JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.201.131

169.58.201.131 was found in our database!

This IP was reported 124 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3518971.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.201.131

Whois 169.58.201.131

IP Abuse Reports for 169.58.201.131:

This IP address has been reported a total of 124 times from 96 distinct sources. 169.58.201.131 was first reported on August 20th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mw	2026-08-24 02:49:26 (2 days ago)	Web App Attack	Web App Attack
🇩🇪 ghostwarriors	2026-08-23 16:50:56 (2 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2026-08-23 04:33:17 (3 days ago)	Many_bad_calls	Web App Attack
🇺🇸 mw	2026-08-23 01:49:10 (3 days ago)	Web App Attack	Web App Attack
🇳🇱 stom	2026-08-23 01:07:26 (3 days ago)	2026-08-23T01:07:24.955549 socky.stom66.co.uk proftpd[3916165]: session[3916165] 0.0.0.0 (169.58.201 ... show more 2026-08-23T01:07:24.955549 socky.stom66.co.uk proftpd[3916165]: session[3916165] 0.0.0.0 (169.58.201.131[169.58.201.131]): USER admin: no such user found from 169.58.201.131 [169.58.201.131] to ::ffff:5.79.80.26:2222 ... show less	Brute-Force FTP Brute-Force
🇺🇸 HamSammich	2026-08-23 00:51:23 (3 days ago)	Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-08-23T00:51Z).	Brute-Force Web App Attack
Anonymous	2026-08-22 23:28:58 (3 days ago)	[Sun Aug 23 01:28:57.304267 2026] [authz_core:error] [pid 28497] [client 169.58.201.131:51370] AH016 ... show more [Sun Aug 23 01:28:57.304267 2026] [authz_core:error] [pid 28497] [client 169.58.201.131:51370] AH01630: client denied by server configuration: /var/www/html/default/hello.world [Sun Aug 23 01:28:57.495966 2026] [authz_core:error] [pid 28497] [client 169.58.201.131:51370] AH01630: client denied by server configuration: /var/www/html/default/ [Sun Aug 23 01:28:57.700922 2026] [authz_core:error] [pid 28497] [client 169.58.201.131:51370] AH01630: client denied by server configuration: /var/www/html/default/index.php [Sun Aug 23 01:28:57.855102 2026] [authz_core:error] [pid 28497] [client 169.58.201.131:51370] AH01630: client denied by server configuration: /var/www/html/default/test.hello [Sun Aug 23 01:28:57.900382 2026] [authz_core:error] [pid 28497] [client 169.58.201.131:51370] AH01630: client denied by server configuration: /var/www/html/default/index.php ... show less	Web App Attack
Anonymous	2026-08-22 23:07:10 (3 days ago)	2026/08/22 23:07:04 [error] 539#539: 90837 [client 169.58.201.131] ModSecurity: Access denied with ... show more 2026/08/22 23:07:04 [error] 539#539: 90837 [client 169.58.201.131] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `16' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `33' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.16.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "82.84.91.211"] [uri "/"] [unique_id "178744002446.749582"] [ref ""], client: 169.58.201.131, server: homesex.casa, request: "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1", host: "82.84.91.211:443" 2026/08/22 23:07:04 [error] 539#539: *90837 [client 169.58.201.131] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `16' against variable `TX:BLOCKING_INBOUND_ANOMAL ... show less	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-08-22 22:38:48 (3 days ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact	Hacking
🇨🇭 m_vlasov	2026-08-22 22:14:36 (3 days ago)	SSH/Telnet honeypot: 1 login attempts, 1 sessions, 17 shell commands.	Port Scan Brute-Force SSH Hacking IoT Targeted
🇨🇭 copestack	2026-08-22 22:00:06 (3 days ago)	Automated detection: CVE exploit attempt (known vulnerability exploitation). 1 decisions on ov-9acb4 ... show more Automated detection: CVE exploit attempt (known vulnerability exploitation). 1 decisions on ov-9acb4e. show less	Web App Attack
Anonymous	2026-08-22 21:52:09 (3 days ago)	Reported from Nginx log analysis 16. Log: 169.58.201.131 - - [22/Aug/2026:xx:xx:xx 0200] "POST /cgi ... show more Reported from Nginx log analysis 16. Log: 169.58.201.131 - - [22/Aug/2026:xx:xx:xx 0200] "POST /cgi-bin/../../../../../../../../../../bin/sh HTTP/1.1" xxx xxx "-" "-" "-" "FR France Lauterbourg" "AS51167" "Contabo GmbH" \| 169.58.201.131 - - [22/Aug/2026:xx:xx:xx 0200] "POST /cgi-bin/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1" xxx xxx "-" "-" "-" "FR France Lauterbourg" "AS51167" "Contabo GmbH" show less	Port Scan Brute-Force SSH
🇳🇱 tpjg	2026-08-22 21:48:30 (3 days ago)	Automated: 15 requests with error status in 120s window from 169.58.201.131. Evidence: /phpunit/src/ ... show more Automated: 15 requests with error status in 120s window from 169.58.201.131. Evidence: /phpunit/src/Util/PHP/eval-stdin.php:404,/phpunit/phpunit/Util/PHP/eval-stdin.php:404,/phpunit/phpunit/src/Util/PHP/eval-stdin.php:404,/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php:404,/vendor/phpunit/phpunit/LICENSE/eval-stdin.php:404,/vendor/phpunit/Util/PHP/eval-stdin.php:404,/vendor/phpunit/src/Util/PHP/eval-stdin.php:404,/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php:404,/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php:404,/index.php:404,/test.hello:404,/index.php:404,/hello.world:404,/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh:404,/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh:404 show less	Web App Attack
🇺🇸 drewf.ink	2026-08-22 21:21:47 (3 days ago)	[21:21] Attempted SSH login with credentials admin:a***n	Brute-Force SSH
🇫🇮 oh.mg	2026-08-22 21:14:32 (3 days ago)	[Sat Aug 22 23:14:31.149216 2026] [security2:error] [pid 2390636:tid 2390659] [client 169.58.201.131 ... show more [Sat Aug 22 23:14:31.149216 2026] [security2:error] [pid 2390636:tid 2390659] [client 169.58.201.131:56078] [client 169.58.201.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/hello.world"] [unique_id "aooRN4NNLapTx1cXyeErhwAAANU"] [Sat Aug 22 23:14:31.246879 2026] [security2:error] [pid 2390636:tid 2390640] [client 169.58.201.131:56078] [client 169.58.201.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [ver "OWASP_CRS/4.10.0 ... show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 124 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 165.154.227.158

🇨🇳 112.253.27.180

🇨🇳 112.239.98.172

🇫🇷 91.231.89.9

🇫🇷 51.210.100.146

🇳🇱 213.176.24.72

🇺🇸 162.216.149.228

🇩🇪 151.243.11.9

🇺🇸 143.59.14.59

🇨🇳 112.102.171.93

🇨🇳 112.22.135.86

🇨🇳 101.96.230.94

🇷🇺 89.151.178.88

🇧🇬 79.124.59.106

🇺🇸 65.49.1.170

🇺🇸 65.49.1.152

🇧🇷 43.157.170.126

🇳🇱 195.178.110.15

🇬🇧 193.32.209.232

🇺🇸 172.235.41.203