2.57.254.249 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Austria

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
2.57.254.235	attack	5x Failed Password	2020-04-30 13:40:21
2.57.254.26	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541256fb4bd6eb08 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: US \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:54:15
2.57.254.210	attackspam	Dec 2 05:23:01 gw1 sshd[21977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.254.210 Dec 2 05:23:04 gw1 sshd[21977]: Failed password for invalid user hack from 2.57.254.210 port 41336 ssh2 ...	2019-12-02 08:46:23
2.57.254.27	attack	Sep 21 19:35:53 webhost01 sshd[16936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.57.254.27 Sep 21 19:35:55 webhost01 sshd[16936]: Failed password for invalid user weenie from 2.57.254.27 port 46778 ssh2 ...	2019-09-21 20:53:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.57.254.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50111
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.57.254.249.			IN	A

;; AUTHORITY SECTION:
.			272	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 12:49:31 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 249.254.57.2.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.254.57.2.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
183.88.16.210	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 29-01-2020 04:55:14.	2020-01-29 14:02:28
119.254.12.66	attackspam	Jan 29 06:24:31 meumeu sshd[11219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.254.12.66 Jan 29 06:24:33 meumeu sshd[11219]: Failed password for invalid user kise from 119.254.12.66 port 40960 ssh2 Jan 29 06:27:48 meumeu sshd[11778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.254.12.66 ...	2020-01-29 13:34:00
200.194.28.116	attackbotsspam	Jan 29 06:01:54 sso sshd[2331]: Failed password for root from 200.194.28.116 port 55244 ssh2 Jan 29 06:01:56 sso sshd[2331]: Failed password for root from 200.194.28.116 port 55244 ssh2 ...	2020-01-29 13:39:58
218.94.23.130	attackspam	3389BruteforceFW23	2020-01-29 13:47:04
13.251.170.198	attackbots	RDP Bruteforce	2020-01-29 13:35:12
117.69.46.208	attack	Jan 29 05:55:32 grey postfix/smtpd\[14664\]: NOQUEUE: reject: RCPT from unknown\[117.69.46.208\]: 554 5.7.1 Service unavailable\; Client host \[117.69.46.208\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=117.69.46.208\; from=\ to=\ proto=SMTP helo=\ ...	2020-01-29 13:50:10
196.52.43.128	attackbots	Unauthorized connection attempt detected from IP address 196.52.43.128 to port 8530 [J]	2020-01-29 13:31:41
60.48.119.231	attack	Automatic report - Port Scan Attack	2020-01-29 13:31:23
112.85.42.172	attack	Jan 29 07:03:29 odroid64 sshd\[11481\]: User root from 112.85.42.172 not allowed because not listed in AllowUsers Jan 29 07:03:30 odroid64 sshd\[11481\]: Failed none for invalid user root from 112.85.42.172 port 34401 ssh2 ...	2020-01-29 14:04:07
47.74.148.51	attackspambots	Jan 29 06:38:46 markkoudstaal sshd[656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.148.51 Jan 29 06:38:49 markkoudstaal sshd[656]: Failed password for invalid user emilie from 47.74.148.51 port 58508 ssh2 Jan 29 06:42:55 markkoudstaal sshd[1340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.148.51	2020-01-29 13:54:21
122.51.223.155	attack	Unauthorized connection attempt detected from IP address 122.51.223.155 to port 2220 [J]	2020-01-29 13:22:42
156.96.153.17	attack	Jan 28 19:18:56 php1 sshd\[18191\]: Invalid user banasri from 156.96.153.17 Jan 28 19:18:56 php1 sshd\[18191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.153.17 Jan 28 19:18:58 php1 sshd\[18191\]: Failed password for invalid user banasri from 156.96.153.17 port 42174 ssh2 Jan 28 19:21:32 php1 sshd\[18573\]: Invalid user jaipal from 156.96.153.17 Jan 28 19:21:32 php1 sshd\[18573\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.153.17	2020-01-29 13:30:22
200.133.39.24	attackbots	Jan 29 06:18:37 meumeu sshd[10281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.133.39.24 Jan 29 06:18:39 meumeu sshd[10281]: Failed password for invalid user kuja from 200.133.39.24 port 43380 ssh2 Jan 29 06:21:06 meumeu sshd[10657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.133.39.24 ...	2020-01-29 13:24:31
216.244.66.229	attackspambots	Automated report (2020-01-29T05:21:26+00:00). Misbehaving bot detected at this address.	2020-01-29 13:56:34
180.241.44.96	attackspambots	SSH bruteforce (Triggered fail2ban)	2020-01-29 13:40:33

Recently Reported IPs

135.244.43.178	1.10.226.74	1.0.209.233	1.14.108.182
1.116.10.150	1.13.171.131	1.1.202.130	1.0.225.189
1.116.141.185	1.10.215.252	1.10.252.214	1.14.30.235
1.1.247.167	1.156.18.156	1.1.245.65	1.160.240.142
1.160.24.14	1.161.105.34	1.161.131.126	1.160.204.177