AbuseIPDB » 5.255.115.58

5.255.115.58 was found in our database!

This IP was reported 790 times. Confidence of Abuse is 85%: ?

85%

This address is a Tor exit node. Neither the owner nor the provider are directly behind the offending action.

ISP	The Infrastructure Group B.V.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS60404
Domain Name	theinfrastructure.group
Country	Netherlands
City	Dronten, Flevoland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 5.255.115.58

Whois 5.255.115.58

IP Abuse Reports for 5.255.115.58:

This IP address has been reported a total of 790 times from 184 distinct sources. 5.255.115.58 was first reported on July 10th 2023, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
deskpass.com	2025-03-24 23:11:24 (10 hours ago)	GET /sites/all/libraries/elfinder/connectors/php/connector.php	Web App Attack
TPI-Abuse	2025-03-24 14:36:26 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 5.255.115.58 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210492) triggered by 5.255.115.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 24 10:36:20.568487 2025] [security2:error] [pid 3131428:tid 3131428] [client 5.255.115.58:47744] [client 5.255.115.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misterflores.com"] [uri "/wp-config.php_old2019"] [unique_id "Z-Ft5MHTQyYzQZLJgKXw5gAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-03-23 16:00:00 (1 day ago)	Fail2ban block	Brute-Force
Kreapptivo	2025-03-23 05:05:10 (2 days ago)	[23/Mar/2025:06:05:08 +0100] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (Windows NT ... show more[23/Mar/2025:06:05:08 +0100] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" show less	Bad Web Bot Web App Attack
Psycho Solutions LLC	2025-03-22 15:05:28 (2 days ago)	Detected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N ... show moreDetected Wordpress Scanning. - Request Method: GET - Target: {PC} wp-login.php - User Agent: N/A - Timestamp: 3/22/2025 3:05 pm (UTC-6) show less	Web Spam Hacking Bad Web Bot Web App Attack
oncord	2025-03-19 22:13:45 (5 days ago)	Form spam	Web Spam
Anonymous	2025-03-19 01:28:16 (6 days ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
oncord	2025-03-18 00:52:35 (1 week ago)	Form spam	Web Spam
Packets-Decreaser.NET	2025-03-17 22:45:26 (1 week ago)	Incoming Layer 7 Flood Detected	DDoS Attack Web Spam
librebit	2025-03-16 09:05:23 (1 week ago)	Brute force	Brute-Force
TPI-Abuse	2025-03-16 05:00:40 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 5.255.115.58 (-): 1 in the last 300 secs; Ports ... show more(mod_security) mod_security (id:210730) triggered by 5.255.115.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 16 01:00:35.038437 2025] [security2:error] [pid 4749:tid 4749] [client 5.255.115.58:52178] [client 5.255.115.58] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|oruhu.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oruhu.org"] [uri "/oruhu.sql"] [unique_id "Z9Za85uXVCJJzNKE5J-BAAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
dynamix	2025-03-15 08:25:05 (1 week ago)	Multiple WAF Violations	Web App Attack
oncord	2025-03-14 16:42:03 (1 week ago)	Form spam	Web Spam
librebit	2025-03-13 07:45:06 (1 week ago)	Brute force	Brute-Force
b4shnhawx	2025-03-12 08:26:47 (1 week ago)	1741768007 - 03/12/2025 08:26:47 Host: 5.255.115.58/5.255.115.58 Port: 443 TCP Blocked ...	Bad Web Bot Web App Attack