This IP address has been reported a total of
95
times from
35 distinct
sources.
169.58.49.156 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 39
reports;
Germany
with 33
reports;
United States of America
with 6
reports.
The most common categories in these recent reports were:
Port Scan
68
times;
Web App Attack
23
times;
Hacking
10
times;
Bad Web Bot
6
times;
Brute-Force
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events a ...
show moreHoneypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 95 application-level events across 95 source port(s). Sensor(s): Honeyaml.
show less
Honeypot-observed (last seen 2026-10-12 21:10 UTC): data-store/config enumeration; known exploit/adm ...
show moreHoneypot-observed (last seen 2026-10-12 21:10 UTC): data-store/config enumeration; known exploit/admin path probe. Evidence: path /.env, /.git/HEAD | path /cgi-bin/, /jenkins.
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=169.58.49.156; proto=TCP; source_port=56632; target_port=3000; flags=SYN
show less
Honeypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 91 application-level events a ...
show moreHoneypot Finding: repeated TCP service probing on TCP/3000 (HTTP/API); 91 application-level events across 91 source port(s). Sensor(s): Honeyaml.
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=169.58.49.156; proto=TCP; source_port=55308; target_port=3000
show less
[2026-10-12 05:10:39] Attempted port scan on port 3000 by IP 169.58.49.156 (Reported by SysWarden ht ...
show more[2026-10-12 05:10:39] Attempted port scan on port 3000 by IP 169.58.49.156 (Reported by SysWarden https://github.com/duggytuxy/syswarden)
show less
