JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.58.56.103

2.58.56.103 was found in our database!

This IP was reported 213 times. Confidence of Abuse is 0%: ?

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	2.58.56.103.powered.by.rdp.sh
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Lelystad, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.58.56.103

Whois 2.58.56.103

IP Abuse Reports for 2.58.56.103:

This IP address has been reported a total of 213 times from 120 distinct sources. 2.58.56.103 was first reported on October 3rd 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-02-24 23:41:31 (4 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2026-02-24 20:11:44 (4 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-02-24 06:10:08 (4 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 cloudmax	2026-02-24 05:16:03 (4 months ago)	Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ... show more Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing show less	Port Scan
Anonymous	2026-02-24 04:38:06 (4 months ago)	2026-02-24T05:37:58.616483+01:00 vps kernel: [33648134.749511] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-02-24T05:37:58.616483+01:00 vps kernel: [33648134.749511] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=2.58.56.103 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=53318 PROTO=TCP SPT=47877 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
Anonymous	2026-02-24 04:31:47 (4 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇹🇷 Threat.live	2026-02-24 03:45:25 (4 months ago)	Suspicious activity, tcp/8000, tcp/8080, tcp/3000	Port Scan
🇫🇷 masterguru	2026-02-24 00:20:39 (4 months ago)	BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-14 ... show more BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-143) show less	Bad Web Bot
🇫🇷 SpaceHost-Server	2026-02-23 23:38:18 (4 months ago)		Brute-Force Web App Attack
🇩🇪 acadeova	2026-02-23 22:04:13 (4 months ago)	Blocked by UFW on vps2 [8080/tcp] Source port: 44246 TTL: 246 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on vps2 [8080/tcp] Source port: 44246 TTL: 246 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Mr-Money	2026-02-23 21:00:03 (4 months ago)	scenario: crowdsecurity/http-sensitive-files - events: 5	Web App Attack Hacking
🇩🇪 macrob	2026-02-23 19:56:15 (4 months ago)	2026/02/23 19:56:10 [error] 1854293#1854293: 32240584 access forbidden by rule, client: 2.58.56.103 ... show more 2026/02/23 19:56:10 [error] 1854293#1854293: 32240584 access forbidden by rule, client: 2.58.56.103, server: fn.binixo.es, request: "GET /.env HTTP/1.1", host: "172.104.245.160" 2026/02/23 19:56:12 [error] 1854293#1854293: 32240584 access forbidden by rule, client: 2.58.56.103, server: fn.binixo.es, request: "GET /.env.save HTTP/1.1", host: "172.104.245.160" 2026/02/23 19:56:14 [error] 1854293#1854293: 32240584 access forbidden by rule, client: 2.58.56.103, server: fn.binixo.es, request: "GET /.env.backup HTTP/1.1", host: "172.104.245.160" ... show less	Web App Attack
🇺🇸 LotPhantom	2026-02-23 17:12:31 (4 months ago)	2026-02-23T17:12:29.259460+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-02-23T17:12:29.259460+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=2.58.56.103 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=59257 PROTO=TCP SPT=46748 DPT=5000 WINDOW=1024 RES=0x00 SYN URGP=0 2026-02-23T17:12:30.572197+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=2.58.56.103 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=50822 PROTO=TCP SPT=46748 DPT=8000 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇩🇪 Hary74656	2026-02-23 12:22:28 (4 months ago)	[Mon Feb 23 13:22:23.389298 2026] [security2:error] [pid 85540:tid 85659] [client 2.58.56.103:34230] ... show more [Mon Feb 23 13:22:23.389298 2026] [security2:error] [pid 85540:tid 85659] [client 2.58.56.103:34230] [client 2.58.56.103] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "78.46.107.184"] [uri "/.env"] [unique_id "aZxGfylZlz9tbvLY7i-hAAAAAsw"] [Mon Feb 23 13:22:24.205139 2026] [security2:error] [pid 85540:tid 85658] [client 2.58.56.103:34230] [client 2.58.56.103] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rule ... show less	Web App Attack
🇺🇸 technash	2026-02-23 08:22:00 (4 months ago)	HTTP scanning and/or Web app attack detection [ModSecurity/Sentinel]. Redirected traffic to decoy.	Web App Attack

Showing 1 to 15 of 213 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.110

🇮🇳 122.168.194.41

🇨🇦 85.217.149.52

🇺🇸 71.6.134.237

🇩🇪 69.5.169.60

🇮🇳 2400:6180:100:d0:0:1:4774:e001

🇩🇪 213.209.159.241

🇦🇴 193.163.125.167

🇺🇸 146.190.146.101

🇫🇷 95.111.235.66

🇫🇷 95.111.235.6

🇳🇱 89.248.168.36

🇳🇱 89.21.67.136

🇳🇱 45.148.10.147

🇳🇱 45.148.10.62

🇺🇸 20.168.127.148

🇺🇸 2607:f8b0:4004:1007::125

🇨🇳 218.66.32.34

🇲🇽 189.146.48.113

🇦🇺 185.243.108.150