This IP address has been reported a total of
48
times from
23 distinct
sources.
2.57.23.198 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Attempted search for exploits and vulnerabilities detected by fail2ban
...
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show moreAsking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-15 08:07 UTC
show less
HTTP application-layer DoS / botnet traffic from 2.57.23.198: repeated high-cost dynamic page and fe ...
show moreHTTP application-layer DoS / botnet traffic from 2.57.23.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
Blocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-14 ...
show moreBlocked by https://aegis.hr — WAF: ModSec rule match - (MITRE T1190), 1 attempts, Period: 2026-09-14 13:31:41 to 2026-09-14 13:31:41
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 2.57.23.198: traffic from this addr ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 2.57.23.198: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
HTTP application-layer DoS / botnet traffic from 2.57.23.198: repeated high-cost dynamic page and fe ...
show moreHTTP application-layer DoS / botnet traffic from 2.57.23.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 2.57.23.198: traffic from this addr ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 2.57.23.198: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
Blocked abusive HTTP application-layer DoS / botnet traffic from 2.57.23.198: traffic from this addr ...
show moreBlocked abusive HTTP application-layer DoS / botnet traffic from 2.57.23.198: traffic from this address continues high-cost dynamic page and feed requests at abusive rates via TCP/HTTPS despite edge block responses. Likely compromised end-user host.
show less
HTTP application-layer DoS / botnet traffic from 2.57.23.198: repeated high-cost dynamic page and fe ...
show moreHTTP application-layer DoS / botnet traffic from 2.57.23.198: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Showing 1 to
15
of 48 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩