JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.36.215

169.58.36.215 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3448577.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.36.215

Whois 169.58.36.215

IP Abuse Reports for 169.58.36.215:

This IP address has been reported a total of 33 times from 25 distinct sources. 169.58.36.215 was first reported on July 18th 2026, and the most recent report was 48 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-19 02:07:19 (48 minutes ago)	[Sun Jul 19 04:07:18.088914 2026] [authz_core:error] [pid 12237] [client 169.58.36.215:58647] AH0163 ... show more [Sun Jul 19 04:07:18.088914 2026] [authz_core:error] [pid 12237] [client 169.58.36.215:58647] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sun Jul 19 04:07:18.507796 2026] [access_compat:error] [pid 28556] [client 169.58.36.215:58666] AH01797: client denied by server configuration: /var/www/html/.env [Sun Jul 19 04:07:18.904084 2026] [access_compat:error] [pid 12238] [client 169.58.36.215:58700] AH01797: client denied by server configuration: /var/www/html/ ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 01:14:29 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 169.58.36.215 (vmi3448577.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.36.215 (vmi3448577.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 21:14:22.829087 2026] [security2:error] [pid 2250:tid 2250] [client 169.58.36.215:64851] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.180"] [uri "/.env"] [unique_id "alwk7tlPapckS_U7Y6jK6AAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 CK_beats	2026-07-18 23:35:02 (3 hours ago)	Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 4 hits, proto=tcp, ports=80	Port Scan Hacking
🇩🇪 sdos.es	2026-07-18 22:18:09 (4 hours ago)	"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"	Web App Attack
Anonymous	2026-07-18 21:53:06 (5 hours ago)	Reported from Nginx log analysis 17. Log: 169.58.36.215 - - [18/Jul/2026:xx:xx:xx 0200] "GET /.env ... show more Reported from Nginx log analysis 17. Log: 169.58.36.215 - - [18/Jul/2026:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "python-requests/2.34.2" "-" "FR France Lauterbourg" "AS51167" "Contabo GmbH" show less	Port Scan Brute-Force SSH
🇮🇪 AutosOnShow	2026-07-18 21:40:07 (5 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-18 21:39:08.126 \|	Web App Attack
Anonymous	2026-07-18 21:17:19 (5 hours ago)	[Sat Jul 18 23:17:18.584599 2026] [access_compat:error] [pid 1225554:tid 1225554] [client 169.58.36. ... show more [Sat Jul 18 23:17:18.584599 2026] [access_compat:error] [pid 1225554:tid 1225554] [client 169.58.36.215:65197] AH01797: client denied by server configuration: /var/www/html/.env [Sat Jul 18 23:17:18.769054 2026] [access_compat:error] [pid 1180136:tid 1180136] [client 169.58.36.215:65220] AH01797: client denied by server configuration: /var/www/html/.env ... show less	Bad Web Bot Web App Attack
🇩🇪 Bedios GmbH	2026-07-18 20:50:37 (6 hours ago)	Login credentials theft attempt	Hacking
🇬🇧 Interceptor_HQ	2026-07-18 20:35:03 (6 hours ago)	request_uri: /.env -- automatic report --	Brute-Force Hacking
🇳🇱 wlt-blocker	2026-07-18 16:57:01 (9 hours ago)	Unauthorized access to webpage admin	Web App Attack
🇨🇳 Peter Yu	2026-07-18 16:48:20 (10 hours ago)		Bad Web Bot Web App Attack
🇬🇧 Bytemark	2026-07-18 16:24:57 (10 hours ago)	169.58.36.215 - - [18/Jul/2026:17:24:56 +0100] "GET /.env HTTP/1.1" 301 5258 "-" "python-requests/2. ... show more 169.58.36.215 - - [18/Jul/2026:17:24:56 +0100] "GET /.env HTTP/1.1" 301 5258 "-" "python-requests/2.34.2" show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 15:12:08 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 169.58.36.215 (vmi3448577.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.36.215 (vmi3448577.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 11:12:03.639978 2026] [security2:error] [pid 20355:tid 20355] [client 169.58.36.215:60741] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.env"] [unique_id "aluXw0VNXI5t1PZRvT7xIwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 14:53:16 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 169.58.36.215 (vmi3448577.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.36.215 (vmi3448577.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 10:53:08.852086 2026] [security2:error] [pid 971137:tid 971137] [client 169.58.36.215:57819] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.210"] [uri "/.env"] [unique_id "aluTVKx_T1JhQjj_lRxcUAAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 AutosOnShow	2026-07-18 14:19:04 (12 hours ago)	blocked for webapp attack \| path requested: /.env \| seen at 2026-07-18 14:18:05.809 \|	Web App Attack

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.150.14

🇸🇦 129.208.115.124

🇨🇳 113.201.207.130

🇳🇬 105.127.7.57

🇧🇪 104.199.8.240

🇸🇪 90.230.226.175

🇯🇵 43.130.249.176

🇲🇦 41.249.233.54

🇬🇧 35.203.211.49

🇹🇷 178.245.234.192

🇻🇳 171.243.151.60

🇺🇸 159.65.247.86

🇮🇩 103.82.92.50

🇧🇬 79.124.40.126

🇺🇸 65.49.1.48

🇱🇹 45.227.254.170

🇲🇼 41.75.114.30

🇺🇸 20.65.193.83

🇺🇸 205.210.31.37

🇧🇷 186.244.17.112