JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.57.170.150

2.57.170.150 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 65%: ?

65%

ISP	VPN Consumer Cosenza, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇹 Italy
City	Cosenza, Calabria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.57.170.150

Whois 2.57.170.150

IP Abuse Reports for 2.57.170.150:

This IP address has been reported a total of 138 times from 58 distinct sources. 2.57.170.150 was first reported on June 20th 2023, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 mkey	2026-08-28 01:05:05 (2 hours ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=3306 \| HITS=2 \| IPSET=ADD \| FIRST=2026-08-28 03:00:46 \| LAST=2026-08-28 03:00:47. Last seen 2026-08-28 03:00:47. show less	Port Scan
🇺🇸 TurboTechieSystems	2026-08-27 23:05:51 (4 hours ago)	MySQL BruteForce 2026-08-27 18:05:50 310012 Access Denied for Redacted '' using password: YES 2026- ... show more MySQL BruteForce 2026-08-27 18:05:50 310012 Access Denied for Redacted '' using password: YES 2026-08-27 18:05:50 310013 Access Denied for Redacted '' using password: YES show less	Hacking Brute-Force Web App Attack
🇩🇪 guldkage	2026-08-27 18:43:53 (9 hours ago)	Unauthorized connection attempt detected from IP address 2.57.170.150 to port 3306 (ger-02) [MYSQL]	Exploited Host
🇧🇷 noconex	2026-08-27 16:16:09 (11 hours ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) dete ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Suspicious inbound to mySQL port 3306) detectado de 2.57.170.150 show less	Port Scan Brute-Force SSH
🇩🇪 www.fransveldman.world	2026-08-27 13:29:28 (14 hours ago)	2026-08-27 13:29:26 13292 [Warning] Access denied for user 'sofiedeclercq'@'2.57.170.150' (using pas ... show more 2026-08-27 13:29:26 13292 [Warning] Access denied for user 'sofiedeclercq'@'2.57.170.150' (using password: YES) 2026-08-27 13:29:26 13293 [Warning] Access denied for user 'sofiedeclercq'@'2.57.170.150' (using password: YES) 2026-08-27 13:29:27 13294 [Warning] Access denied for user 'sofiedeclercq'@'2.57.170.150' (using password: YES) 2026-08-27 13:29:27 13295 [Warning] Access denied for user 'sofiedeclercq'@'2.57.170.150' (using password: YES) 2026-08-27 13:29:27 13296 [Warning] Access denied for user 'sofiedeclercq'@'2.57.170.150' (using password: NO) ... show less	Web App Attack
🇧🇾 stroytrest	2026-08-27 07:46:18 (20 hours ago)	2026-08-27T10:46:17.155251+03:00 gate kernel: [1371896.852298] nftables: JAIL-SQL IN=wan OUT= MAC= S ... show more 2026-08-27T10:46:17.155251+03:00 gate kernel: [1371896.852298] nftables: JAIL-SQL IN=wan OUT= MAC= SRC=2.57.170.150 DST=xxx.xxx.xxx.xxx LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=47919 DF PROTO=TCP SPT=49399 DPT=3306 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 iNetWorker	2026-08-27 02:04:15 (1 day ago)	trying to access non-authorized port	Port Scan
🇳🇱 Cloud86 B.V.	2026-08-26 16:39:04 (1 day ago)	categories: Brute-Force	Brute-Force
🇺🇸 ipblock.com	2026-08-05 23:23:00 (3 weeks ago)	IPBlock protected site ID [1351-fb]. Brute force RDP login attempts	Hacking Brute-Force
🇱🇻 garmtech.com	2026-08-04 01:25:29 (3 weeks ago)	IM360 WAF: WordPress wp2shell REST batch endpoint before 7.0.2 or 6.9.5 (CVE-2026-63030) MV:0	Hacking
🇺🇸 ipblock.com	2026-08-02 04:08:00 (3 weeks ago)	IPBlock protected site ID [1351-fb]. Brute force RDP login attempts	Hacking Brute-Force
🇺🇸 TPI-Abuse	2026-07-04 04:01:25 (1 month ago)	(mod_security) mod_security (id:212620) triggered by 2.57.170.150 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:212620) triggered by 2.57.170.150 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 00:01:17.636119 2026] [security2:error] [pid 4731:tid 4731] [client 2.57.170.150:42985] ModSecurity: Access denied with code 403 (phase 2). Pattern match "<script\\\\b" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "65"] [id "212620"] [rev "4"] [msg "COMODO WAF: Cross-site Scripting (XSS) Attack\|\|terazon.net\|F\|2"] [data "Matched Data: <script found within REQUEST_URI: /index.php?twg_album=\\x22><script>alert(string.fromcharcode(88,83,83))</script>&twg_show=brahma.jpg&locale=da&twg_top10=views"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "terazon.net"] [uri "/index.php"] [unique_id "akiFjVpF6Ycu8xLGxPLvCwAAAAk"], referer: https://terazon.net/index.php?twg_album="><script >alert(String.fromCharCode(88,83,83))</script>&twg_show=Brahma.jpg&locale=da&twg_top10=views show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-07-01 04:44:18 (1 month ago)	(modsec_5015) ModSec 5015: Suspicious User-Agent from 2.57.170.150 (-): 1 in the last 3600 secs (0-1 ... show more (modsec_5015) ModSec 5015: Suspicious User-Agent from 2.57.170.150 (-): 1 in the last 3600 secs (0-195) show less	Hacking
🇺🇸 avgsmoe	2026-06-11 13:00:46 (2 months ago)	CROWDSEC offender. Observed 2775 times.	Port Scan Brute-Force Web App Attack
🇫🇷 dynamix	2026-06-10 09:54:48 (2 months ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.197

🇳🇱 193.176.31.199

🇨🇴 181.55.68.70

🇫🇷 91.196.152.26

🇳🇱 91.92.47.6

🇩🇪 87.106.29.151

🇸🇬 84.75.155.168

🇰🇬 81.85.75.102

🇺🇸 73.203.17.220

🇺🇸 63.41.16.4

🇷🇺 46.191.191.147

🇺🇸 216.25.89.69

🇲🇲 204.157.173.215

🇺🇸 147.185.132.98

🇳🇴 87.120.104.29

🇰🇿 77.240.41.0

🇷🇺 77.106.56.5

🇲🇾 27.125.250.253

🇺🇸 17.166.235.50

🇷🇴 2.57.122.53