JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 205.169.39.57

205.169.39.57 was found in our database!

This IP was reported 139 times. Confidence of Abuse is 100%: ?

100%

ISP	Palo Alto Networks, Inc
Usage Type	Fixed Line ISP
ASN	AS3356
Domain Name	paloaltonetworks.com
Country	🇺🇸 United States of America
City	Dallas, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 205.169.39.57

Whois 205.169.39.57

IP Abuse Reports for 205.169.39.57:

This IP address has been reported a total of 139 times from 81 distinct sources. 205.169.39.57 was first reported on May 21st 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 neron	2026-07-29 02:19:38 (6 hours ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇫🇷 cityhunter_rhone	2026-07-28 23:30:04 (9 hours ago)	Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=1 \| events=1 \| decision=residential ... show more Mercurius Guide auto detection \| source=Fail2Ban \| scraper score=1 \| events=1 \| decision=residential \| actions=fingerprint_visit \| last_seen=2026-07-29 01:29:42 show less	Bad Web Bot Web App Attack
Anonymous	2026-07-28 09:20:43 (23 hours ago)	FortiWeb WAF: 2 attacks detected. Threat Score: 8600. Types: Client Management(1), Block IP List(1). ... show more FortiWeb WAF: 2 attacks detected. Threat Score: 8600. Types: Client Management(1), Block IP List(1). Origin: United States. show less	Web App Attack
🇹🇷 neron	2026-07-28 02:19:38 (1 day ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 NxtGenIT	2026-07-27 23:42:07 (1 day ago)	Honeytrap Honeypot hit	FTP Brute-Force
🇬🇷 setupgr	2026-07-27 13:24:50 (1 day ago)	(mod_security) mod_security (id:9999001) triggered by 205.169.39.57 (US/United States/California/San ... show more (mod_security) mod_security (id:9999001) triggered by 205.169.39.57 (US/United States/California/Santa Clara/-/[AS3356 LEVEL3]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Jul 27 16:24:49.760947 2026] [security2:error] [pid 2853:tid 474035] [remote 205.169.39.57:28908] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^154\\\\.57\\\\.7\\\\.73$" at REQUEST_HEADERS:Host. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "155"] [id "9999001"] [msg "Direct incoming request to server shared IP blocked by admin"] [hostname "154.57.7.73"] [uri "/"] [unique_id "amdcIfFIolyV7ghpwC0xKAACwBo"], referer: https://bing.com/ show less	Port Scan
🇹🇷 neron	2026-07-26 19:50:50 (2 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 Victor López	2026-07-26 11:04:58 (2 days ago)	82.197.66.178 205.169.39.57 - - [26/Jul/2026:06:04:54 -0500] "GET / HTTP/1.1" 444 0 "https://bing.co ... show more 82.197.66.178 205.169.39.57 - - [26/Jul/2026:06:04:54 -0500] "GET / HTTP/1.1" 444 0 "https://bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" - 82.197.66.178 205.169.39.57 - - [26/Jul/2026:06:04:55 -0500] "GET / HTTP/1.1" 444 0 "https://bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" - 82.197.66.178 205.169.39.57 - - [26/Jul/2026:06:04:58 -0500] "GET / HTTP/1.1" 444 0 "https://bing.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" - ... show less	Hacking Web App Attack
Anonymous	2026-07-26 09:19:31 (2 days ago)	FortiWeb WAF: 82 attacks detected. Threat Score: 10600. Types: Client Management(41), Block IP List( ... show more FortiWeb WAF: 82 attacks detected. Threat Score: 10600. Types: Client Management(41), Block IP List(41). Origin: United States. show less	Web App Attack
🇮🇩 bps-statistics	2026-07-25 19:00:17 (3 days ago)	Web Application Attacks	Web App Attack
Anonymous	2026-07-25 05:41:00 (4 days ago)	"Packet Flood; Triggered WAF; Persistent 404 Attempts"	DDoS Attack
🇫🇷 MatStef132	2026-07-24 16:27:14 (4 days ago)	MatShield L7: blocked on mathost.eu (chrome-ua-hint-missing)	DDoS Attack
🇹🇷 neron	2026-07-24 15:30:03 (4 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 anti-res	2026-07-23 15:24:03 (5 days ago)	Attempt of unauthorized access	Port Scan Bad Web Bot Web App Attack
🇬🇧 Dominicwu	2026-07-23 09:43:04 (5 days ago)	2026-07-23T09:42:55.799914uklite-202607141837480ec330 kernel: [773688.205212] F2B-PORTSCAN IN=eth0 O ... show more 2026-07-23T09:42:55.799914uklite-202607141837480ec330 kernel: [773688.205212] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:43:f1:56:1c:07:36:20:77:08:00 SRC=205.169.39.57 DST=212.135.38.212 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=48427 DF PROTO=TCP SPT=12479 DPT=80 WINDOW=64860 RES=0x00 SYN URGP=0 2026-07-23T09:42:55.803655uklite-202607141837480ec330 kernel: [773688.205899] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:43:f1:56:1c:07:36:20:77:08:00 SRC=205.169.39.57 DST=212.135.38.212 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=13110 DF PROTO=TCP SPT=35331 DPT=80 WINDOW=64860 RES=0x00 SYN URGP=0 2026-07-23T09:42:56.851770uklite-202607141837480ec330 kernel: [773689.256837] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:43:f1:56:1c:07:36:20:77:08:00 SRC=205.169.39.57 DST=212.135.38.212 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=48428 DF PROTO=TCP SPT=12479 DPT=80 WINDOW=64860 RES=0x00 SYN URGP=0 2026-07-23T09:42:56.851924uklite-202607141837480ec330 kernel: [773689.257119] F2B-PORTSCAN IN=eth0 OUT= MAC=bc:24:11:2c:4 ... show less	Port Scan

Showing 1 to 15 of 139 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 193.124.20.226

🇧🇷 179.189.85.66

🇻🇳 171.231.199.135

🇦🇴 193.163.125.213

🇳🇱 192.142.28.77

🇧🇷 191.5.68.173

🇸🇬 165.22.57.22

🇪🇸 158.158.32.229

🇺🇸 143.198.100.88

🇫🇷 91.231.89.156

🇳🇱 89.106.86.8

🇺🇸 71.6.146.185

🇩🇪 69.5.169.227

🇩🇪 69.5.169.179

🇩🇪 69.5.169.5

🇺🇸 47.251.142.244

🇬🇧 35.203.210.83

🇭🇰 199.45.155.81

🇦🇺 180.150.104.65

🇮🇩 163.7.5.228