JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 57.128.242.149

57.128.242.149 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 4%: ?

ISP	OVH Sp. z o. o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-6748169d.vps.ovh.net
Domain Name	ovh.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 57.128.242.149

Whois 57.128.242.149

IP Abuse Reports for 57.128.242.149:

This IP address has been reported a total of 12 times from 10 distinct sources. 57.128.242.149 was first reported on April 20th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-10 18:44:55 (6 hours ago)	ICS Labs identified 57.128.242.149 as a malicious indicator from threat intelligence.	DDoS Attack Port Scan Hacking Brute-Force Exploited Host
🇪🇸 el-brujo	2026-04-29 05:22:01 (2 months ago)	04/29/2026-07:22:01.409458 57.128.242.149 Protocol: 6 ET SCAN Potential SSH Scan	Port Scan
🇩🇪 AS213449.net	2026-04-29 05:21:57 (2 months ago)	04/29/2026-07:21:54.175204 src=57.128.242.149 dst=154.43.57.47:22 proto=6 msg=ET SCAN Potential SSH ... show more 04/29/2026-07:21:54.175204 src=57.128.242.149 dst=154.43.57.47:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇩🇪 Trapper67	2026-04-28 13:14:47 (2 months ago)	Port Scan detected from 57.128.242.149 (vps-5f61cd81.vps.ovh.net). 11 hits in the last 250 seconds ... show more Port Scan detected from 57.128.242.149 (vps-5f61cd81.vps.ovh.net). 11 hits in the last 250 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Apr 28 14:05:33 kernel: Firewa show less	Port Scan
🇺🇸 wteiken	2026-04-28 13:08:11 (2 months ago)	2026-04-28T09:07:26.686474-04:00 rocinante.teiken.net kernel: [1936898.182405] syn_limit:IN=ens5 OUT ... show more 2026-04-28T09:07:26.686474-04:00 rocinante.teiken.net kernel: [1936898.182405] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=57.128.242.149 DST=192.168.16.119 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=40314 DF PROTO=TCP SPT=40496 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-28T09:08:10.267547-04:00 rocinante.teiken.net kernel: [1936941.762769] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=57.128.242.149 DST=192.168.16.119 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=15996 DF PROTO=TCP SPT=47825 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-28T09:08:10.294961-04:00 rocinante.teiken.net kernel: [1936941.787112] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=57.128.242.149 DST=192.168.16.119 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=23653 DF PROTO=TCP SPT=35115 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-28T09:08:10.302256-04:00 rocinante.teiken.net kernel: [1936941.797502] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb: ... show less	Port Scan
🇩🇪 grassau.com	2026-04-28 13:06:50 (2 months ago)	Port Scan detected from 57.128.242.149 (PL/Poland/Mazovia/Warsaw/vps-5f61cd81.vps.ovh.net).	Port Scan
🇫🇮 TrafficAnalyser	2026-04-22 08:48:49 (2 months ago)	Port scanning	Port Scan
🇮🇱 spd.co.il	2026-04-22 07:04:56 (2 months ago)	Port scan detected on multiple ports	Port Scan
🇺🇸 SYSMarshal	2026-04-21 00:48:47 (2 months ago)	SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port: ... show more SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152] show less	Port Scan Web App Attack Bad Web Bot
🇫🇮 TrafficAnalyser	2026-04-20 07:44:12 (2 months ago)	Port scanning	Port Scan
🇦🇺 FEWA	2026-04-20 03:28:01 (2 months ago)	Fail2Ban Ban Triggered	Hacking Brute-Force
🇺🇸 wteiken	2026-04-20 01:11:22 (2 months ago)	2026-04-19T21:11:19.597575-04:00 rocinante.teiken.net kernel: [1202743.018181] syn_limit:IN=ens5 OUT ... show more 2026-04-19T21:11:19.597575-04:00 rocinante.teiken.net kernel: [1202743.018181] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=57.128.242.149 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=50844 PROTO=TCP SPT=22 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-19T21:11:19.647840-04:00 rocinante.teiken.net kernel: [1202743.068426] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=57.128.242.149 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=57405 PROTO=TCP SPT=22 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-19T21:11:20.316916-04:00 rocinante.teiken.net kernel: [1202743.737534] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=57.128.242.149 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=33798 PROTO=TCP SPT=22 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2026-04-19T21:11:20.480460-04:00 rocinante.teiken.net kernel: [1202743.901000] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7 ... show less	Port Scan

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.122

🇨🇳 120.211.188.132

🇫🇷 2a02:c207:3018:3708::1

🇰🇷 222.99.31.54

🇧🇷 201.15.149.254

🇩🇪 193.124.20.250

🇨🇿 185.216.35.150

🇲🇽 177.225.251.134

🇺🇸 165.154.163.207

🇺🇸 147.185.132.160

🇮🇳 117.199.215.60

🇧🇬 91.92.47.6

🇺🇸 70.89.116.5

🇧🇬 46.233.51.99

🇮🇪 34.245.133.45

🇺🇸 20.65.219.43

🇬🇧 2.57.17.164

🇺🇸 205.210.31.46

🇧🇷 201.222.20.20

🇪🇬 197.199.224.52