JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.247.113

169.58.247.113 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3538111.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.247.113

Whois 169.58.247.113

IP Abuse Reports for 169.58.247.113:

This IP address has been reported a total of 39 times from 31 distinct sources. 169.58.247.113 was first reported on August 27th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇱 spd.co.il	2026-08-29 22:02:54 (2 days ago)	Web application attack detected	Hacking Web App Attack
🇺🇸 EvilTurkey	2026-08-28 16:00:10 (3 days ago)	Web app attack against financial institution website.	Web App Attack Hacking
🇫🇷 Feelautom	2026-08-28 05:21:14 (4 days ago)	[FeelAutom Auto-Ban] PathScan: /.env.sample (Score: 200)	Port Scan
🇺🇸 TPI-Abuse	2026-08-28 04:55:04 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 169.58.247.113 (vmi3538111.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 169.58.247.113 (vmi3538111.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:54:58.768771 2026] [security2:error] [pid 19846:tid 19846] [client 169.58.247.113:64326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infojeffreysbay.com"] [uri "/.env"] [unique_id "apEUogAYV7WlgZ_PDa0VWQAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 Inartis	2026-08-28 04:09:54 (4 days ago)	169.58.247.113 - - [28/Aug/2026:06:09:52 +0200] "GET /.env HTTP/1.1" 302 458 "-" "Mozilla/5.0 (Windo ... show more 169.58.247.113 - - [28/Aug/2026:06:09:52 +0200] "GET /.env HTTP/1.1" 302 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 169.58.247.113 - - [28/Aug/2026:06:09:52 +0200] "GET /.env HTTP/1.1" 403 5537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 169.58.247.113 - - [28/Aug/2026:06:09:53 +0200] "GET /.env.local HTTP/1.1" 302 470 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-28 03:45:02 (4 days ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
Anonymous	2026-08-28 03:31:04 (4 days ago)	Bot / scanning and/or hacking attempts: GET /backend/.env HTTP/1.1, GET /docs/.env HTTP/1.1, GET /ad ... show more Bot / scanning and/or hacking attempts: GET /backend/.env HTTP/1.1, GET /docs/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /public/.env HTTP/1.1, GET /src/.env HTTP/1.1, GET /config/.env HTTP/1.1, GET /vendor/.env HTTP/1.1, GET /.env.bak HTTP/1.1, GET /client/.env HTTP/1.1, GET /lib/.env HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.dev HTTP/1.1, GET /web/.env HTTP/1.1, GET /dist/.env HTTP/1.1, GET /server/.env HTTP/1.1, GET /storage/.env HTTP/1.1, GET /blog/.env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 02:09:02 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 169.58.247.113 (vmi3538111.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 169.58.247.113 (vmi3538111.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 22:08:55.769674 2026] [security2:error] [pid 6828:tid 6828] [client 169.58.247.113:62909] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laboquimia.es"] [uri "/.env"] [unique_id "apDtt_Iafxoj4QmrLMucUwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 WebNiraj	2026-08-28 02:00:10 (4 days ago)	(mod_security) mod_security (id:949110) triggered by 169.58.247.113 (DE/Germany/vmi3538111.contabose ... show more (mod_security) mod_security (id:949110) triggered by 169.58.247.113 (DE/Germany/vmi3538111.contaboserver.net): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇳🇱 Site.eu	2026-08-28 01:49:16 (4 days ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 cg-design.co.uk	2026-08-28 01:03:57 (4 days ago)	(mod_security) mod_security triggered on hostname [redacted] 169.58.247.113 (FR/France/vmi3538111.co ... show more (mod_security) mod_security triggered on hostname [redacted] 169.58.247.113 (FR/France/vmi3538111.contaboserver.net) show less	SQL Injection
🇳🇱 Savvii	2026-08-28 00:27:57 (4 days ago)	20 attempts against mh-misbehave-ban on mars	Brute-Force Bad Web Bot Web App Attack
🇬🇧 [email protected]	2026-08-28 00:08:06 (4 days ago)	169.58.247.113 - - [28/Aug/2026:00:08:06 +0000] "GET /.env HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macin ... show more 169.58.247.113 - - [28/Aug/2026:00:08:06 +0000] "GET /.env HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" 169.58.247.113 - - [28/Aug/2026:00:08:06 +0000] "GET /.env.local HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 169.58.247.113 - - [28/Aug/2026:00:08:06 +0000] "GET /.env.development HTTP/1.1" 404 327 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36" ... show less	Web App Attack
🇩🇪 raph	2026-08-28 00:04:19 (4 days ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-08-27 23:57:58 (4 days ago)	Suspicious URL access.	Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 167.172.129.109

🇺🇸 216.73.217.50

🇿🇦 209.203.18.204

🇬🇧 193.163.125.148

🇺🇸 54.89.210.50

🇺🇸 54.82.93.217

🇺🇸 54.80.228.5

🇷🇴 2.57.122.209

🇧🇷 177.54.182.14

🇧🇷 152.32.200.213

🇭🇰 152.32.187.234

🇨🇳 115.190.126.68

🇳🇱 94.154.43.56

🇷🇴 92.118.39.71

🇱🇺 64.89.161.85

🇫🇷 51.75.253.68

🇮🇷 5.237.86.180

🇺🇸 3.227.246.154

🇮🇩 103.31.39.72

🇷🇺 95.26.112.107