2.57.122.191

Classification: Malicious

2.57.122.191 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-05. Network: AS47890 TECHOFF SRV LIMITED.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Known attacker Blocklist.de 2026-03-22 11:00:08 2026-09-05 15:00:10 attacker malicious-activity
SSH Attacker Blocklist.de 2024-12-06 11:52:49 2026-09-05 14:00:35 attacker malicious-activity
Malicious Host AbuseIPDB 2024-12-06 23:09:24 2026-06-05 22:24:24 compromised malicious-activity
Malicious Host HoneyDB 2026-03-14 00:00:00 2026-05-14 00:00:00 malicious-activity
Bruteforce AbuseIPDB 2024-12-12 06:15:17 2026-04-14 00:06:26 malicious-activity
SSH Attacker AbuseIPDB 2024-12-12 06:15:17 2026-04-14 00:06:26 malicious-activity
Port Scanner AbuseIPDB 2024-12-12 15:14:26 2026-04-13 23:56:52 anomalous-activity
Hacking AbuseIPDB 2024-12-14 00:15:50 2026-04-13 23:24:22 malicious-activity
HTTP Attacker AbuseIPDB 2024-12-14 00:22:20 2026-04-13 22:07:55 malicious-activity
HTTP Scrapper AbuseIPDB 2025-01-07 13:50:21 2026-04-13 19:48:29 anomalous-activity
Known Attacker AbuseIPDB 2026-04-09 22:20:11 2026-04-13 17:45:33 malicious-activity
Mail Spammer AbuseIPDB 2026-03-14 04:36:02 2026-04-13 17:45:33 malicious-activity
DDoS Attacker AbuseIPDB 2026-03-14 01:02:47 2026-04-13 17:45:33 malicious-activity
FTP Attacker AbuseIPDB 2025-01-09 21:06:45 2026-04-13 05:57:51 malicious-activity
DNS Compromise AbuseIPDB 2026-04-10 05:53:35 2026-04-12 14:16:48 compromised
DNS Poisoning AbuseIPDB 2026-04-10 05:53:35 2026-04-12 14:16:48 compromised
SSH Attacker Blocklist.net.ua 2024-12-13 05:00:15 2025-05-08 14:28:50 malicious-activity
Suspicious Host AbuseIPDB 2025-05-08 03:07:31 2025-05-08 03:07:31 anomalous-activity
Proxy IPWhois.io 2025-02-07 00:39:19 2025-05-04 13:13:48 anonymization
ET COMPROMISED Known Compromised or Hostile Host Traffic UDP Emerging Threats 2024-12-13 22:12:35 2025-03-16 02:06:54 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic TCP Emerging Threats 2024-12-13 22:12:26 2025-03-16 02:06:43 malicious-activity
DDoS attack AbuseIPDB 2025-01-09 16:38:42 2025-03-14 18:29:29 malicious-activity
IMAP Attacker AbuseIPDB 2025-01-07 21:18:12 2025-01-07 21:18:12 malicious-activity
SIP Attacker Blocklist.de 2025-01-05 12:10:45 2025-01-05 12:10:45 malicious-activity
IoT Attacker AbuseIPDB 2024-12-18 05:01:33 2024-12-22 00:02:16 malicious-activity
Malicious Host CIArmy 2020-08-01 04:22:23 2020-08-16 03:55:14
ET CINS Active Threat Intelligence Poor Reputation IP UDP Emerging Threats 2020-08-05 05:08:12 2020-08-13 09:03:23
ET CINS Active Threat Intelligence Poor Reputation IP TCP Emerging Threats 2020-08-05 05:08:11 2020-08-13 09:03:22

Tags

ssh bruteforce bot abuse sip attacker strong+attacker

Whois information

AS name
AS47890 TECHOFF SRV LIMITED
AS registry
ripencc
AS date
2019-03-19 00:00:00
AS CIDR
2.57.122.0/24
Registrant
TECHOFF SRV LIMITED
City
Timisoara
Postal code
300574
Country
RO — Romania 🇷🇴
First indexed
2020-08-01 04:22:23
Last updated
2026-09-05 15:00:10

Malicious IPs in the same CIDR

2.57.122.195 2.57.122.197 2.57.122.206 2.57.122.199 2.57.122.74 2.57.122.73 2.57.122.238 2.57.122.53 2.57.122.189 2.57.122.194 2.57.122.190 2.57.122.196 2.57.122.210 2.57.122.26 2.57.122.57 2.57.122.192 2.57.122.209 2.57.122.202 2.57.122.150 2.57.122.234 2.57.122.188 2.57.122.193 2.57.122.208 2.57.122.191 2.57.122.13