102.207.138.245

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
80% Critical
25 reports
15 reporters · latest 7 hours ago
ISP
Block138
Usage Type
Fixed Line ISP
ASN
AS329503
Hostname(s)
host-102-207-138-245.ngcomls.com
Domain Name
ngcomnetworks.com
Country
🇳🇬 Nigeria
City
Port Harcourt, Rivers State
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 15 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 9 🇫🇷 France 3 🇧🇷 Brazil 2
Most common categories Brute-Force 13 Port Scan 9 IoT Targeted 8 Hacking 4 Web App Attack 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Telnet Login Attempt (23/tcp)
Port Scan SSH
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇺🇸 wristhulk
Honeypot: 152 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (12 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'root' Password: 'root'. (14 attempts)
Brute-Force IoT Targeted
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
Anonymous
Remote command execution attempt.
Hacking
🇺🇸 wristhulk
Honeypot: 167 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (13 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'admin' Password: '123456789'. (13 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: 240 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (23 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'admin' Password: '1q2w3e'. (20 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: 20 Telnet connection probes in 1 hour on Cowrie honeypot (port 23). No credentials — banner grabber / IoT scanner. (118 attempts)
Brute-Force IoT Targeted
🇺🇸 wristhulk
Honeypot: credential brute-force on Cowrie Telnet honeypot (port 23). Username: 'root' Password: 'root'. (3 attempts)
Brute-Force IoT Targeted
🇪🇸 librebit
Brute force
Brute-Force
🇫🇮 dnsbd.tech
nftables: Port scan (TCP:23) [srv2]
Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:59185 dst:23
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 167.99.15.251
🇺🇸 152.163.101.74
🇺🇸 34.148.17.138
🇰🇷 119.204.122.94
🇩🇪 109.160.32.129
🇮🇳 103.147.248.44
🇨🇦 85.217.149.72
🇵🇹 82.155.16.50
🇮🇳 69.57.172.207
🇺🇸 66.132.172.250
🇹🇳 41.226.65.180
🇺🇸 205.210.31.68
🇮🇷 185.3.202.24
🇺🇸 152.163.101.128
🇩🇪 109.160.32.45
🇺🇸 95.135.204.199
feedback