JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

157.254.221.161

Neutral Activity

Abuse confidence score ?

0% Low Risk

79 reports

32 reporters · latest 1 month ago

ISP	Internet Utilities NA LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14315
Domain Name	iana.org
Country	🇺🇸 United States of America
City	Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 157.254.221.161

This IP address has been reported a total of 79 times from 32 distinct sources. 157.254.221.161 was first reported on March 13th 2026, and the most recent report was 1 month ago. In the last 60 days, the only reporter location was: India with 1 report. The most common categories in these recent reports were: SSH 1 time; Hacking 1 time; Brute-Force 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-08-15 07:06:21 (1 month ago)	Confirmed malicious by STILWaters CTI platform (score=98, sources=1)	Hacking Brute-Force SSH
🇩🇪 www.Examensfragen.de	2026-05-31 02:13:51 (3 months ago)		Web Spam Bad Web Bot
🇦🇺 FireGuard Server	2026-05-28 06:10:05 (3 months ago)	Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=443	Port Scan Hacking
🇧🇷 vfAcceloReporter	2026-05-28 01:25:14 (3 months ago)	157.254.221.161 - - [27/May/2026:22:25:13 -0300] "GET /app/.env HTTP/1.1" 200 1442 "-" "Mozilla/5.0 ... show more 157.254.221.161 - - [27/May/2026:22:25:13 -0300] "GET /app/.env HTTP/1.1" 200 1442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack Exploited Host
🇬🇧 andypiper	2026-05-28 01:01:29 (3 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇧🇷 dominioz	2026-05-28 00:55:43 (3 months ago)	2026-05-28 00:54:52 GET /robots.txt - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Linux;+Android+14;+Pix ... show more 2026-05-28 00:54:52 GET /robots.txt - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Linux;+Android+14;+Pixel+8)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/130.0.0.0+Mobile+Safari/537.36 - 404 1440 2026-05-28 00:54:57 GET /asset-manifest.json - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Brave+Chrome/131.0.0.0+Safari/537.36 - 404 1440 2026-05-28 00:55:04 GET /manifest.json - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Linux;+Android+14;+V2309A)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Mobile+Safari/537.36 - 404 1440 2026-05-28 00:55:10 GET /build-manifest.json - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:132.0)+Gecko/20100101+Firefox/132.0 - 404 1440 ... show less	Web App Attack
🇫🇮 agaesteves	2026-05-28 00:14:40 (3 months ago)	[SISHIPISMO 360] TipoAtaque.PATH_PROBE \| Acesso a path suspeito: /api/env \| Paths: /api/env \| UA: Mo ... show more [SISHIPISMO 360] TipoAtaque.PATH_PROBE \| Acesso a path suspeito: /api/env \| Paths: /api/env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Ve show less	Web App Attack
🇧🇷 SOC PR	2026-05-27 23:28:33 (3 months ago)	IPS: IKE Enforcement Violation.	Hacking
🇧🇷 vfAcceloReporter	2026-05-27 22:17:29 (3 months ago)	157.254.221.161 - - [27/May/2026:19:17:28 -0300] "GET /env.json HTTP/1.1" 502 157 "-" "Mozilla/5.0 ( ... show more 157.254.221.161 - - [27/May/2026:19:17:28 -0300] "GET /env.json HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15" 157.254.221.161 - - [27/May/2026:19:17:28 -0300] "GET /swagger.json HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" 157.254.221.161 - - [27/May/2026:19:17:28 -0300] "GET /config.json HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Linux; Android 15; Pixel 9 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 157.254.221.161 - - [27/May/2026:19:17:28 -0300] "GET /app-config.json HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Linux; Android 14; V2309A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36" 157.254.221.161 - - [27/May/2026:19:17:28 -0300] "GET /api/v1/env HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ... show less	Brute-Force Web App Attack Exploited Host
🇬🇧 consul.to	2026-05-27 20:14:25 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 Halux	2026-05-27 17:39:07 (3 months ago)	157.254.221.161 Probing protected path or service	Web App Attack
Anonymous	2026-05-27 14:35:05 (3 months ago)	157.254.221.161 - - [27/May/2026:11:35:04 -0300] "GET /.env.development HTTP/1.1" 403 186 "-" "Mozil ... show more 157.254.221.161 - - [27/May/2026:11:35:04 -0300] "GET /.env.development HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/131.0.0.0 Mobile Safari/537.36 AliApp(DingTalk/7.5.30) com.alibaba.android.rimet/35900215 Channel/201200" 157.254.221.161 - - [27/May/2026:11:35:04 -0300] "GET /admin/.env HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.254.221.161 - - [27/May/2026:11:35:04 -0300] "GET /.env.old HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" 157.254.221.161 - - [27/May/2026:11:35:04 -0300] "GET /.env.staging HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 157.254.221.161 - - [27/May/2026:11:35:04 -0300] "GET /public/.env HTTP/1.1" 403 125 "-" "Mozilla/5.0 (iPad; CPU OS 17_7 lik ... show less	Port Scan
🇧🇷 dominioz	2026-05-27 12:02:30 (3 months ago)	2026-05-27 12:01:45 GET /vault.env - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS ... show more 2026-05-27 12:01:45 GET /vault.env - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.1+Safari/605.1.15 - 301 676 2026-05-27 12:01:47 GET /config.env - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(iPad;+CPU+OS+18_1+like+Mac+OS+X)+AppleWebKit/605.1.15+(KHTML,+like+Gecko)+Version/18.1+Mobile/15E148+Safari/604.1 - 301 678 2026-05-27 12:01:47 GET /.git/config - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Linux;+Android+14;+SM-S921B)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Mobile+Safari/537.36 - 301 680 2026-05-27 12:01:47 GET /.env - - 157.254.221.161 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/130.0.0.0+Safari/537.36 - 301 666 ... show less	Web App Attack
🇺🇸 paulo.apoloni	2026-05-27 10:24:12 (3 months ago)	157.254.221.161 - - [27/May/2026:07:24:12 -0300] "GET /.env.test HTTP/1.1" 404 181 "-" "Mozilla/5.0 ... show more 157.254.221.161 - - [27/May/2026:07:24:12 -0300] "GET /.env.test HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 157.254.221.161 - - [27/May/2026:07:24:12 -0300] "GET /.env.backup HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 157.254.221.161 - - [27/May/2026:07:24:12 -0300] "GET /.docker/config.json HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" 157.254.221.161 - - [27/May/2026:07:24:12 -0300] "GET /.env.staging HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" 157.254.221.161 - - [27/May/2026:07:24:12 -0300] "GET /.env.production HTTP/1.1" 404 118 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_6_1 like Mac OS X) AppleWebKit/605.1.15 ... show less	Web App Attack
🇺🇸 xpto	2026-05-27 07:33:32 (3 months ago)	Blocked for probing for web application vulnerabilities	Web App Attack

Showing 1 to 15 of 79 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.101.201.93

🇺🇸 209.101.151.38

🇺🇸 209.101.151.30

🇬🇧 77.102.114.5

🇷🇴 2.57.121.112

🇨🇳 222.174.184.86

🇺🇸 209.101.151.151

🇺🇸 209.101.149.223

🇺🇸 209.101.149.6

🇸🇬 193.37.32.54

🇩🇪 185.222.240.15

🇺🇸 162.216.149.242

🇹🇼 162.158.243.66

🇺🇸 154.59.103.17

🇻🇳 103.252.123.105

🇰🇪 102.206.97.10

🇺🇸 73.149.216.33

🇺🇸 66.132.186.196

🇺🇸 38.104.167.221

🇰🇼 37.39.196.7