157.254.194.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Internet Utilities NA LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS399486
- Domain Name
- iana.org
- Country
- 🇺🇸 United States of America
- City
- Edison, New Jersey
Abuse Reports
Total reports
12 from
11 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 SA19999 |
Auto-report: cwp:attack_Laravel framework Information | sources=["cwp"] | Fox honeypot cluster
|
Web App Attack | |
| 🇺🇸 sarphim |
[Blackhive Honeypot] Web attack probe on port 80: GET /.git/config HTTP/1.1
|
Web App Attack Bad Web Bot | |
| 🇸🇬 spydithreatintel |
Web honeypot: 22 HTTP request(s) incl. rce, secret-probe. Example: GET /.git/config
|
Hacking Web App Attack | |
| 🇺🇦 tank.zone |
Honeypot (Cowrie SSH/Telnet + HTTP trap): 5 HTTP probes (.env/.git credential scraping).
|
Port Scan Web App Attack | |
| 🇩🇪 GhostnetSystems |
Honeypot Triggered. Trigger: "Recon: sensitive path" (severity: HIGH).
|
Web App Attack Bad Web Bot | |
| 🇨🇦 Sakusen |
Automated web attack: 41 reqs, 25 paths probed, 26 returned 404; probed: 14 .php, 10 .env, 1 .git
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 throny |
|
Hacking Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| 🇩🇪 throny |
Web app exploit probe on a honeypot: requested known vulnerability paths (wp-login.php, .env, .git ...).
Requests within an hour: 1 on 1 host(s)
User agent: python-requests/2.32.5
Requested, e.g.:
- [REDACTED]/.git/config
|
Web App Attack | |
| 🇺🇸 HamSammich |
Automated sensor: 38 HTTP, HTTPS, MySQL brute-force attempts over the last 24h (latest 2026-11-09T01:08Z).
|
Hacking Brute-Force Web App Attack | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 142 request event(s), 40 distinct path(s), 126 request(s) to suspicious path(s). Examples: /.env, /.env.development, /.env.dist, /.env.old, /.env.prod.
|
Hacking Bad Web Bot Web App Attack | |
| 🇫🇷 PhiJai |
Signalement automatique (DEUS NemesisBanisher). fouille : a récupéré un fichier de secrets (/.git/config) ; a réutilisé un identifiant volé (jeton piège).
|
Hacking Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown