This IP address has been reported a total of
70
times from
60 distinct
sources.
58.240.16.12 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 14
reports;
Germany
with 13
reports;
France
with 6
reports.
The most common categories in these recent reports were:
Web App Attack
28
times;
Port Scan
27
times;
Brute-Force
18
times;
Hacking
15
times;
SSH
12
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2 attacks on shell probes:
POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65 ...
show more2 attacks on shell probes:
POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
show less
Blocked by UFW (TCP on 2222)
Source port: 42820
TTL: 52
Packet length: 40
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 2222)
Source port: 42820
TTL: 52
Packet length: 40
TOS: 0x00
This report (for 58.240.16.12) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Multiple (11) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/. ...
show moreMultiple (11) times attack on https port 443: illegal attempt to access local shell (POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh)
00:08:02 illegal attempt to access local shell (POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh)
00:08:14 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input)
00:08:17 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input)
00:08:18 Command Injection for PHP Vulnerablity CVE-2024-4577 (POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input)
00:08:21 hacking attempt (POST /test.hello?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input)
00:08:22 Hacking attempt (POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input)
00:08:23 unaut
show less
Web App Port Scaning, [Jail 90], Access Not Existent Virtual Server. (honeypot):
2026/10/12 01:08:45 ...
show moreWeb App Port Scaning, [Jail 90], Access Not Existent Virtual Server. (honeypot):
2026/10/12 01:08:45 [info] 384112#384112: *16 handshake rejected while SSL handshaking, client: 58.240.16.12, server: 0.0.0.0:443
show less
Ip 58.240.16.12 performed 'crowdsecurity/http-cve-2021-41773' (1 events over 0s) at 2026-10-11 21:19 ...
show moreIp 58.240.16.12 performed 'crowdsecurity/http-cve-2021-41773' (1 events over 0s) at 2026-10-11 21:19:04.618939507 +0000 UTC
show less
