JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.57.170.148

2.57.170.148 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 41%: ?

41%

ISP	VPN Consumer Cosenza, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇹 Italy
City	Cosenza, Calabria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.57.170.148

Whois 2.57.170.148

IP Abuse Reports for 2.57.170.148:

This IP address has been reported a total of 85 times from 47 distinct sources. 2.57.170.148 was first reported on June 20th 2023, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-04 08:35:18 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 2.57.170.148 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:949110) triggered by 2.57.170.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 04:35:13.000476 2026] [security2:error] [pid 18937:tid 18937] [client 2.57.170.148:49363] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 25)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.danchujkoassoc.com"] [uri "/main.php"] [unique_id "akjFwD7un4gvGDSxeS4tdQAAAAc"], referer: http://www.danchujkoassoc.com/main.php?where="><script >alert(String.fromCharCode(88,83,83))</script> show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Sklurk	2026-07-04 04:46:24 (3 days ago)	Web App Attack	Web App Attack
🇫🇷 masterguru	2026-07-01 03:28:21 (6 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 2.57.170.148 (IT/Italy/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 2.57.170.148 (IT/Italy/-): 1 in the last 3600 secs (0-195) show less	Hacking
🇫🇷 masterguru	2026-07-01 02:27:13 (6 days ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 2.57.170.148 (IT/Italy/-): 1 in the last 3600 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 2.57.170.148 (IT/Italy/-): 1 in the last 3600 secs (0-196) show less	Hacking
🇫🇷 Octopuce	2026-06-10 02:35:16 (3 weeks ago)	Aggressive web search of vulnerable pages: /wp-includes/ID3/about.php /wp-content/languages/404.php ... show more Aggressive web search of vulnerable pages: /wp-includes/ID3/about.php /wp-content/languages/404.php /update/403.php /default.php /wp-includes/a ... show less	Web App Attack
🇬🇧 consul.to	2026-06-10 01:51:49 (3 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 solution.it	2026-06-06 18:36:03 (1 month ago)	[Sat Jun 06 20:36:02.721821 2026] [php7:error] [pid 1644752:tid 1644752] [client 2.57.170.148:21773] ... show more [Sat Jun 06 20:36:02.721821 2026] [php7:error] [pid 1644752:tid 1644752] [client 2.57.170.148:21773] script '/var/www/html/blog.solution.it/wp-admin/css/colors/coffee/index.php' not found or unable to stat, referer: http://blog.solution.it/wp-admin/css/colors/coffee/index.php show less	Web App Attack
🇩🇪 ghostwarriors	2026-05-28 13:50:37 (1 month ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-05-28 00:17:16 (1 month ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇬🇧 consul.to	2026-05-27 21:06:25 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇬🇧 consul.to	2026-05-23 11:37:50 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 Tokolosh Hunters	2026-05-23 00:47:59 (1 month ago)	AutoBlockWindow-Known bad useragent query-2026-05-23 00:47:58	Bad Web Bot
Anonymous	2026-05-12 05:14:58 (1 month ago)	2.57.170.148 - - [12/May/2026:07:14:57 +0200] "GET /wp-content/themes/aahana/json.php HTTP/1.0" 404 ... show more 2.57.170.148 - - [12/May/2026:07:14:57 +0200] "GET /wp-content/themes/aahana/json.php HTTP/1.0" 404 25316 "-" "Go-http-client/1.1" 2.57.170.148 - - [12/May/2026:07:14:57 +0200] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 404 6879 "-" "Go-http-client/1.1" 2.57.170.148 - - [12/May/2026:07:14:58 +0200] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.0" 404 25316 "-" "Go-http-client/1.1" 2.57.170.148 - - [12/May/2026:07:14:58 +0200] "GET /wp-content/plugins/TOPXOH/wDR.php HTTP/1.1" 404 6882 "-" "Go-http-client/1.1" 2.57.170.148 - - [12/May/2026:07:14:58 +0200] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.0" 404 25316 "-" "Go-http-client/1.1" ... show less	Brute-Force Web App Attack
🇫🇷 Octopuce	2026-05-12 00:45:46 (1 month ago)	Aggressive web search of vulnerable pages: /wp-content/plugins/enhanced-text-widget/analyst/src/403x ... show more Aggressive web search of vulnerable pages: /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php /wp-content/plugins/semrush/x.php /wp- ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-11 17:58:49 (1 month ago)	2.57.170.148 - - [11/May/2026:20:58:48 +0300] "GET /wp-admin/dropdown.php HTTP/1.1" 404 712 "-" "Go- ... show more 2.57.170.148 - - [11/May/2026:20:58:48 +0300] "GET /wp-admin/dropdown.php HTTP/1.1" 404 712 "-" "Go-http-client/1.1" 2.57.170.148 - - [11/May/2026:20:58:49 +0300] "GET /wp-admin/js/index.php HTTP/1.1" 404 712 "-" "Go-http-client/1.1" ... show less	Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 91.196.152.206

🇳🇱 45.148.10.240

🇬🇧 213.166.84.42

🇧🇹 103.133.216.219

🇫🇷 85.217.140.41

🇨🇳 60.214.127.246

🇲🇾 49.124.148.193

🇸🇬 47.128.119.99

🇩🇪 45.86.202.150

🇨🇦 24.244.93.239

🇺🇸 195.184.76.71

🇨🇳 101.96.208.174

🇺🇸 91.230.168.92

🇺🇸 34.125.104.247

🇮🇳 14.99.193.114

🇺🇸 2001:470:2cc:1::25a

🇬🇧 165.232.38.41

🇳🇱 89.248.168.227

🇺🇸 72.17.34.38

🇸🇬 43.156.212.86