JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 2.57.170.43

2.57.170.43 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 2%: ?

ISP	VPN Consumer Cosenza, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	🇮🇹 Italy
City	Cosenza, Calabria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 2.57.170.43

Whois 2.57.170.43

IP Abuse Reports for 2.57.170.43:

This IP address has been reported a total of 128 times from 56 distinct sources. 2.57.170.43 was first reported on April 20th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Lino Project	2026-08-10 22:56:48 (1 week ago)	2.57.170.43 - - [11/Aug/2026:00:56:47 +0200] "GET /config.json HTTP/1.1" 403 5288 "-" "Mozilla/5.0 ( ... show more 2.57.170.43 - - [11/Aug/2026:00:56:47 +0200] "GET /config.json HTTP/1.1" 403 5288 "-" "Mozilla/5.0 (Windows NT 10.0; rv:105.0) Gecko/20100101 Firefox/105.0" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 00:20:12 (2 months ago)	Web attack blocked by Wordfence on kernoverlegsibbe-ijzeren.nl (1 hit). Reported by CRMON.	Web App Attack
🇯🇵 demonsword	2026-05-28 12:57:07 (2 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: specialdn.com:80 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-05-19 10:30:02 (3 months ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ipleak.net:443 show less	Open Proxy Port Scan
🇫🇷 Octopuce	2026-05-08 20:35:36 (3 months ago)	Aggressive web search of vulnerable pages: /js/bas.php /.well-known/pki-validation/moon.php /file.ph ... show more Aggressive web search of vulnerable pages: /js/bas.php /.well-known/pki-validation/moon.php /file.php /wp-includes/js/index.php /wp-content/upg ... show less	Web App Attack
🇺🇸 myagent.site	2026-04-13 08:07:06 (4 months ago)	Blocking for trying to access an exploit file: /themes/scapeshot/includes/settings/	Hacking
🇫🇷 dynamix	2026-04-12 19:00:04 (4 months ago)	Multiple WAF Violations	Web App Attack
🇨🇭 backslash	2026-03-31 13:12:04 (4 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
Anonymous	2026-03-27 09:03:32 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
Anonymous	2026-03-26 08:04:46 (4 months ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Webshell probing show less	Bad Web Bot Web App Attack
🇦🇺 screwlooseit.com.au	2026-03-25 22:46:44 (4 months ago)	Blocked by CSF 13 firewall - Rule: XMLRPC IT/Italy/-	Web App Attack
🇩🇪 ghostwarriors	2026-03-15 15:50:49 (5 months ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-25 19:04:46 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 2.57.170.43 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:225170) triggered by 2.57.170.43 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 14:04:38.689030 2026] [security2:error] [pid 21541:tid 21541] [client 2.57.170.43:35167] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|sliconswamp.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sliconswamp.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aZ9HxsedDp2uLjSRbOj3lAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 HERA - Operations	2026-02-23 23:32:14 (5 months ago)	sensobox - searching for vulnerable scripts: index.php 2026/02/24 00:32:14	Web App Attack
🇪🇸 gnom4ik	2026-02-20 20:59:17 (6 months ago)	ban-reviewer auto report; ip=2.57.170.43; scenario=http:scan; verdict=valid_ban; confidence=0.85; ca ... show more ban-reviewer auto report; ip=2.57.170.43; scenario=http:scan; verdict=valid_ban; confidence=0.85; categories=14; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=0; kernel_events=0; signals=IP flagged for 'http:scan' scenario; Port Scan (category 14) detected in abuseipdb_context; No evidence of legitimate activity or high-volume requests show less	Port Scan

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.197.85.76

🇨🇳 125.122.39.115

🇺🇸 47.77.236.190

🇺🇸 216.218.206.69

🇭🇰 210.177.143.61

🇫🇷 143.244.57.84

🇩🇪 138.124.33.172

🇨🇳 117.15.88.77

🇫🇮 62.238.123.139

🇱🇹 62.60.130.201

🇮🇳 49.204.111.221

🇻🇳 45.252.250.119

🇦🇷 181.228.80.171

🇩🇪 167.94.145.29

🇨🇳 139.170.72.92

🇭🇰 103.149.26.230

🇧🇩 103.77.16.182

🇺🇸 74.125.77.81

🇨🇳 60.166.83.117

🇹🇼 59.126.123.132