JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 87.58.199.134

87.58.199.134 was found in our database!

This IP was reported 83 times. Confidence of Abuse is 100%: ?

100%

ISP	DEDIK SERVICES LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS18450
Domain Name	dedik.io
Country	🇺🇸 United States of America
City	Ogden, Utah

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 87.58.199.134

Whois 87.58.199.134

IP Abuse Reports for 87.58.199.134:

This IP address has been reported a total of 83 times from 69 distinct sources. 87.58.199.134 was first reported on August 22nd 2026, and the most recent report was 12 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SwinT	2026-08-23 09:00:06 (12 minutes ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-08-23 08:44:41 (28 minutes ago)	denied traffic to a honeypot network. destination port 80.	Port Scan Hacking
🇩🇪 kkeyser	2026-08-23 08:28:58 (43 minutes ago)	GET /.env.production.local HTTP/1.1	Web App Attack
🇵🇱 Budyn	2026-08-23 07:41:17 (1 hour ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: 51.83.237.XX \| URI: /.git/index \| UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇱🇻 garmtech.com	2026-08-23 07:35:03 (1 hour ago)	Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ... show more Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 SANYALnet Labs	2026-08-23 07:12:37 (2 hours ago)	Aug 23 07:12:36 hecnet-us-east-gw lighttpd[1017]: 87.58.199.134 150.136.5.129 - [23/Aug/2026:07:12:3 ... show more Aug 23 07:12:36 hecnet-us-east-gw lighttpd[1017]: 87.58.199.134 150.136.5.129 - [23/Aug/2026:07:12:36 +0000] "GET /config/app.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" Aug 23 07:12:36 hecnet-us-east-gw lighttpd[1017]: 87.58.199.134 150.136.5.129 - [23/Aug/2026:07:12:36 +0000] "GET /config/database.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" Aug 23 07:12:36 hecnet-us-east-gw lighttpd[1017]: 87.58.199.134 150.136.5.129 - [23/Aug/2026:07:12:36 +0000] "GET /settings.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" Aug 23 07:12:36 hecnet-us-east-gw lighttpd[1017]: 87.58.199.134 150.136.5.129 - [23/Aug/2026:07:12:36 +0000] "GET /config.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" Aug 23 07:12:36 hecnet-us-east-gw lighttpd[1017]: 87.58.199.134 150.136.5.129 - [23/Aug/2026: ... show less	Brute-Force
🇺🇸 Mainpine	2026-08-23 06:31:23 (2 hours ago)	probing for vulnerable web apps	Web App Attack
🇸🇪 sweplox.se	2026-08-23 05:36:43 (3 hours ago)	Ip 87.58.199.134 performed 'crowdsecurity/http-sensitive-files' (5 events over 10.66342ms) at 2026-0 ... show more Ip 87.58.199.134 performed 'crowdsecurity/http-sensitive-files' (5 events over 10.66342ms) at 2026-08-23 05:36:41.976170812 +0000 UTC show less	Hacking
Anonymous	2026-08-23 04:56:27 (4 hours ago)	[23/Aug/2026:07:56:26 +0300] 178746098643.926446 87.58.199.134 17492 148.251.76.218 443 [23/Aug/2026 ... show more [23/Aug/2026:07:56:26 +0300] 178746098643.926446 87.58.199.134 17492 148.251.76.218 443 [23/Aug/2026:07:56:26 +0300] 178746098651.688132 87.58.199.134 17588 148.251.76.218 443 show less	Web App Attack
🇪🇸 Francisco Vallejo	2026-08-23 04:49:57 (4 hours ago)	[Sun Aug 23 06:49:56.992126 2026] [core:info] [pid 2932589:tid 134967434655424] [client 87.58.199.13 ... show more [Sun Aug 23 06:49:56.992126 2026] [core:info] [pid 2932589:tid 134967434655424] [client 87.58.199.134:44186] AH00128: File does not exist: /var/www/franvallejo/settings.php [Sun Aug 23 06:49:56.993164 2026] [core:info] [pid 2932589:tid 134967846209216] [client 87.58.199.134:44170] AH00128: File does not exist: /var/www/franvallejo/wp-config.php.bak [Sun Aug 23 06:49:56.997316 2026] [core:info] [pid 2932590:tid 134966486738624] [client 87.58.199.134:44234] AH00128: File does not exist: /var/www/franvallejo/.aws/credentials [Sun Aug 23 06:49:56.999735 2026] [core:info] [pid 2932589:tid 134967837816512] [client 87.58.199.134:44248] AH00128: File does not exist: /var/www/franvallejo/wp-config.old [Sun Aug 23 06:49:56.999925 2026] [core:info] [pid 3008931:tid 134967434655424] [client 87.58.199.134:44252] AH00128: File does not exist: /var/www/franvallejo/config/app.php ... show less	Brute-Force SSH
🇩🇪 maxpower	2026-08-23 04:49:53 (4 hours ago)	(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 87.58.199.134 (US/United States/-): 3 in the l ... show more (nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 87.58.199.134 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/23 06:49:51 [error] 236850#236850: 2752953 access forbidden by rule, client: 87.58.199.134, server: archabi.it, request: "GET /wp-config.php.save HTTP/1.1", host: "51.77.95.119" 2026/08/23 06:49:51 [error] 236854#236854: 2752954 access forbidden by rule, client: 87.58.199.134, server: archabi.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "51.77.95.119" 2026/08/23 06:49:51 [error] 236850#236850: 2752959 access forbidden by rule, client: 87.58.199.134, server: archabi.it, request: "GET /wp-config.php HTTP/1.1", host: "51.77.95.119" show less	Port Scan
🇹🇭 Sawasdee	2026-08-23 03:45:10 (5 hours ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇨🇭 m_vlasov	2026-08-23 03:00:54 (6 hours ago)	SSH/Telnet honeypot: 0 login attempts, 0 sessions, 0 shell commands.	Hacking
Anonymous	2026-08-23 02:46:40 (6 hours ago)	87.58.199.134 - - [22/Aug/2026:23:46:40 -0300] "GET /.git/config HTTP/1.1" Dest:Port 443 HTTP_Status ... show more 87.58.199.134 - - [22/Aug/2026:23:46:40 -0300] "GET /.git/config HTTP/1.1" Dest:Port 443 HTTP_Status: 403 ... show less	Web App Attack
🇩🇪 Progetto1	2026-08-23 02:20:02 (6 hours ago)	Detected via HAProxyScanner at 2026-08-23 02:20:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-08-23 02:20:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 171.114.225.44

🇵🇱 104.238.0.4

🇫🇷 216.128.23.210

🇷🇴 193.32.162.84

🇮🇩 179.65.207.196

🇺🇸 173.239.240.15

🇹🇭 165.154.120.89

🇻🇳 163.227.231.8

🇩🇪 157.230.18.133

🇫🇮 147.185.133.106

🇷🇺 85.93.45.33

🇩🇪 81.169.255.237

🇺🇸 66.132.186.227

🇺🇸 43.166.245.172

🇺🇸 20.169.16.7

🇺🇸 20.114.196.91

🇫🇷 2001:41d0:33a:a00::40c

🇬🇧 185.216.145.182

🇲🇾 183.171.49.161

🇵🇱 176.104.115.74