JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.18.159

169.58.18.159 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3440963.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.18.159

Whois 169.58.18.159

IP Abuse Reports for 169.58.18.159:

This IP address has been reported a total of 92 times from 71 distinct sources. 169.58.18.159 was first reported on July 14th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-22 18:50:02 (11 hours ago)	Probing for exploits 169.58.18.159 - - [22/Jul/2026:20:49:52 +0200] "GET /wp-admin/css/ HTTP/1.1" 30 ... show more Probing for exploits 169.58.18.159 - - [22/Jul/2026:20:49:52 +0200] "GET /wp-admin/css/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 169.58.18.159 - - [22/Jul/2026:20:49:58 +0200] "GET /wp-admin/css/colors/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇮🇩 Burayot	2026-07-22 17:19:47 (12 hours ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 169.58.18.159 (FR/France/vmi3440963 ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 169.58.18.159 (FR/France/vmi3440963.contaboserver.net): 1 in the last 3600 secs show less	Web App Attack
Anonymous	2026-07-22 08:18:20 (21 hours ago)	169.58.18.159 - - [22/Jul/2026:10:18:20 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 169 "-" "Mo ... show more 169.58.18.159 - - [22/Jul/2026:10:18:20 +0200] "GET /wp-includes/css/dist/ HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Web App Attack
🇬🇧 consul.to	2026-07-22 07:36:59 (22 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-07-22 04:37:59 (1 day ago)	169.58.18.159 - - [22/Jul/2026:05:37:57 +0100] "GET /cgi-bin/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Wi ... show more 169.58.18.159 - - [22/Jul/2026:05:37:57 +0100] "GET /cgi-bin/ HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" show less	Bad Web Bot
🇨🇭 4server	2026-07-21 20:44:39 (1 day ago)	''	Hacking Web App Attack
🇦🇺 2000cn.com.au	2026-07-21 17:04:06 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing	Web App Attack Hacking
🇬🇧 consul.to	2026-07-21 03:05:46 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-07-21 02:02:07 (2 days ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
🇬🇧 andypiper	2026-07-21 01:00:34 (2 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 Major Hostility	2026-07-21 00:30:30 (2 days ago)	"GET /wp-admin/ HTTP/1.1" 404 "GET /wp-admin/css/ HTTP/1.1" 404 "GET /wp-admin/css/colors/ HTTP/1.1" ... show more "GET /wp-admin/ HTTP/1.1" 404 "GET /wp-admin/css/ HTTP/1.1" 404 "GET /wp-admin/css/colors/ HTTP/1.1" 404 "GET /wp-admin/css/colors/blue/ HTTP/1.1" 404 "GET /wp-admin/includes/ HTTP/1.1" 404 "GET /wp-admin/maint/ HTTP/1.1" 404 "GET /wp-admin/js/ HTTP/1.1" 404 "GET /wp-admin/js/widgets/ HTTP/1.1" 404 "GET /wp-admin/images/ HTTP/1.1" 404 "GET /wp-admin/network/ HTTP/1.1" 404 "GET /wp-admin/user/ HTTP/1.1" 404 "GET /wp-includes/ HTTP/1.1" 404 "GET /wp-includes/Text/ HTTP/1.1" 404 "GET /wp-includes/Text/Diff/ HTTP/1.1" 404 "GET /wp-includes/css/ HTTP/1.1" 404 "GET /wp-includes/css/dist/ HTTP/1.1" 404 "GET /wp-includes/fonts/ HTTP/1.1" 404 "GET % show less	Web App Attack
🇬🇧 Mendip_Defender	2026-07-21 00:16:31 (2 days ago)	169.58.18.159 - - [21/Jul/2026:01:16:24 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (W ... show more 169.58.18.159 - - [21/Jul/2026:01:16:24 +0100] "GET /wp-admin/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 169.58.18.159 - - [21/Jul/2026:01:16:27 +0100] "GET /wp-admin/css/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 169.58.18.159 - - [21/Jul/2026:01:16:30 +0100] "GET /wp-admin/css/ HTTP/1.1" 403 6492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Hacking Web App Attack
🇵🇱 strefapi_com	2026-07-20 23:32:29 (2 days ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 conseilgouz	2026-07-20 22:48:24 (2 days ago)	sle-7 : Trying access unauthorized files/dir=>/wp-admin/css/	Hacking
Anonymous	2026-07-20 22:02:13 (2 days ago)	Web attack	Bad Web Bot Web App Attack

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇱 185.38.193.96

🇳🇱 176.65.149.220

🇫🇷 141.98.233.84

🇮🇳 131.229.221.46

🇲🇦 105.74.12.101

🇺🇸 104.37.28.199

🇮🇹 93.62.72.229

🇺🇸 52.242.193.144

🇺🇸 205.210.31.47

🇩🇪 185.254.106.218

🇺🇸 172.248.176.249

🇸🇦 169.148.121.211

🇺🇸 165.154.182.174

🇺🇸 161.123.173.183

🇳🇱 160.119.71.9

🇻🇳 157.66.224.129

🇫🇮 147.185.133.188

🇺🇸 147.185.132.98

🇨🇳 112.25.140.211

🇨🇳 111.33.71.238