AbuseIPDB » 2.57.170.50

2.57.170.50 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 1%: ?

ISP	VPN Consumer Cosenza, Italy
Usage Type	Data Center/Web Hosting/Transit
ASN	AS206092
Domain Name	vpnconsumer.com
Country	Italy
City	Cosenza, Calabria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 2.57.170.50

Whois 2.57.170.50

IP Abuse Reports for 2.57.170.50:

This IP address has been reported a total of 31 times from 18 distinct sources. 2.57.170.50 was first reported on September 14th 2022, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2024-12-16 16:04:16 (4 weeks ago)	Aggressive web scan	Web App Attack
TPI-Abuse	2024-06-26 07:37:08 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 26 03:37:03.197712 2024] [security2:error] [pid 23181] [client 2.57.170.50:30939] [client 2.57.170.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "olimpiacerda.com"] [uri "/back/sftp-config.json"] [unique_id "ZnvFH061XWEig4q_Gco55gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-06-16 18:46:05 (6 months ago)	(mod_security) mod_security (id:210730) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210730) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 16 14:46:00.028841 2024] [security2:error] [pid 26438] [client 2.57.170.50:13363] [client 2.57.170.50] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|casinoaffiliateprogramsonline.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "casinoaffiliateprogramsonline.com"] [uri "/dump.sql"] [unique_id "Zm8y6KyW3sy_u91S88GOAAAAAAw"] show less	Brute-Force Brute-Force Bad Web Bot Bad Web Bot Web App Attack Web App Attack
10dencehispahard SL	2024-05-23 10:00:03 (7 months ago)	Unauthorized login attempts [ accesslogs]	Brute-Force
unifr	2024-04-06 00:01:52 (9 months ago)	Unauthorized IMAP connection attempt	Brute-Force
TPI-Abuse	2024-04-04 13:56:50 (9 months ago)	(mod_security) mod_security (id:210730) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210730) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 04 09:56:46.723025 2024] [security2:error] [pid 32236] [client 2.57.170.50:27203] [client 2.57.170.50] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|bitcointoolfair.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bitcointoolfair.com"] [uri "/old/wallet.dat"] [unique_id "Zg6xnvrsX7c-Pl0JgUAuCAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
TheMadBeaker	2024-03-28 03:53:00 (9 months ago)	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	Hacking SQL Injection
TPI-Abuse	2024-03-13 23:00:08 (10 months ago)	(mod_security) mod_security (id:210730) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210730) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 13 19:00:00.924036 2024] [security2:error] [pid 3793] [client 2.57.170.50:36553] [client 2.57.170.50] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|dudleyanddudley.com\|F\|2"] [data ".dat"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dudleyanddudley.com"] [uri "/restore/wallet.dat"] [unique_id "ZfIv8EDHrPFa6jSQusWTrAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
clamehost.it	2024-02-17 22:00:54 (10 months ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
Anonymous	2023-12-19 08:18:15 (1 year ago)		Brute-Force
unifr	2023-12-15 00:00:54 (1 year ago)	Unauthorized IMAP connection attempt	Brute-Force
TPI-Abuse	2023-12-11 05:46:45 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210492) triggered by 2.57.170.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 11 00:46:37.269462 2023] [security2:error] [pid 5204] [client 2.57.170.50:51469] [client 2.57.170.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.119"] [uri "/app/.env%20"] [unique_id "ZXaiPT5on1aN_NxdgZjVMgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Security_Whaller	2023-12-11 03:39:39 (1 year ago)	Malicious activity detected on Honeypot.	Hacking Brute-Force Web App Attack
ThreatBook.io	2023-11-09 00:16:29 (1 year ago)	ThreatBook Intelligence: Zombie,Web Login Brute Force more details on https://threatbook.io/ip/2.57. ... show moreThreatBook Intelligence: Zombie,Web Login Brute Force more details on https://threatbook.io/ip/2.57.170.50 2023-11-08 12:15:26 /2kyF show less	Web App Attack
ThreatBook.io	2023-09-16 00:02:09 (1 year ago)	ThreatBook Intelligence: Zombie,Web Login Brute Force more details on https://threatbook.io/ip/2.57. ... show moreThreatBook Intelligence: Zombie,Web Login Brute Force more details on https://threatbook.io/ip/2.57.170.50 2023-09-15 05:29:33 /9XZq show less	Web App Attack