JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 69.12.64.58

69.12.64.58 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 100%: ?

100%

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 69.12.64.58

Whois 69.12.64.58

IP Abuse Reports for 69.12.64.58:

This IP address has been reported a total of 92 times from 67 distinct sources. 69.12.64.58 was first reported on July 11th 2026, and the most recent report was 58 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 auridh	2026-07-14 23:52:45 (58 minutes ago)	Ip 69.12.64.58 performed 'crowdsecurity/http-sensitive-files' (5 events over 6.429939ms) at 2026-07- ... show more Ip 69.12.64.58 performed 'crowdsecurity/http-sensitive-files' (5 events over 6.429939ms) at 2026-07-14 22:23:05.936576657 +0000 UTC show less	Web App Attack
🇩🇪 auridh	2026-07-14 22:51:33 (1 hour ago)	Ip 69.12.64.58 performed 'crowdsecurity/http-probing' (11 events over 10.483313ms) at 2026-07-14 22: ... show more Ip 69.12.64.58 performed 'crowdsecurity/http-probing' (11 events over 10.483313ms) at 2026-07-14 22:23:05.938678188 +0000 UTC show less	Web App Attack
🇫🇷 SpaceHost-Server	2026-07-14 22:30:35 (2 hours ago)		Brute-Force Web App Attack
🇩🇪 auridh	2026-07-14 21:50:41 (3 hours ago)	Ip 69.12.64.58 performed 'crowdsecurity/appsec-vpatch' (2 events over 213.313684ms) at 2026-07-14 19 ... show more Ip 69.12.64.58 performed 'crowdsecurity/appsec-vpatch' (2 events over 213.313684ms) at 2026-07-14 19:19:13.336264865 +0000 UTC show less	Web App Attack
🇩🇪 auridh	2026-07-14 20:49:19 (4 hours ago)	WAF block: crowdsecurity/vpatch-git-config from 69.12.64.58 ([REDACTED])	Web App Attack
🇩🇪 auridh	2026-07-14 19:45:02 (5 hours ago)	Ip 69.12.64.58 performed 'crowdsecurity/http-bad-user-agent' (2 events over 21.248976285s) at 2026-0 ... show more Ip 69.12.64.58 performed 'crowdsecurity/http-bad-user-agent' (2 events over 21.248976285s) at 2026-07-14 19:19:34.374145586 +0000 UTC show less	Bad Web Bot Web App Attack
🇩🇪 Dominik Lysiak	2026-07-14 19:17:33 (5 hours ago)	69.12.64.58 - - [14/Jul/2026:21:17:32 +0200] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebK ... show more 69.12.64.58 - - [14/Jul/2026:21:17:32 +0200] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 69.12.64.58 - - [14/Jul/2026:21:17:32 +0200] "GET /.env.local HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 69.12.64.58 - - [14/Jul/2026:21:17:32 +0200] "GET /.env.production HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" ... show less	Web App Attack
🇬🇧 consul.to	2026-07-14 18:27:13 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 brightenfield	2026-07-14 18:06:26 (6 hours ago)	Web App Attack	Web App Attack
🇺🇸 ruusvuu	2026-07-14 16:53:29 (7 hours ago)	Automated abuse report: 15 attack/probe requests from HostPapa / US. Targeted paths: /.env, /actuato ... show more Automated abuse report: 15 attack/probe requests from HostPapa / US. Targeted paths: /.env, /actuator/env, /.env.local, /secrets.json, /config.json. Sample log lines: [mirresolve] 2026-07-14 09:53:29: 69.12.64.58 - GET /.env.local HTTP/1.1 404 21 - 0.696 ms [mir-org] [7/14/2026, 9:53:29 AM] GET .mirregistry.org/src/.git/HEAD 404 69.12.64.58 - 2.999 ms [mirresolve] 2026-07-14 09:53:29: 69.12.64.58 - GET /.env.production HTTP/1.1 404 21 - 0.520 ms Detected by an automated web-server log monitor. show less	Web App Attack
🇺🇸 CBJ	2026-07-14 15:17:51 (9 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇺🇸 Major Hostility	2026-07-14 15:10:23 (9 hours ago)	"GET /api/env HTTP/1.1" 404 "GET /.env.bak HTTP/1.1" 404 "GET /.env.production HTTP/1.1" 404 "GET /. ... show more "GET /api/env HTTP/1.1" 404 "GET /.env.bak HTTP/1.1" 404 "GET /.env.production HTTP/1.1" 404 "GET /.env HTTP/1.1" 404 "GET /config.json HTTP/1.1" 404 show less	Web App Attack
🇩🇪 macrob	2026-07-14 15:03:40 (9 hours ago)	2026/07/14 15:03:38 [error] 3428135#3428135: 375941430 access forbidden by rule, client: 69.12.64.5 ... show more 2026/07/14 15:03:38 [error] 3428135#3428135: 375941430 access forbidden by rule, client: 69.12.64.58, server: fn.binixo.es, request: "GET /.env.production HTTP/2.0", host: "mercato.wellbin.org" 2026/07/14 15:03:38 [error] 3428135#3428135: 375941430 access forbidden by rule, client: 69.12.64.58, server: fn.binixo.es, request: "GET /.env.local HTTP/2.0", host: "mercato.wellbin.org" 2026/07/14 15:03:38 [error] 3428135#3428135: 375941434 access forbidden by rule, client: 69.12.64.58, server: fn.binixo.es, request: "GET /.env.development HTTP/2.0", host: "mercato.wellbin.org" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-07-14 14:16:31 (10 hours ago)	Multiple unauthorized connection attempts	Web App Attack
Anonymous	2026-07-14 14:14:30 (10 hours ago)	(caddyscan) Scanner path probe from 69.12.64.58 (US/United States/-): 5 in the last 3600 secs; Ports ... show more (caddyscan) Scanner path probe from 69.12.64.58 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 69.12.64.58 - - [14/Jul/2026:14:14:25 +0000] "GET /.env HTTP/1.1" [REDACTED] 200 2627 69.12.64.58 - - [14/Jul/2026:14:14:25 +0000] "GET /.env.production HTTP/1.1" [REDACTED] 200 2627 69.12.64.58 - - [14/Jul/2026:14:14:25 +0000] "GET /.env.local HTTP/1.1" [REDACTED] 200 2627 69.12.64.58 - - [14/Jul/2026:14:14:25 +0000] "GET /.env.development HTTP/1.1" [REDACTED] 200 2627 69.12.64.58 - - [14/Jul/2026:14:14:25 +0000] "GET /.env.backup HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇩 203.26.240.133

🇵🇱 194.180.49.217

🇲🇾 183.171.7.171

🇨🇳 112.102.227.98

🇫🇷 91.231.89.90

🇺🇸 64.62.197.122

🇳🇱 45.148.10.147

🇺🇸 44.88.99.95

🇺🇸 23.239.168.42

🇫🇷 185.177.72.51

🇸🇪 176.10.203.54

🇺🇸 147.185.132.18

🇸🇬 129.212.237.153

🇨🇳 121.228.3.255

🇺🇸 91.230.168.251

🇸🇬 51.79.171.152

🇺🇸 45.194.67.29

🇳🇱 45.156.87.207

🇺🇸 44.246.253.110

🇺🇸 44.192.83.156