JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

169.58.20.36

Recent Activity

Abuse Confidence Score

100% Critical

63 reports

49 reporters · latest 44 minutes ago

ISP: Contabo GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS51167
Hostname(s): vmi3702146.contaboserver.net
Domain Name: contabo.com
Country: 🇫🇷 France
City: Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

63 from 49 distinct reporters

First reported

October 27th 2026

Most recent report

44 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 16 🇫🇷 France 13 🇺🇸 United States of America 13

Most common categories Web App Attack 43 Bad Web Bot 19 Hacking 18 Brute-Force 10 Port Scan 8

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 ak47suk1.my	2026-11-09 03:48:48 UTC · (44 minutes ago)	2026-11-09T03:48:47.781992xvmon sshd[41612]: banner exchange: Connection from 169.58.20.36 port 54828: invalid format 2026-11-09T03:48:47.782511xvmon sshd[41613]: banner exchange: Connection from 169.58.20.36 port 54840: invalid format 2026-11-09T03: ... show more 2026-11-09T03:48:47.781992xvmon sshd[41612]: banner exchange: Connection from 169.58.20.36 port 54828: invalid format 2026-11-09T03:48:47.782511xvmon sshd[41613]: banner exchange: Connection from 169.58.20.36 port 54840: invalid format 2026-11-09T03:48:47.783343xvmon sshd[41614]: banner exchange: Connection from 169.58.20.36 port 54846: invalid format ... show less	Brute-Force SSH
🇩🇪 AuthenticHowler	2026-11-08 20:26:05 UTC · (8 hours ago)	HTTP request flood, nginx rate limit exceeded: 20 failed attempts. Banned 1h by fail2ban [nginx-limit-req]. Log evidence, own hostname redacted: limiting requests, excess: 10.920 by zone "perip", client: 169.58.20.36, server: _, request: "GET /backen ... show more HTTP request flood, nginx rate limit exceeded: 20 failed attempts. Banned 1h by fail2ban [nginx-limit-req]. Log evidence, own hostname redacted: limiting requests, excess: 10.920 by zone "perip", client: 169.58.20.36, server: _, request: "GET /backend/.firebase-service-account.json HTTP/1.1", host: "212.95.40.132" \| limiting requests, excess: 10.920 by zone "perip", client: 169.58.20.36, server: _, request: "GET /.service_account.sample.json HTTP/1.1", host: "212.95.40.132" \| limiting requests, excess: 10.920 by zone "perip", client: 169.58.20.36, server: _, request: "GET /.runtimeconfig.json HTTP/1.1", host: "212.95.40.132" \| limiting requests, excess: 10.920 by zone "perip", client: 169.58.20.36, server: _, request: "GET /api/index.ts HTTP/1.1", host: "212.95.40.132" show less	DDoS Attack
🇩🇪 Bedios GmbH	2026-11-08 19:21:21 UTC · (9 hours ago)	Excessive probing of non-existent URLs	Bad Web Bot
🇩🇪 maxpower	2026-11-08 15:51:54 UTC · (12 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 169.58.20.36 (FR/France/vmi3702146.contaboserver.net): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 169.58.20.36 - - [08/Nov/2026:16:51:51 +0100] "GE ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 169.58.20.36 (FR/France/vmi3702146.contaboserver.net): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 169.58.20.36 - - [08/Nov/2026:16:51:51 +0100] "GET /config/secrets.json HTTP/1.1" 301 286 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-" host=51.89.2.96 show less	Port Scan
🇳🇱 niclqs	2026-11-08 15:23:04 UTC · (13 hours ago)	AntiSpam: Exceeded rate limit with 3 requests in 10s	DDoS Attack Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-11-08 13:49:55 UTC · (14 hours ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-201)	Hacking Bad Web Bot
🇳🇱 Alt255	2026-11-08 08:30:18 UTC · (20 hours ago)	[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 169.58.20.36 - - [08/Nov/2026:09:30:13 +0100] "GET /host.json HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple ... show more [cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 169.58.20.36 - - [08/Nov/2026:09:30:13 +0100] "GET /host.json HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:09:30:13 +0100] "GET /appfy.json HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:09:30:13 +0100] "GET /auth.json HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:09:30:13 +0100] "GET /Pole.json HTTP/2.0" 404 1920 " ... show less	Bad Web Bot Web App Attack
🇫🇷 Nop Nop	2026-11-08 07:46:54 UTC · (20 hours ago)	CrowdSec:crowdsecurity/http-probing	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-11-08 06:18:22 UTC · (22 hours ago)	(mod_security) mod_security (id:949110) triggered by 169.58.20.36 (FR/France/vmi3702146.contaboserver.net): N in the last X secs	Web App Attack
🇩🇪 big-cloud.nl	2026-11-08 05:03:19 UTC · (23 hours ago)	Try to access /server/.env.dev.example	Web App Attack
🇺🇸 swalluw	2026-11-08 04:43:59 UTC · (23 hours ago)	Web vulnerability scanning: request for /.envrc.json (HTTP 404, GET) at 2026-11-08T04:43:59+00:00 - exploit probe, no legitimate use	Bad Web Bot Web App Attack
🇺🇸 EmilGH	2026-11-08 04:27:23 UTC · (1 day ago)	169.58.20.36 - - [08/Nov/2026:04:27:22 +0000] "GET /serviceAccountKey.json HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:04:27:22 ... show more 169.58.20.36 - - [08/Nov/2026:04:27:22 +0000] "GET /serviceAccountKey.json HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:04:27:22 +0000] "GET /creds.json HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:04:27:22 +0000] "GET /env.sample HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:04:27:22 +0000] "GET /credentials.json HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 169.58.20.36 - - [08/Nov/2026:04:27:22 +0000] "GET /config.json HTTP/1.1" 404 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 S ... show less	Bad Web Bot Web App Attack
🇺🇸 jfz-abuse	2026-11-08 00:38:27 UTC · (1 day ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇫🇷 Optimatiq (ThreatBite)	2026-11-07 16:47:20 UTC · (1 day ago)	Probe for secrets or exploit paths (fail2ban)	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-11-07 08:33:04 UTC · (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 185.220.101.166

🇦🇷 45.184.106.121

🇬🇧 2a03:b0c0:1:e0:0:1:f004:7001

🇵🇱 172.68.159.219

🇺🇸 170.168.241.216

🇺🇸 170.168.174.236

🇧🇷 168.197.245.49

🇨🇳 120.48.112.221

🇮🇱 109.65.66.43

🇺🇸 72.68.152.216

🇺🇸 66.132.195.101

🇺🇸 66.132.195.39

🇺🇸 40.67.171.70

🇺🇸 35.252.91.228

🇺🇸 2604:a880:400:d1:0:5:5fbd:e001

🇺🇿 198.163.193.0

🇺🇸 194.104.11.155

🇰🇷 175.192.78.45

🇨🇭 170.231.237.214

🇺🇸 67.162.171.91