JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.57.122.215

2.57.122.215 was found in our database!

This IP was reported 1,645 times. Confidence of Abuse is 0%: ?

ISP	TECHOFF SRV LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS47890
Domain Name	dmzhost.co
Country	🇷🇴 Romania
City	Timisoara, Timis County

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.57.122.215

Whois 2.57.122.215

IP Abuse Reports for 2.57.122.215:

This IP address has been reported a total of 1,645 times from 428 distinct sources. 2.57.122.215 was first reported on December 8th 2020, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-06-30 09:55:20 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇳🇱 Linuxmalwarehuntingnl	2024-06-28 22:49:44 (2 years ago)	Honeypot HIT	Brute-Force
🇳🇱 Study Bitcoin 🤗	2024-06-20 08:51:36 (2 years ago)	Fail2Ban62	Brute-Force
🇦🇺 MAGIC	2024-06-19 04:11:46 (2 years ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2024-06-18 07:46:01 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 2.57.122.215 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 2.57.122.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 18 03:45:53.732043 2024] [security2:error] [pid 15461] [client 2.57.122.215:57610] [client 2.57.122.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "olaingram.com"] [uri "/wp-config.php.uk"] [unique_id "ZnE7MWLmCAR6bjbWG2zSWgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2024-06-18 06:02:47 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-06-18 01:26:43 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 2.57.122.215 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 2.57.122.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 17 21:26:39.081320 2024] [security2:error] [pid 19328] [client 2.57.122.215:34496] [client 2.57.122.215] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|postranecky.eu\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "postranecky.eu"] [uri "/daily.sql"] [unique_id "ZnDiT_3pM2e9AN5U-IbqkwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 NxtGenIT	2024-06-17 12:28:11 (2 years ago)	2.57.122.215 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ... show more 2.57.122.215 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇨🇿 lp	2024-06-12 04:53:20 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 2.57.122.215 2024-06-12T06:37:03+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 2.57.122.215 2024-06-12T06:37:03+02:00 vpn Access-Reject 'officemgr' station: 2.57.122.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 lp	2024-06-11 04:53:20 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 2.57.122.215 2024-06-11T03:52:29+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 2.57.122.215 2024-06-11T03:52:29+02:00 vpn Access-Reject 'cloud' station: 2.57.122.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇩🇪 NxtGenIT	2024-06-09 08:48:07 (2 years ago)	2.57.122.215 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ... show more 2.57.122.215 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt show less	Brute-Force
🇨🇿 lp	2024-06-09 01:52:12 (2 years ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 2.57.122.215 2024-06-09T03:46:21+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 2.57.122.215 2024-06-09T03:46:21+02:00 vpn Access-Reject 'neil' station: 2.57.122.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2024-06-07 08:59:03 (2 years ago)	Looking for CMS/PHP/SQL vulnerablilities - 13	Exploited Host Web App Attack
Anonymous	2024-06-06 02:15:00 (2 years ago)	"Scanning for multiple vulnerable file extensions and wp-login.php xmlrpc.php"	Web App Attack
🇲🇾 Rizzy	2024-06-05 08:08:39 (2 years ago)	Multiple WAF Violations	Brute-Force Web App Attack

Showing 1 to 15 of 1645 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 240b:4005:25:5600:9be0:5941:a0b2:e493

🇪🇹 196.188.187.205

🇨🇳 175.178.184.121

🇺🇸 144.172.91.236

🇨🇳 112.47.86.141

🇷🇴 92.118.39.49

🇰🇬 89.237.200.28

🇲🇾 49.125.201.89

🇺🇸 45.55.156.226

🇩🇴 190.110.34.116

🇮🇩 182.253.122.71

🇨🇳 121.229.156.111

🇳🇱 91.92.47.90

🇳🇱 80.82.77.75

🇺🇸 47.251.173.207

🇧🇷 45.164.245.23

🇮🇳 218.248.19.102

🇺🇸 216.26.228.143

🇺🇸 184.105.247.230

🇺🇸 172.202.9.120