102.220.162.172

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
26 reports
26 reporters · latest 3 hours ago
ISP
Internet
Usage Type
Data Center/Web Hosting/Transit
ASN
AS197769
Domain Name
flashwisp.com.ng
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
26 from 26 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 7 🇩🇪 Germany 4 🇧🇷 Brazil 2
Most common categories Port Scan 13 Email Spam 8 Brute-Force 5 Hacking 4 Spoofing 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇺 webserfer
[f2b] smtp: denied by acl [W1:1:90d]
Email Spam Exploited Host
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): host sweep (245 distinct dst hosts)
Port Scan
🇩🇪 Roper123
Postfix RBL
Email Spam
🇧🇷 chronos
SMTP: Connection attempt to the mail transfer service. | Port: 25 | Proto: TCP | AS: AS197769 VPS Dedicated LLC | Location: Slovenia
Port Scan
🇹🇼 tyebstx
Hacking
🇵🇱 ToJa
Email Spam
🇫🇷 uthul
T-Pot honeypot: 17 hits on ports [25] (automated)
Email Spam Port Scan
🇫🇷 aki
PortScan: TCP/25
Port Scan
🇫🇷 thecocasio
PortSentry honeypot: unsolicited TCP connection to closed decoy port 25 (SMTP) on a host running no such service. Automated port-scan detection at 2026-11-13T10:44:18Z.
Port Scan
🇩🇪 ITSNF
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=25
Port Scan Hacking
🇺🇸 HamSammich
Automated sensor: 5 SMTP, SMTP-AUTH, SMTP-relay/spam brute-force attempts over the last 24h (latest 2026-11-13T07:52Z).
Email Spam Brute-Force
🇳🇿 gmills
Nov 13 20:15:08 box postfix/smtpd[60241]: NOQUEUE: reject: RCPT from unknown[102.220.162.172]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<vm-m-cash2> ...
Brute-Force
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/25 (SMTP); 14 application-level events across 2 source port(s). Sensor(s): Mailoney.
Port Scan
🇫🇷 IpdbBot
Relay attempt from IP address
Hacking
🇫🇷 haxwell.de
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.198.240.106
🇺🇸 173.94.192.155
🇺🇸 147.185.132.207
🇰🇪 102.215.15.10
🇺🇸 50.6.206.244
🇳🇱 34.1.237.170
🇰🇷 14.57.186.60
🇸🇳 196.207.235.233
🇮🇹 195.231.37.168
🇧🇷 187.5.20.33
🇷🇺 176.213.200.147
🇷🇺 176.110.133.132
🇸🇮 176.65.134.50
🇭🇰 165.154.73.56
🇺🇸 66.132.186.253
🇳🇱 34.178.50.197
🇰🇷 218.238.5.110
🇩🇪 195.182.16.23
🇦🇷 190.6.249.193
🇺🇸 66.132.172.40
feedback