JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 169.58.45.73

169.58.45.73 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 52%: ?

52%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3452647.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 169.58.45.73

Whois 169.58.45.73

IP Abuse Reports for 169.58.45.73:

This IP address has been reported a total of 15 times from 9 distinct sources. 169.58.45.73 was first reported on July 20th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 thesimonmanuel	2026-07-26 23:28:28 (8 hours ago)	169.58.45.73 - - [27/Jul/2026:04:58:27 +0530] "GET /.env HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Macinto ... show more 169.58.45.73 - - [27/Jul/2026:04:58:27 +0530] "GET /.env HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4.1 Safari/605.1.15" "-" show less	Web App Attack
🇬🇧 openstrike.co.uk	2026-07-25 05:14:51 (2 days ago)	2 attacks on env grabbing URLs: GET /.env.production HTTP/1.1	Hacking
🇺🇸 interbiznw.com	2026-07-24 19:52:58 (2 days ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 HamSammich	2026-07-24 08:06:30 (2 days ago)	Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-07-24T08:06Z).	Brute-Force Web App Attack
🇳🇱 hxsain	2026-07-23 19:12:23 (3 days ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoi ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-23 17:50:57 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 13:50:48.482387 2026] [security2:error] [pid 75895:tid 75895] [client 169.58.45.73:41622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithhooperteam.com"] [uri "/.env"] [unique_id "amJUeCXuFkA9gzdky6vuZQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-23 10:44:44 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 06:44:39.351487 2026] [security2:error] [pid 2216785:tid 2216785] [client 169.58.45.73:36134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarrisbilliards.com"] [uri "/.env"] [unique_id "amHwl99clBMQcrgj8-lK6wAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 HamSammich	2026-07-23 08:08:46 (3 days ago)	Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-07-23T08:08Z).	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 13:22:47 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 09:22:39.855745 2026] [security2:error] [pid 2140570:tid 2140570] [client 169.58.45.73:37598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birdsofnewcaledonia.com"] [uri "/.env"] [unique_id "amDEH73ukSiIriutj5eeuwAAACs"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Rom74	2026-07-21 22:08:44 (5 days ago)	[Wed Jul 22 00:08:43.862625 2026] [security2:error] [pid 1915964:tid 132156386952896] [client 169.58 ... show more [Wed Jul 22 00:08:43.862625 2026] [security2:error] [pid 1915964:tid 132156386952896] [client 169.58.45.73:50156] [client 169.58.45.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "unreflexeunevie.fr"] [uri "/config.json"] [unique_id "al_t64gMlVDbSShy9C4a6QAAAFc"] [Wed Jul 22 00:08:43.862654 2026] [security2:error] [pid 1915962:tid 132157141935808] [client 169.58.45.73:50170] [client 169.58.45.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded ... show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-21 21:59:37 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-20. show less	Web App Attack SSH Hacking
🇷🇺 DZBOT	2026-07-21 08:05:42 (5 days ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇺🇸 HamSammich	2026-07-21 08:03:11 (5 days ago)	Automated sensor: 1 HTTPS connection/probe attempts over the last 24h (latest 2026-07-21T08:03Z).	Brute-Force Web App Attack
🇳🇱 homeshowdomain.nl	2026-07-20 21:59:18 (6 days ago)	Auto-ban: >3000 req/min op 2026-07-20	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-07-20 07:07:14 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 169.58.45.73 (vmi3452647.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 03:07:06.057110 2026] [security2:error] [pid 3646225:tid 3646225] [client 169.58.45.73:44538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agkgt.org"] [uri "/.env"] [unique_id "al3JGpIxWZWzrTu2hB2J2QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.139.245.137

🇧🇷 138.255.157.62

🇨🇳 112.122.141.43

🇹🇷 94.154.43.112

🇳🇱 88.210.63.69

🇩🇪 43.228.157.9

🇰🇪 41.81.202.157

🇺🇸 20.38.37.110

🇷🇺 5.130.185.33

🇮🇱 2.55.69.224

🇹🇳 197.5.145.150

🇨🇳 183.184.144.7

🇺🇦 176.105.200.155

🇺🇸 172.253.209.146

🇦🇴 154.116.254.157

🇨🇳 101.67.136.172

🇺🇸 96.78.175.36

🇦🇿 37.114.149.109

🇨🇭 20.203.200.218

🇮🇱 2.54.84.186