2.57.121.238 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
2.57.121.104	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-14 09:04:46
2.57.121.19	attack	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-12 02:05:01
2.57.121.19	attack	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-11 17:54:25
2.57.121.19	attackbotsspam	Oct 10 13:42:24 pixelmemory sshd[3235053]: Failed password for root from 2.57.121.19 port 57924 ssh2 Oct 10 13:44:08 pixelmemory sshd[3252791]: Invalid user abc1234 from 2.57.121.19 port 51694 Oct 10 13:44:08 pixelmemory sshd[3252791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 Oct 10 13:44:08 pixelmemory sshd[3252791]: Invalid user abc1234 from 2.57.121.19 port 51694 Oct 10 13:44:10 pixelmemory sshd[3252791]: Failed password for invalid user abc1234 from 2.57.121.19 port 51694 ssh2 ...	2020-10-11 04:45:09
2.57.121.19	attackbots	Oct 10 08:18:16 firewall sshd[19785]: Failed password for root from 2.57.121.19 port 33660 ssh2 Oct 10 08:21:57 firewall sshd[19834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=root Oct 10 08:21:59 firewall sshd[19834]: Failed password for root from 2.57.121.19 port 40284 ssh2 ...	2020-10-10 20:44:24
2.57.121.19	attackspam	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-09 01:30:56
2.57.121.19	attackspambots	Lines containing failures of 2.57.121.19 Oct 7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2 Oct 7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth] Oct 7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth] Oct 7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 user=r.r Oct 7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2 Oct 7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth] Oct 7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth] Oct 7 1........ ------------------------------	2020-10-08 17:27:23
2.57.121.112	attack	Port scanning [4 denied]	2020-09-09 01:22:45
2.57.121.112	attack	Port scanning [4 denied]	2020-09-08 16:49:23
2.57.121.203	attackbots	Unauthorized connection attempt detected from IP address 2.57.121.203 to port 23	2020-07-22 22:08:19

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.57.121.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1206
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.57.121.238.			IN	A

;; AUTHORITY SECTION:
.			312	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 23:17:42 CST 2022
;; MSG SIZE  rcvd: 105

Host info

238.121.57.2.in-addr.arpa domain name pointer host238.teeatop.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
238.121.57.2.in-addr.arpa	name = host238.teeatop.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
200.85.172.242	attackspam	1599065382 - 09/02/2020 18:49:42 Host: 200.85.172.242/200.85.172.242 Port: 445 TCP Blocked	2020-09-03 04:36:01
202.157.185.131	attackspambots	Wordpress_attack_3	2020-09-03 04:30:44
184.105.247.252	attackbotsspam	" "	2020-09-03 04:18:28
222.186.175.217	attackspam	Sep 2 20:11:25 localhost sshd[80544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Sep 2 20:11:27 localhost sshd[80544]: Failed password for root from 222.186.175.217 port 11578 ssh2 Sep 2 20:11:31 localhost sshd[80544]: Failed password for root from 222.186.175.217 port 11578 ssh2 Sep 2 20:11:25 localhost sshd[80544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Sep 2 20:11:27 localhost sshd[80544]: Failed password for root from 222.186.175.217 port 11578 ssh2 Sep 2 20:11:31 localhost sshd[80544]: Failed password for root from 222.186.175.217 port 11578 ssh2 Sep 2 20:11:25 localhost sshd[80544]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Sep 2 20:11:27 localhost sshd[80544]: Failed password for root from 222.186.175.217 port 11578 ssh2 Sep 2 20:11:31 localhost sshd[80 ...	2020-09-03 04:21:45
222.186.180.147	attackbots	Sep 2 22:26:24 sso sshd[30676]: Failed password for root from 222.186.180.147 port 11602 ssh2 Sep 2 22:26:27 sso sshd[30676]: Failed password for root from 222.186.180.147 port 11602 ssh2 ...	2020-09-03 04:28:22
45.92.126.90	attackbots	Fail2Ban Ban Triggered	2020-09-03 04:05:09
122.114.70.12	attackspam	prod11 ...	2020-09-03 04:31:36
183.128.119.184	attackspambots	Failed password for invalid user riana from 183.128.119.184 port 57626 ssh2	2020-09-03 04:05:27
119.28.136.172	attack	2020-09-02T19:15:38.942001vps1033 sshd[16082]: Invalid user heather from 119.28.136.172 port 39864 2020-09-02T19:15:38.946665vps1033 sshd[16082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.136.172 2020-09-02T19:15:38.942001vps1033 sshd[16082]: Invalid user heather from 119.28.136.172 port 39864 2020-09-02T19:15:40.880836vps1033 sshd[16082]: Failed password for invalid user heather from 119.28.136.172 port 39864 ssh2 2020-09-02T19:18:45.200232vps1033 sshd[22713]: Invalid user ajc from 119.28.136.172 port 59684 ...	2020-09-03 04:27:16
68.183.178.111	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 58 - port: 3196 proto: tcp cat: Misc Attackbytes: 60	2020-09-03 04:29:45
43.226.41.171	attack	prod8 ...	2020-09-03 04:00:34
177.103.12.10	attackspambots	TCP (SYN) 177.103.12.10:36102 -> port 23, len 44	2020-09-03 04:12:39
222.186.173.142	attackspam	Sep 2 22:25:57 sshgateway sshd\[14141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Sep 2 22:25:59 sshgateway sshd\[14141\]: Failed password for root from 222.186.173.142 port 16346 ssh2 Sep 2 22:26:02 sshgateway sshd\[14141\]: Failed password for root from 222.186.173.142 port 16346 ssh2	2020-09-03 04:36:15
189.148.6.36	attack	Icarus honeypot on github	2020-09-03 04:33:57
192.241.223.105	attackbots	Unauthorized access on Port 22 [ssh]	2020-09-03 04:11:43

Recently Reported IPs

2.57.122.79	2.57.137.11	2.57.136.172	2.57.137.22
2.57.122.65	2.57.138.173	2.57.138.194	2.57.138.117
2.57.138.198	2.57.137.24	2.57.138.4	2.57.138.142
2.57.171.49	2.57.184.239	2.57.169.238	2.57.169.48
2.57.88.238	2.57.88.132	2.57.88.147	2.57.89.111