JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.58.56.69

2.58.56.69 was found in our database!

This IP was reported 77 times. Confidence of Abuse is 100%: ?

100%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	2.58.56.69.powered.by
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.58.56.69

Whois 2.58.56.69

IP Abuse Reports for 2.58.56.69:

This IP address has been reported a total of 77 times from 58 distinct sources. 2.58.56.69 was first reported on February 14th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 tye	2026-09-17 07:11:39 (1 hour ago)	Wazuh Alert Evidence: 2.58.56.69 (2.58.56.69) - - [17/Sep/2026:15:11:37 +0800] "POST /index.php HTTP ... show more Wazuh Alert Evidence: 2.58.56.69 (2.58.56.69) - - [17/Sep/2026:15:11:37 +0800] "POST /index.php HTTP/1.1" 404 466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" show less	Web App Attack
🇫🇮 paissangroup	2026-09-17 00:30:06 (7 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇦 Scientific Route	2026-09-16 20:34:39 (11 hours ago)	2.58.56.69 - - [16/Sep/2026:23:34:37 +0300] "GET /.env.old HTTP/1.1" 404 437 "-" "-" 2.58.56.69 - - ... show more 2.58.56.69 - - [16/Sep/2026:23:34:37 +0300] "GET /.env.old HTTP/1.1" 404 437 "-" "-" 2.58.56.69 - - [16/Sep/2026:23:34:37 +0300] "GET /.env HTTP/1.1" 404 437 "-" "-" ... show less	Web App Attack
🇩🇪 usc-IPDB	2026-09-16 18:22:20 (14 hours ago)	2.58.56.69 - - [16/Sep/2026:20:22:19 +0200] "GET /wp-content/plugins/site-editor/editor/extensions/p ... show more 2.58.56.69 - - [16/Sep/2026:20:22:19 +0200] "GET /wp-content/plugins/site-editor/editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php?ajax_path=/etc/passwd HTTP/1.1" 200 2432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 2.58.56.69 - - [16/Sep/2026:20:22:19 +0200] "GET /wp-content/plugins/wp-migration-duplicator/includes/download.php?file=../../../wp-config.php HTTP/1.1" 200 2432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" 2.58.56.69 - - [16/Sep/2026:20:22:20 +0200] "GET /wp-content/plugins/wp-file-manager/lib/files/pentest_proof_145844.php HTTP/1.1" 200 2432 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" ... show less	Port Scan
🇩🇪 PBC	2026-09-16 14:46:22 (17 hours ago)	Automated exploit scan blocked by fail2ban	Brute-Force SSH
Anonymous	2026-09-16 02:18:26 (1 day ago)	Portscan: TCP/80 (4x), TCP/443 (9x)	Port Scan
🇮🇳 evicky2002	2026-09-16 00:02:04 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 Alt255	2026-09-15 23:03:16 (1 day ago)	[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 2.58.56.69 - - [16/Sep/2026:01:03:15 +0200] "GET /.env HTTP/1.1" 404 2050 "-" "-" ... show less	Bad Web Bot Web App Attack
🇩🇪 ManagedStack	2026-09-15 13:45:02 (1 day ago)	Probing access to unauthorized locations	Hacking Exploited Host Web App Attack
Anonymous	2026-09-15 13:18:45 (1 day ago)	2.58.56.69 - - [15/Sep/2026:15:18:44 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0 ... show more 2.58.56.69 - - [15/Sep/2026:15:18:44 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2.58.56.69 - - [15/Sep/2026:15:18:45 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇪🇪 Tsumugi Kotobuki	2026-09-15 09:51:59 (1 day ago)	Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 120 \| Len: 52B \| Win: ... show more Port Scan on Honeypot \| Ports: 80/HTTP \| Proto: TCP(1) \| Flags: all SYN \| TTL: 120 \| Len: 52B \| Win: 65535(1) \| rDNS: 2.58.56.69.powered.by \| F2B/ufw-honeypot@2026-09-15T09:51:59Z show less	Port Scan Hacking
Anonymous	2026-09-15 07:06:37 (2 days ago)		DNS Compromise DDoS Attack
🇦🇺 FEWA	2026-09-15 06:30:16 (2 days ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
🇨🇦 smithoo4	2026-09-15 05:11:50 (2 days ago)	2.58.56.69 - - [15/Sep/2026:01:11:49 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0 ... show more 2.58.56.69 - - [15/Sep/2026:01:11:49 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2.58.56.69 - - [15/Sep/2026:01:11:49 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot
🇦🇺 Starburst SysOp Team	2026-09-15 04:01:07 (2 days ago)	Host header is a numeric IP address. Pattern match "(?:^( (920350-syd2-4)	Hacking Bad Web Bot

Showing 1 to 15 of 77 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:c84::1df

🇫🇮 185.204.1.224

🇧🇩 163.61.138.132

🇨🇳 117.70.49.96

🇧🇩 103.69.161.76

🇷🇺 94.41.131.52

🇺🇸 64.202.191.109

🇺🇸 40.119.44.142

🇦🇪 5.107.245.132

🇺🇿 213.230.87.39

🇺🇸 195.63.5.225

🇸🇪 89.37.63.215

🇬🇧 35.203.210.64

🇺🇸 34.48.138.62

🇬🇧 31.14.254.34

🇨🇦 16.54.21.240

🇬🇧 5.226.140.119

🇵🇰 223.123.16.229

🇳🇱 195.178.110.30

🇪🇨 181.113.114.61