2.57.121.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
2.57.121.104	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-14 09:04:46
2.57.121.19	attack	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-12 02:05:01
2.57.121.19	attack	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-11 17:54:25
2.57.121.19	attackbotsspam	Oct 10 13:42:24 pixelmemory sshd[3235053]: Failed password for root from 2.57.121.19 port 57924 ssh2 Oct 10 13:44:08 pixelmemory sshd[3252791]: Invalid user abc1234 from 2.57.121.19 port 51694 Oct 10 13:44:08 pixelmemory sshd[3252791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 Oct 10 13:44:08 pixelmemory sshd[3252791]: Invalid user abc1234 from 2.57.121.19 port 51694 Oct 10 13:44:10 pixelmemory sshd[3252791]: Failed password for invalid user abc1234 from 2.57.121.19 port 51694 ssh2 ...	2020-10-11 04:45:09
2.57.121.19	attackbots	Oct 10 08:18:16 firewall sshd[19785]: Failed password for root from 2.57.121.19 port 33660 ssh2 Oct 10 08:21:57 firewall sshd[19834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=root Oct 10 08:21:59 firewall sshd[19834]: Failed password for root from 2.57.121.19 port 40284 ssh2 ...	2020-10-10 20:44:24
2.57.121.19	attackspam	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-09 01:30:56
2.57.121.19	attackspambots	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-08 17:27:23
2.57.121.112	attack	Port scanning [4 denied]	2020-09-09 01:22:45
2.57.121.112	attack	Port scanning [4 denied]	2020-09-08 16:49:23
2.57.121.203	attackbots	Unauthorized connection attempt detected from IP address 2.57.121.203 to port 23	2020-07-22 22:08:19

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.57.121.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52097
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.57.121.20.			IN	A

;; AUTHORITY SECTION:
.			451	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:07:31 CST 2022
;; MSG SIZE  rcvd: 104

Host info

20.121.57.2.in-addr.arpa domain name pointer hosting20.tronicsat.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.121.57.2.in-addr.arpa	name = hosting20.tronicsat.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.33.172.223	attackbots	Unauthorized connection attempt from IP address 185.33.172.223 on Port 445(SMB)	2020-07-01 21:05:44
52.149.131.224	attack	Jun 30 14:44:06 DAAP sshd[31792]: Invalid user suresh from 52.149.131.224 port 59118 Jun 30 14:44:06 DAAP sshd[31792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.131.224 Jun 30 14:44:06 DAAP sshd[31792]: Invalid user suresh from 52.149.131.224 port 59118 Jun 30 14:44:08 DAAP sshd[31792]: Failed password for invalid user suresh from 52.149.131.224 port 59118 ssh2 Jun 30 14:50:39 DAAP sshd[31900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.131.224 user=root Jun 30 14:50:41 DAAP sshd[31900]: Failed password for root from 52.149.131.224 port 35044 ssh2 ...	2020-07-01 21:09:12
192.241.218.175	attack	TCP (SYN) 192.241.218.175:59635 -> port 1433, len 44	2020-07-01 20:17:08
46.185.115.194	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5ab884aa8a2f8229 \| WAF_Rule_ID: bic \| WAF_Kind: firewall \| CF_Action: drop \| Country: UA \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: www.wevg.org \| User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows XP) \| CF_DC: KBP. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-07-01 20:56:45
177.231.138.75	attackbots	TCP (SYN) 177.231.138.75:40774 -> port 443, len 40	2020-07-01 21:02:55
122.117.181.88	attack	TCP (SYN) 122.117.181.88:62014 -> port 23, len 44	2020-07-01 20:20:24
49.232.45.64	attackspam	Jun 30 21:18:22 jane sshd[4949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.45.64 Jun 30 21:18:24 jane sshd[4949]: Failed password for invalid user demo from 49.232.45.64 port 56374 ssh2 ...	2020-07-01 20:27:54
209.17.97.122	attackbots	Honeypot attack, port: 4567, PTR: 209.17.97.122.rdns.cloudsystemnetworks.com.	2020-07-01 20:52:03
85.95.165.171	attackbotsspam	20/6/29@06:44:14: FAIL: Alarm-Network address from=85.95.165.171 ...	2020-07-01 20:31:15
51.254.75.176	attackbots	Firewall Dropped Connection	2020-07-01 20:27:24
187.23.135.185	attackbots	Multiple SSH authentication failures from 187.23.135.185	2020-07-01 20:50:25
51.75.4.79	attack	SSH Brute Force	2020-07-01 20:56:22
207.203.97.101	attackbots	Telnet Honeypot -> Telnet Bruteforce / Login	2020-07-01 21:11:16
222.186.42.136	attackbotsspam	30.06.2020 19:40:00 SSH access blocked by firewall	2020-07-01 20:43:18
51.210.97.42	attack	Jun 30 17:54:39 pbkit sshd[609177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.210.97.42 Jun 30 17:54:39 pbkit sshd[609177]: Invalid user root1 from 51.210.97.42 port 48540 Jun 30 17:54:41 pbkit sshd[609177]: Failed password for invalid user root1 from 51.210.97.42 port 48540 ssh2 ...	2020-07-01 20:42:38

Recently Reported IPs

218.158.16.34	170.79.91.203	186.236.4.111	126.36.35.221
178.72.70.210	111.122.15.147	105.235.134.248	201.141.26.115
177.74.183.54	99.242.85.110	75.91.53.221	107.173.248.240
2.189.218.33	39.59.105.60	129.203.107.1	218.154.184.236
45.148.127.243	173.44.42.75	201.150.179.163	49.76.211.152