This IP address has been reported a total of
2,380
times from
450 distinct
sources.
2.58.56.222 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
NOQUEUE - IP: 2.58.56.222 - May 25 17:22:26 plesk postfix/smtpd[1383766]: NOQUEUE: reject: RCPT fro ...
show moreNOQUEUE - IP: 2.58.56.222 - May 25 17:22:26 plesk postfix/smtpd[1383766]: NOQUEUE: reject: RCPT from unknown[2.58.56.222]: 554 5.7.1 Service unavailable; Client host [2.58.56.222] blocked using dnsbl-2.uceprotect.net; Net 2.58.56.0/24 is UCEPROTECT-Level2 listed because 6 impacts are seen from SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK, DE/AS210558 there. See: http://www.uceprotect.net/rblcheck.php?ipr=2.58.56.222; from=<> to=<REDACTED@REDACTED> proto=SMTP helo=<mail.aranthes.ch>
show less
NOQUEUE - IP: 2.58.56.222 - Mar 5 15:33:09 plesk postfix/smtpd[842908]: NOQUEUE: reject: RCPT from ...
show moreNOQUEUE - IP: 2.58.56.222 - Mar 5 15:33:09 plesk postfix/smtpd[842908]: NOQUEUE: reject: RCPT from unknown[2.58.56.222]: 554 5.7.1 Service unavailable; Client host [2.58.56.222] blocked using dnsbl-2.uceprotect.net; Net 2.58.56.0/24 is UCEPROTECT-Level2 listed because 15 impacts are seen from SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK, DE/AS210558 there. See: http://www.uceprotect.net/rblcheck.php?ipr=2.58.56.222; from=<> to=<REDACTED@REDACTED> proto=SMTP helo=<mail.aranthes.ch>
show less
NOQUEUE - IP: 2.58.56.222 - Feb 26 08:24:20 plesk postfix/smtpd[4086681]: NOQUEUE: reject: RCPT fro ...
show moreNOQUEUE - IP: 2.58.56.222 - Feb 26 08:24:20 plesk postfix/smtpd[4086681]: NOQUEUE: reject: RCPT from unknown[2.58.56.222]: 554 5.7.1 Service unavailable; Client host [2.58.56.222] blocked using dnsbl-2.uceprotect.net; Net 2.58.56.0/24 is UCEPROTECT-Level2 listed because 29 impacts are seen from SERVICES-1337-GMBH 1337-SERVICES-GMBH-NETWORK, DE/AS210558 there. See: http://www.uceprotect.net/rblcheck.php?ipr=2.58.56.222; from=<> to=<REDACTED@REDACTED> proto=SMTP helo=<mail.aranthes.ch>
show less
ban-reviewer auto report; ip=2.58.56.222; scenario=http:scan; verdict=valid_ban; confidence=0.85; ca ...
show moreban-reviewer auto report; ip=2.58.56.222; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14,15,18; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for HTTP scanning activity (scenario: http:scan); Decision was placed within a short time window (less than 3 days ago); IP has no active decisions in the lookback window, but is part of a known abuse pattern
show less
DDoS attack + email spoofing + phishing + malware delivery targeting SMTP mail server (TCP/25). Mult ...
show moreDDoS attack + email spoofing + phishing + malware delivery targeting SMTP mail server (TCP/25). Multiple connection attempts detected. Detected on 2026-02-19, Buenos Aires, Argentina.
show less
DDoS Attack
Open Proxy
Email Spam
Port Scan
Brute-Force
Anonymous
Portscan: TCP/2095 (3x), TCP/2096 (3x)
Port Scan
Anonymous
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 ...
show moreHttp Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
show less
Web App Attack
Anonymous
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 ...
show moreHttp Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
show less