AbuseIPDB » 2.57.23.215

2.57.23.215 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 34%: ?

34%

ISP	Internet Utilities Europe and Asia Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS61317
Domain Name	netutils.io
Country	United Kingdom of Great Britain and Northern Ireland
City	City of London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 2.57.23.215

Whois 2.57.23.215

IP Abuse Reports for 2.57.23.215:

This IP address has been reported a total of 15 times from 11 distinct sources. 2.57.23.215 was first reported on April 8th 2024, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
EGP Abuse Dept	2025-06-10 10:28:02 (1 week ago)	forum signup bot	Web Spam Blog Spam Web App Attack
tecnicorioja	2025-05-28 22:00:32 (3 weeks ago)	wp-login attack [28/May/2025:09:27:50	Brute-Force Web App Attack
rtbh.com.tr	2025-05-24 20:08:20 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
rtbh.com.tr	2025-05-23 20:08:20 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
ghostwarriors	2025-05-23 01:20:10 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
ksol-hostmaster	2025-05-23 00:56:34 (3 weeks ago)	2025/05/23 02:56:34 [error] 91340#192667: *3158085 access forbidden by rule, client: 2.57.23.215, se ... show more2025/05/23 02:56:34 [error] 91340#192667: *3158085 access forbidden by rule, client: 2.57.23.215, server: git.ksol.io, request: "GET / HTTP/1.1", host: "git.ksol.io" ... show less	Web Spam
MAGIC	2025-05-05 06:07:38 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2025-05-04 00:52:36 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 2.57.23.215 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210350) triggered by 2.57.23.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 03 20:52:30.937235 2025] [security2:error] [pid 697755:tid 697755] [client 2.57.23.215:33323] [client 2.57.23.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||web.cruisingforsex.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "web.cruisingforsex.com"] [uri "/bb/redirect-to/"] [unique_id "aBa6TqIUBCUIxjJLyIRSMQAAAAM"], referer: http://web.cruisingforsex.com/bb/redirect-to/?redirect=https://digitaltibetan.win/wiki/Post:What_Is_The_Reason_Buy_Drivers_License_With_Bitcoin_Is_Right_For_You show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2025-05-01 17:31:58 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 2.57.23.215 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210350) triggered by 2.57.23.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 01 13:31:53.335534 2025] [security2:error] [pid 178142:tid 178224] [client 2.57.23.215:51379] [client 2.57.23.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.psds.link.omegaoak.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.psds.link.omegaoak.com"] [uri "/"] [unique_id "aBOwCRO-Ch11Z1L9T0sLrQAAAFQ"], referer: http://www.psds.link.omegaoak.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-05-01 16:50:07 (1 month ago)	multiple unauthorized attempts at Thu, 01 May 2025 12:11:34 +0000 a total of 1 times.	Brute-Force
octageeks.com	2025-05-01 04:06:34 (1 month ago)	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
TPI-Abuse	2025-04-28 20:57:15 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 2.57.23.215 (-): 1 in the last 300 secs; Ports: ... show more(mod_security) mod_security (id:210350) triggered by 2.57.23.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 28 16:57:08.697121 2025] [security2:error] [pid 22410:tid 22410] [client 2.57.23.215:44683] [client 2.57.23.215] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.techlinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.techlinks.com"] [uri "/user/register"] [unique_id "aA_rpIx4o5wHBa4b59nGgAAAAAY"], referer: https://www.techlinks.com/ show less	Brute-Force Bad Web Bot Web App Attack
backslash	2025-04-18 11:40:06 (2 months ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
10dencehispahard SL	2024-07-10 23:00:31 (11 months ago)	Unauthorized login attempts [ access_predict]	Brute-Force
backslash	2024-04-08 11:15:30 (1 year ago)		Bad Web Bot

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩