JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.57.170.21

2.57.170.21 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 17%: ?

17%

ISP	VPN Consumer Cosenza, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇹 Italy
City	Cosenza, Calabria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.57.170.21

Whois 2.57.170.21

IP Abuse Reports for 2.57.170.21:

This IP address has been reported a total of 138 times from 56 distinct sources. 2.57.170.21 was first reported on July 7th 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 pipeline.es	2026-07-23 04:03:47 (4 weeks ago)	Web scanning / probing for vulnerable paths \| URL: /wp-content/fonts/index.php \| Evidence: www.aevav ... show more Web scanning / probing for vulnerable paths \| URL: /wp-content/fonts/index.php \| Evidence: www.aevav.com 2.57.170.21 - - [23/Jul/2026:06:03:03 +0200] \"GET /wp-content/fonts/index.php HTTP/1.1\" 404 - \"http://aevav.es/wp-content/fonts/index.php\" \"Go-http-client/1.1\" GEOIP_COUNTRY_CODE=IT \| ASN: F.n.s. Holdings Limited \| Country: IT show less	Port Scan Web App Attack
🇬🇧 consul.to	2026-07-22 20:22:46 (1 month ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 lavnet.net	2026-07-21 07:05:40 (1 month ago)	2.57.170.21 - - [21/Jul/2026:07:05:37 +0000] "GET /alfa.php HTTP/2.0" 403 322 "http://lavweb.com/alf ... show more 2.57.170.21 - - [21/Jul/2026:07:05:37 +0000] "GET /alfa.php HTTP/2.0" 403 322 "http://lavweb.com/alfa.php" "Go-http-client/2.0" 2.57.170.21 - - [21/Jul/2026:07:05:38 +0000] "GET /403.php HTTP/2.0" 403 290 "http://lavweb.com/403.php" "Go-http-client/2.0" 2.57.170.21 - - [21/Jul/2026:07:05:38 +0000] "GET /m.php HTTP/2.0" 403 267 "http://lavweb.com/m.php" "Go-http-client/2.0" 2.57.170.21 - - [21/Jul/2026:07:05:39 +0000] "GET /a.php HTTP/2.0" 403 290 "http://lavweb.com/a.php" "Go-http-client/2.0" 2.57.170.21 - - [21/Jul/2026:07:05:39 +0000] "GET /1.php HTTP/2.0" 403 267 "http://lavweb.com/1.php" "Go-http-client/2.0" 2.57.170.21 - - [21/Jul/2026:07:05:40 +0000] "GET /x.php HTTP/2.0" 403 290 "http://lavweb.com/x.php" "Go-http-client/2.0" ... show less	Brute-Force
🇺🇸 HamSammich	2026-07-11 05:02:43 (1 month ago)	Automated sensor: 2 HTTPS connection/probe attempts over the last 24h (latest 2026-07-11T05:02Z).	Brute-Force Web App Attack
Anonymous	2026-06-01 20:20:09 (2 months ago)	Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.	Web App Attack
🇯🇵 SentinalX by uzumaru	2026-05-19 01:37:56 (3 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cute-potato.com:80 show less	Open Proxy Port Scan
🇫🇷 Octopuce	2026-05-09 03:33:42 (3 months ago)	Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php / ... show more Aggressive web search of vulnerable pages: /wp-admin/maint/bootstrap.php /themes/zMousse/otuz1.php /wp-content/edit-wolf.php /wp-content/plugin ... show less	Web App Attack
🇫🇷 Octopuce	2026-04-12 20:13:43 (4 months ago)	Aggressive web search of vulnerable pages: /wp-cron.php /about.php /wp-links.php /wp-info.php /wp-co ... show more Aggressive web search of vulnerable pages: /wp-cron.php /about.php /wp-links.php /wp-info.php /wp-config-sample.php /manager.php /functions.php ... show less	Web App Attack
Anonymous	2026-03-27 09:03:25 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
Anonymous	2026-03-26 08:04:40 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Webshell probing, Backup file probing show less	Bad Web Bot Web App Attack
🇺🇸 ipblock.com	2026-03-25 18:44:00 (4 months ago)	IPBlock protected site ID [4055-d][s=01]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-03-15 15:50:36 (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Epimetheus	2026-02-26 01:14:58 (5 months ago)	Unauthorized access attempts: [GET] //site/ [GET] //news/ [GET] //blog/ UA: Mozilla/5.0 (X11; Linu ... show more Unauthorized access attempts: [GET] //site/ [GET] //news/ [GET] //blog/ UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 show less	Web App Attack
🇩🇪 ghostwarriors	2026-02-23 03:20:31 (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 09:55:41 (6 months ago)	(mod_security) mod_security (id:240000) triggered by 2.57.170.21 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:240000) triggered by 2.57.170.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 04:54:14.898060 2026] [security2:error] [pid 21779:tid 21779] [client 2.57.170.21:48883] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "87"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder\|\|www.tomweston.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.tomweston.net"] [uri "/images/stories/themes.php"] [unique_id "aY70xranqLfzGuD7LeZjrwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 158.174.211.17

🇨🇳 115.153.121.41

🇺🇸 44.201.3.171

🇳🇱 195.178.110.137

🇺🇸 134.209.49.207

🇨🇳 120.48.122.158

🇺🇸 17.241.75.238

🇺🇸 3.145.13.241

🇫🇷 2400:cb00:986:1000:1648:62dd:7fe5:59d

🇨🇳 222.90.58.170

🇨🇳 113.219.177.95

🇺🇸 54.186.219.124

🇳🇱 45.148.10.151

🇮🇳 40.80.84.77

🇮🇩 103.46.186.105

🇨🇳 101.205.122.213

🇩🇪 69.5.169.46

🇺🇸 54.197.86.219

🇨🇦 54.39.0.105

🇧🇷 16.5.0.133