JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.58.56.12

2.58.56.12 was found in our database!

This IP was reported 542 times. Confidence of Abuse is 46%: ?

46%

ISP	1337 Services GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS210558
Hostname(s)	tor-exit-2-58-56-12.clients.rdp.sh
Domain Name	as210558.net
Country	🇳🇱 Netherlands
City	Amsterdam, North Holland

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.58.56.12

Whois 2.58.56.12

IP Abuse Reports for 2.58.56.12:

This IP address has been reported a total of 542 times from 218 distinct sources. 2.58.56.12 was first reported on July 29th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-12 19:47:53 (1 month ago)	$f2bV_matches	Brute-Force
🇬🇧 openstrike.co.uk	2026-07-08 05:15:39 (1 month ago)	4 attacks on Alfa URLs, PHP URLs: POST /alfacgiapi/perl.alfa HTTP/1.1 POST /wp-plain.php HTTP/1.1	Hacking Web App Attack
🇫🇷 SpaceHost-Server	2026-07-07 22:31:28 (1 month ago)		Brute-Force Web App Attack
🇩🇪 itsolon	2026-07-07 12:58:37 (1 month ago)	[07/Jul/2026:14:58:35 +0200] 178342911567.703162 2.58.56.12 0 217.154.7.177 443 [07/Jul/2026:14:58:3 ... show more [07/Jul/2026:14:58:35 +0200] 178342911567.703162 2.58.56.12 0 217.154.7.177 443 [07/Jul/2026:14:58:34 +0200] 178342911458.924919 2.58.56.12 0 217.154.7.177 443 [07/Jul/2026:14:58:35 +0200] 178342911530.877108 2.58.56.12 0 217.154.7.177 443 [07/Jul/2026:14:58:34 +0200] 17834291143.459097 2.58.56.12 0 217.154.7.177 443 [07/Jul/2026:14:58:35 +0200] 178342911523.666043 2.58.56.12 0 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇬🇧 Mendip_Defender	2026-07-07 12:05:57 (1 month ago)	2.58.56.12 - - [07/Jul/2026:13:05:47 +0100] "POST /wp-plain.php HTTP/1.1" 301 162 "www.google.com" " ... show more 2.58.56.12 - - [07/Jul/2026:13:05:47 +0100] "POST /wp-plain.php HTTP/1.1" 301 162 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.12 - - [07/Jul/2026:13:05:47 +0100] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 2.58.56.12 - - [07/Jul/2026:13:05:47 +0100] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" ... show less	Hacking Web App Attack
🇧🇪 madeit	2026-07-07 09:15:22 (1 month ago)		Web App Attack
🇩🇪 maxpower	2026-07-07 09:04:08 (1 month ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 2.58.56.12 (tor-exit-2-58-56-12.clients.rdp.sh): 2 ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 2.58.56.12 (tor-exit-2-58-56-12.clients.rdp.sh): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2.58.56.12 - - [07/Jul/2026:11:04:05 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 301 0 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "2.58.56.12" host=francescadandrea.com 2.58.56.12 - - [07/Jul/2026:11:04:05 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 8258 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "2.58.56.12" host=www.francescadandrea.com show less	Port Scan
Anonymous	2026-07-07 08:10:53 (1 month ago)	Automated report (2026-07-07T08:10:53+00:00). User agent cited by various attack tools, rootkits, ba ... show more Automated report (2026-07-07T08:10:53+00:00). User agent cited by various attack tools, rootkits, backdoors, webshells, and malware detected. show less	Hacking Bad Web Bot Exploited Host Web App Attack Open Proxy
🇩🇪 maxpower	2026-07-07 08:08:24 (1 month ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 2.58.56.12 (tor-exit-2-58-56-12.clients.rdp.sh): 2 ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 2.58.56.12 (tor-exit-2-58-56-12.clients.rdp.sh): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2.58.56.12 - - [07/Jul/2026:10:08:13 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 17492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "2.58.56.12" host=olscitaly.com 2.58.56.12 - - [07/Jul/2026:10:08:21 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 17492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "2.58.56.12" host=olscitaly.com show less	Port Scan
🇩🇪 macrob	2026-07-07 07:56:57 (1 month ago)	2026/07/07 07:56:55 [error] 1963208#1963208: 357161374 access forbidden by rule, client: 2.58.56.12 ... show more 2026/07/07 07:56:55 [error] 1963208#1963208: 357161374 access forbidden by rule, client: 2.58.56.12, server: binixo.com.ar, request: "GET /wp-content/plugins/fix/up.php HTTP/2.0", host: "binixo.com.ar" 2026/07/07 07:56:55 [error] 1963209#1963209: 357161375 access forbidden by rule, client: 2.58.56.12, server: binixo.com.ar, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.com.ar", referrer: "www.google.com" 2026/07/07 07:56:55 [error] 1963208#1963208: 357161377 access forbidden by rule, client: 2.58.56.12, server: binixo.com.ar, request: "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0", host: "binixo.com.ar", referrer: "www.google.com" ... show less	Web App Attack
🇺🇸 gu-alvareza	2026-07-07 07:05:33 (1 month ago)	ALFA.TEaM.Web.Shell	Hacking
🇩🇪 maxpower	2026-07-07 06:59:24 (1 month ago)	(backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 2.58.56.12 (tor-exit-2-58-56-12.clients.rdp.sh): 2 ... show more (backdoor_scan) REGOLA 7 - Backdoor Scan Attempt 2.58.56.12 (tor-exit-2-58-56-12.clients.rdp.sh): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2.58.56.12 - - [07/Jul/2026:08:59:16 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 13349 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "2.58.56.12" host=centrolarca.eu 2.58.56.12 - - [07/Jul/2026:08:59:16 +0200] "GET /wp-content/themes/seotheme/db.php?u HTTP/2.0" 404 13349 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "2.58.56.12" host=centrolarca.eu show less	Port Scan
🇫🇷 dynamix	2026-07-07 06:59:00 (1 month ago)	Multiple WAF Violations	Web App Attack
🇺🇸 ph	2026-07-07 06:36:13 (1 month ago)	Bad web bot attempting to run wp-content on non-WP site	Hacking Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-07-06 22:29:11 (1 month ago)		Brute-Force Web App Attack

Showing 1 to 15 of 542 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:4004:1002::12d

🇨🇳 218.25.89.208

🇺🇸 209.113.245.46

🇸🇬 118.139.164.171

🇸🇬 94.231.206.255

🇱🇹 91.224.92.17

🇫🇮 89.167.26.109

🇺🇸 66.249.70.132

🇨🇳 42.100.56.49

🇱🇹 213.176.26.186

🇧🇷 201.71.192.108

🇺🇸 192.236.214.139

🇺🇸 165.154.162.227

🇺🇸 107.150.105.10

🇱🇹 91.224.92.92

🇷🇺 91.219.57.38

🇨🇦 85.217.149.50

🇧🇬 79.124.56.146

🇵🇱 20.215.251.225

🇺🇸 2607:f8b0:4004:1000::127