JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 57.128.252.182

57.128.252.182 was found in our database!

This IP was reported 121 times. Confidence of Abuse is 0%: ?

ISP	OVH Sp. z o. o.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-3cb40a39.vps.ovh.net
Domain Name	ovh.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 57.128.252.182

Whois 57.128.252.182

IP Abuse Reports for 57.128.252.182:

This IP address has been reported a total of 121 times from 48 distinct sources. 57.128.252.182 was first reported on January 29th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-03-25 00:08:38 (2 months ago)	<jail> banned by fail2ban	Brute-Force Web App Attack
🇩🇪 MF Network	2026-03-17 02:44:04 (2 months ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
🇬🇧 poundawebsiteltd	2026-03-16 11:48:37 (2 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 57.128.252.182 - - [16/Mar/2026: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 57.128.252.182 - - [16/Mar/2026:11:48:35 +0000] GET / HTTP/1.1 403 3036 - Mozilla/5.0 (iPhone; CPU iPhone OS 26_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/145.0.7632.108 Mobile/15E148 Safari/604.1 show less	Web App Attack
🇮🇹 NonOggiCaroMio	2026-03-15 13:47:12 (2 months ago)	Arruso ca si: LePresidente/http-generic-403-bf	Brute-Force
🇬🇧 poundawebsiteltd	2026-03-15 03:14:53 (2 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 57.128.252.182 - - [15/Mar/2026: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 57.128.252.182 - - [15/Mar/2026:03:14:52 +0000] GET / HTTP/1.1 403 3035 - Mozilla/5.0 (iPhone; CPU iPhone OS 26_3_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/145.0.7632.108 Mobile/15E148 Safari/604.1 show less	Web App Attack
Anonymous	2026-03-14 09:53:21 (2 months ago)	Malicious activity detected	Hacking Web App Attack
🇫🇷 GoodOldTOS	2026-03-13 06:11:57 (3 months ago)	Highly suspect IP	Hacking Web App Attack
Anonymous	2026-03-11 19:00:48 (3 months ago)	[Wed Mar 11 20:00:44.078091 2026] [authz_core:error] [pid 11549] [client 57.128.252.182:51360] AH016 ... show more [Wed Mar 11 20:00:44.078091 2026] [authz_core:error] [pid 11549] [client 57.128.252.182:51360] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Mar 11 20:00:47.441114 2026] [authz_core:error] [pid 9555] [client 57.128.252.182:51370] AH01630: client denied by server configuration: /etc/httpd/htdocs [Wed Mar 11 20:00:47.948143 2026] [authz_core:error] [pid 8853] [client 57.128.252.182:51384] AH01630: client denied by server configuration: /etc/httpd/htdocs, referer: https://wolfgang-eitel.com ... show less	Web App Attack
🇫🇮 Jordy	2026-03-11 18:20:11 (3 months ago)	11/Mar/2026:19:14:55.228281 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 11/Mar/2026:19:14:55.228281 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 57.128.252.182] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "abGxH7lo9Lumcx8prd5ZAwAAAAA"] 11/Mar/2026:19:14:55.228281 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 57.128.252.182] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/ ... show less	Web App Attack
🇮🇩 Burayot	2026-03-11 08:14:06 (3 months ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 57.128.252.182 (PL/Poland/vps-3cb40a ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 57.128.252.182 (PL/Poland/vps-3cb40a39.vps.ovh.net): 1 in the last 3600 secs show less	Web App Attack
🇫🇮 Jordy	2026-03-11 04:02:50 (3 months ago)	11/Mar/2026:04:57:33.161265 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client ... show more 11/Mar/2026:04:57:33.161265 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 57.128.252.182] ModSecurity: Warning. String match within "/accept-charset/ /content-encoding/ /proxy/ /lock-token/ /content-range/ /if/" at TX:header_name_accept-charset. [file "/usr/share/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1128"] [id "920450"] [msg "HTTP header is restricted by policy (/accept-charset/)"] [data "Restricted header detected: /accept-charset/"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/12.1"] [hostname "familievandemaat.nl"] [uri "/"] [unique_id "abDoLTQwF23fdxiKcZm78wAAAAY"] 11/Mar/2026:04:57:33.161265 +0100Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 57.128.252.182] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/ ... show less	Web App Attack
Anonymous	2026-03-10 22:06:03 (3 months ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇺🇸 Charlesiv	2026-03-10 22:01:07 (3 months ago)	Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: BLOCK ASN: 16276 (OVH) Protocol: HT ... show more Triggered Cloudflare WAF (firewallCustom) from PL. Action taken: BLOCK ASN: 16276 (OVH) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-03-10T20:32:37Z Ray ID: 9da516f76c69c052 UA: {USER_AGENT} show less	Bad Web Bot
🇪🇸 tutaim.com	2026-03-10 18:00:14 (3 months ago)	⛔ [10/03/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). ... show more ⛔ [10/03/26] This IP has been detected performing multiple attacks on websites (3 attempts blocked). Potential malicious activity. show less	Brute-Force SSH Web App Attack FTP Brute-Force
🇬🇧 poundawebsiteltd	2026-03-10 13:25:56 (3 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 57.128.252.182 - - [10/Mar/2026: ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 57.128.252.182 - - [10/Mar/2026:13:25:53 +0000] GET / HTTP/1.1 403 3028 - {USER_AGENT} show less	Web App Attack

Showing 1 to 15 of 121 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇴 190.181.12.166

🇸🇬 167.71.200.154

🇺🇸 162.216.149.120

🇺🇸 205.210.31.108

🇦🇷 200.32.52.150

🇹🇼 198.235.24.64

🇧🇬 77.85.86.47

🇺🇸 66.132.195.89

🇳🇱 45.198.224.18

🇬🇧 34.13.4.153

🇹🇼 198.235.24.118

🇲🇽 189.175.204.103

🇸🇪 185.217.0.181

🇨🇭 178.199.211.132

🇹🇷 141.11.109.45

🇮🇩 129.227.46.150

🇺🇸 91.230.168.227

🇫🇮 65.108.149.206

🇺🇸 35.144.111.220

🇰🇷 218.149.235.152