JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

102.220.162.137

Recent Activity

Abuse Confidence Score

100% Critical

321 reports

227 reporters · latest 5 minutes ago

ISP: Internet
Usage Type: Data Center/Web Hosting/Transit
ASN: AS197769
Domain Name: flashwisp.com.ng
Country: 🇩🇪 Germany
City: Thyrnau, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

321 from 227 distinct reporters

First reported

November 2nd 2026

Most recent report

5 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 89 🇺🇸 United States of America 53 🇫🇷 France 32

Most common categories Web App Attack 213 Port Scan 78 Bad Web Bot 77 Hacking 58 Brute-Force 57

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 lns.bz	2026-11-07 01:21:17 UTC · (5 minutes ago)	.env scanning [BY]	Web App Attack
🇬🇧 innovacommunications	2026-11-07 01:15:03 UTC · (11 minutes ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇳🇱 Alt255	2026-11-07 01:00:08 UTC · (26 minutes ago)	[cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 102.220.162.137 - - [07/Nov/2026:01:59:48 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Ap ... show more [cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 102.220.162.137 - - [07/Nov/2026:01:59:48 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 102.220.162.137 - - [07/Nov/2026:01:59:48 +0100] "GET /.git/HEAD HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 102.220.162.137 - - [07/Nov/2026:01:59:48 +0100] "GET //.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124 ... show less	Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-11-07 00:48:58 UTC · (37 minutes ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
Anonymous	2026-11-07 00:38:26 UTC · (47 minutes ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇩🇪 tvipper.com	2026-11-06 23:15:14 UTC · (2 hours ago)	probing for exposed files and admin pages: 66 attempts within 10 minutes, seen by Cloudflare WAF (reported by RemotePower)	Web App Attack
🇫🇷 SpaceHost-Server	2026-11-06 23:14:06 UTC · (2 hours ago)		Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 22:48:35 UTC · (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 102.220.162.137 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:48:18.767825 2026] [security2:error] [pid 32432:tid 32432] [client 102.220.162.137:0] M ... show more (mod_security) mod_security (id:210492) triggered by 102.220.162.137 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:48:18.767825 2026] [security2:error] [pid 32432:tid 32432] [client 102.220.162.137:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luisguacache.com"] [uri "/.env"] [unique_id "au5ZMpb04K6HfDHI_FtUQAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 altenglaner	2026-11-06 22:10:38 UTC · (3 hours ago)	Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.	Hacking Web App Attack
🇩🇪 snhosting	2026-11-06 21:41:17 UTC · (3 hours ago)	102.220.162.137 - - [06/Nov/2026:22:40:59 +0100] "GET /.env HTTP/1.1" 505 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124. ... show more 102.220.162.137 - - [06/Nov/2026:22:40:59 +0100] "GET /.env HTTP/1.1" 505 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 102.220.162.137 - - [06/Nov/2026:22:40:59 +0100] "GET /.git/HEAD HTTP/1.1" 505 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 102.220.162.137 - - [06/Nov/2026:22:41:00 +0100] "GET //.env.backup HTTP/1.1" 505 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safari/537.36" 102.220.162.137 - - [06/Nov/2026:22:41:00 +0100] "GET //.env.bak HTTP/1.1" 505 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇺🇸 borgsquared	2026-11-06 20:39:14 UTC · (4 hours ago)	102.220.162.137 - - [06/Nov/2026:20:39:12 +0000] "GET /.env HTTP/2.0" 404 36 "-" "-" 16925 "emby@docker" "http://172.17.0.25:8096" 1ms 102.220.162.137 - - [06/Nov/2026:20:39:13 +0000] "GET /.git/HEAD HTTP/2.0" 404 41 "-" "-" 16926 "emby@docker" "http ... show more 102.220.162.137 - - [06/Nov/2026:20:39:12 +0000] "GET /.env HTTP/2.0" 404 36 "-" "-" 16925 "emby@docker" "http://172.17.0.25:8096" 1ms 102.220.162.137 - - [06/Nov/2026:20:39:13 +0000] "GET /.git/HEAD HTTP/2.0" 404 41 "-" "-" 16926 "emby@docker" "http://172.17.0.25:8096" 1ms 102.220.162.137 - - [06/Nov/2026:20:39:13 +0000] "GET /.env HTTP/2.0" 404 36 "-" "-" 16931 "emby@docker" "http://172.17.0.25:8096" 1ms 102.220.162.137 - - [06/Nov/2026:20:39:13 +0000] "GET /.env HTTP/2.0" 404 36 "-" "-" 16932 "emby@docker" "http://172.17.0.25:8096" 1ms 102.220.162.137 - - [06/Nov/2026:20:39:13 +0000] "GET /.env HTTP/2.0" 404 36 "-" "-" 16933 "emby@docker" "http://172.17.0.25:8096" 1ms ... show less	Brute-Force Web App Attack
🇩🇪 raph	2026-11-06 20:28:18 UTC · (4 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
Anonymous	2026-11-06 19:36:48 UTC · (5 hours ago)	102.220.162.137 - - [06/Nov/2026:20:36:47 +0100] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://) Chrome/124.0.0.0 Safari/53 ... show more 102.220.162.137 - - [06/Nov/2026:20:36:47 +0100] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack
🇸🇬 simpeg-adm.bandung.go.id	2026-11-06 18:40:13 UTC · (6 hours ago)	06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.env" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.env" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.git/HEAD" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.git/HEAD" 06/Nov/2026:18:40:12 +0000;102.220.1 ... show more 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.env" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.env" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.git/HEAD" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"/.git/HEAD" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"-" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"-" 06/Nov/2026:18:40:12 +0000;102.220.162.137;"-" ... show less	Web Spam Brute-Force Web App Attack
🇵🇱 Budyn	2026-11-06 18:11:43 UTC · (7 hours ago)	[Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: admin.budyn.top \| Path: /.env \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ... show more [Budyn Honeypot Sinkhole] \| Attack type: Enterprise & Framework Recon Scanner \| Summary: Web scanner triggered an emulated security trap. \| Evidence: \| Host: admin.budyn.top \| Path: /.env \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko, Yokohama Institute of Information Security https://www.iisec.ac.jp) Chrome/124.0.0.0 Safar... \| Request: [Empty / GET Request] show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 321 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 209.99.190.186

🇬🇧 193.176.29.6

🇳🇱 192.42.116.64

🇦🇷 186.18.161.146

🇳🇱 185.218.86.4

🇫🇷 91.231.89.231

🇳🇱 86.38.187.107

🇳🇱 192.42.116.44

🇨🇴 190.60.44.147

🇫🇮 147.185.133.24

🇻🇳 103.149.86.208

🇮🇹 94.163.13.251

🇷🇺 87.117.58.94

🇸🇪 83.254.172.36

🇧🇬 79.124.59.10

🇵🇱 45.227.253.209

🇫🇷 212.18.113.152

🇸🇬 202.76.172.63

🇮🇷 185.128.138.182

🇨🇳 183.222.174.168