Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
2.57.121.104 attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-14 09:04:46
2.57.121.19 attack
Lines containing failures of 2.57.121.19
Oct  7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2
Oct  7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth]
Oct  7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth]
Oct  7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2
Oct  7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth]
Oct  7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth]
Oct  7 1........
------------------------------
2020-10-12 02:05:01
2.57.121.19 attack
Lines containing failures of 2.57.121.19
Oct  7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2
Oct  7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth]
Oct  7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth]
Oct  7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2
Oct  7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth]
Oct  7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth]
Oct  7 1........
------------------------------
2020-10-11 17:54:25
2.57.121.19 attackbotsspam
Oct 10 13:42:24 pixelmemory sshd[3235053]: Failed password for root from 2.57.121.19 port 57924 ssh2
Oct 10 13:44:08 pixelmemory sshd[3252791]: Invalid user abc1234 from 2.57.121.19 port 51694
Oct 10 13:44:08 pixelmemory sshd[3252791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19 
Oct 10 13:44:08 pixelmemory sshd[3252791]: Invalid user abc1234 from 2.57.121.19 port 51694
Oct 10 13:44:10 pixelmemory sshd[3252791]: Failed password for invalid user abc1234 from 2.57.121.19 port 51694 ssh2
...
2020-10-11 04:45:09
2.57.121.19 attackbots
Oct 10 08:18:16 firewall sshd[19785]: Failed password for root from 2.57.121.19 port 33660 ssh2
Oct 10 08:21:57 firewall sshd[19834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=root
Oct 10 08:21:59 firewall sshd[19834]: Failed password for root from 2.57.121.19 port 40284 ssh2
...
2020-10-10 20:44:24
2.57.121.19 attackspam
Lines containing failures of 2.57.121.19
Oct  7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2
Oct  7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth]
Oct  7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth]
Oct  7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2
Oct  7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth]
Oct  7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth]
Oct  7 1........
------------------------------
2020-10-09 01:30:56
2.57.121.19 attackspambots
Lines containing failures of 2.57.121.19
Oct  7 12:37:11 nextcloud sshd[23963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:37:13 nextcloud sshd[23963]: Failed password for r.r from 2.57.121.19 port 47782 ssh2
Oct  7 12:37:13 nextcloud sshd[23963]: Received disconnect from 2.57.121.19 port 47782:11: Bye Bye [preauth]
Oct  7 12:37:13 nextcloud sshd[23963]: Disconnected from authenticating user r.r 2.57.121.19 port 47782 [preauth]
Oct  7 12:53:35 nextcloud sshd[26770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.121.19  user=r.r
Oct  7 12:53:37 nextcloud sshd[26770]: Failed password for r.r from 2.57.121.19 port 38478 ssh2
Oct  7 12:53:37 nextcloud sshd[26770]: Received disconnect from 2.57.121.19 port 38478:11: Bye Bye [preauth]
Oct  7 12:53:37 nextcloud sshd[26770]: Disconnected from authenticating user r.r 2.57.121.19 port 38478 [preauth]
Oct  7 1........
------------------------------
2020-10-08 17:27:23
2.57.121.112 attack
Port scanning [4 denied]
2020-09-09 01:22:45
2.57.121.112 attack
Port scanning [4 denied]
2020-09-08 16:49:23
2.57.121.203 attackbots
Unauthorized connection attempt detected from IP address 2.57.121.203 to port 23
2020-07-22 22:08:19
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.57.121.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49045
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.57.121.249.			IN	A

;; AUTHORITY SECTION:
.			209	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 21:48:41 CST 2022
;; MSG SIZE  rcvd: 105
Host info
249.121.57.2.in-addr.arpa domain name pointer host249.teeatop.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
249.121.57.2.in-addr.arpa	name = host249.teeatop.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
129.28.169.185 attackspambots
2020-09-04T13:56:15.642650n23.at sshd[1424082]: Invalid user julio from 129.28.169.185 port 45658
2020-09-04T13:56:17.166361n23.at sshd[1424082]: Failed password for invalid user julio from 129.28.169.185 port 45658 ssh2
2020-09-04T14:07:19.525595n23.at sshd[1432736]: Invalid user shahid from 129.28.169.185 port 42830
...
2020-09-05 02:44:49
162.247.74.213 attackbotsspam
Sep  4 11:15:30 mockhub sshd[10301]: Failed password for root from 162.247.74.213 port 34682 ssh2
Sep  4 11:15:44 mockhub sshd[10301]: error: maximum authentication attempts exceeded for root from 162.247.74.213 port 34682 ssh2 [preauth]
...
2020-09-05 02:52:22
14.241.245.179 attackspambots
SSH BruteForce Attack
2020-09-05 02:42:14
35.232.241.208 attackbotsspam
2020-09-04T18:31:14.824465abusebot-4.cloudsearch.cf sshd[12423]: Invalid user drcom from 35.232.241.208 port 37842
2020-09-04T18:31:14.831832abusebot-4.cloudsearch.cf sshd[12423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.241.232.35.bc.googleusercontent.com
2020-09-04T18:31:14.824465abusebot-4.cloudsearch.cf sshd[12423]: Invalid user drcom from 35.232.241.208 port 37842
2020-09-04T18:31:17.171073abusebot-4.cloudsearch.cf sshd[12423]: Failed password for invalid user drcom from 35.232.241.208 port 37842 ssh2
2020-09-04T18:34:32.703574abusebot-4.cloudsearch.cf sshd[12426]: Invalid user yjlee from 35.232.241.208 port 43982
2020-09-04T18:34:32.712468abusebot-4.cloudsearch.cf sshd[12426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.241.232.35.bc.googleusercontent.com
2020-09-04T18:34:32.703574abusebot-4.cloudsearch.cf sshd[12426]: Invalid user yjlee from 35.232.241.208 port 43982
2020-09-04T18:
...
2020-09-05 02:37:22
105.163.154.230 attackbotsspam
Sep  3 18:45:02 mellenthin postfix/smtpd[20408]: NOQUEUE: reject: RCPT from unknown[105.163.154.230]: 554 5.7.1 Service unavailable; Client host [105.163.154.230] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/105.163.154.230; from= to= proto=ESMTP helo=<[105.163.154.230]>
2020-09-05 02:36:06
201.218.81.117 attackspam
REQUESTED PAGE: /wp-login.php
2020-09-05 02:42:30
132.145.128.157 attackspambots
(sshd) Failed SSH login from 132.145.128.157 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  4 14:05:39 server5 sshd[28890]: Invalid user gj from 132.145.128.157
Sep  4 14:05:39 server5 sshd[28890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.128.157 
Sep  4 14:05:41 server5 sshd[28890]: Failed password for invalid user gj from 132.145.128.157 port 33810 ssh2
Sep  4 14:20:20 server5 sshd[6476]: Invalid user ab from 132.145.128.157
Sep  4 14:20:20 server5 sshd[6476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.128.157
2020-09-05 02:56:34
111.229.132.48 attackbotsspam
Invalid user wanglj from 111.229.132.48 port 49092
2020-09-05 02:49:54
45.141.84.87 attackbots
45.141.84.87 - - [11/Jul/2020:15:09:03 +0000] "\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr" 400 166 "-" "-"
2020-09-05 02:48:36
106.54.133.103 attackspam
Invalid user prueba from 106.54.133.103 port 38544
2020-09-05 03:08:40
118.163.4.200 attackspam
Scanning an empty webserver with deny all robots.txt
2020-09-05 02:58:35
210.212.237.67 attackbots
Sep  4 15:23:05 gw1 sshd[15141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.212.237.67
Sep  4 15:23:06 gw1 sshd[15141]: Failed password for invalid user postgres from 210.212.237.67 port 53926 ssh2
...
2020-09-05 03:11:48
72.19.12.144 attackbots
72.19.12.144 has been banned for [spam]
...
2020-09-05 02:46:32
61.7.240.185 attackbotsspam
2020-08-30 19:48:16,983 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 61.7.240.185
2020-08-30 20:05:01,030 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 61.7.240.185
2020-08-30 20:21:40,728 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 61.7.240.185
2020-08-30 20:38:21,318 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 61.7.240.185
2020-08-30 20:54:46,522 fail2ban.actions        [1312]: NOTICE  [sshd] Ban 61.7.240.185
...
2020-09-05 03:05:20
219.136.249.151 attack
Sep  4 11:23:59 ny01 sshd[27016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.136.249.151
Sep  4 11:24:01 ny01 sshd[27016]: Failed password for invalid user usuario from 219.136.249.151 port 32236 ssh2
Sep  4 11:27:32 ny01 sshd[27796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.136.249.151
2020-09-05 02:40:55

Recently Reported IPs

187.167.181.174 49.234.43.244 206.189.53.136 196.1.235.198
31.59.202.80 8.45.42.239 45.155.6.185 91.204.251.156
197.32.228.106 123.185.86.3 2.85.240.120 189.136.139.35
175.5.13.76 66.245.193.161 186.33.83.205 45.112.251.59
49.48.17.83 109.197.162.45 51.75.206.209 117.111.14.224