-" 169.58.0.37 - - [17/Jul/2026:02:15:38 +0100] "GET /core/misc/drupal.js HTTP/1.0" 404 146 "-" "-" 169.58.0.37 - - [17/Jul/2026:02:15:38 +0100] "GET /user/login HTTP/1.0" 404 146 "-" "-" show less	Port Scan Brute-Force
🇳🇱 homeshowdomain.nl	2026-07-16 22:02:47 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-15. show less	Web App Attack SSH Hacking
🇺🇸 MPL	2026-07-16 11:30:31 (2 days ago)	tcp ports: 443,80 (9 or more attempts)	Port Scan

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.62.156.66

🇨🇭 209.99.191.19

🇮🇳 202.141.83.141

🇧🇬 193.24.211.76

🇳🇱 185.223.235.30

🇵🇱 176.53.159.197

🇺🇸 162.216.149.243

🇨🇦 142.44.225.22

🇱🇹 141.98.9.58

🇳🇱 88.210.63.69

🇨🇦 85.217.149.54

🇸🇪 45.84.107.182

🇺🇸 15.204.214.220

🇫🇮 2a09:bac5:31c1:319::4f:af

🇬🇧 181.214.140.97

🇸🇬 167.71.198.192

🇺🇸 162.216.149.162

🇸🇬 112.199.192.139

🇭🇰 101.36.111.155

🇧🇬 79.124.40.126