160.251.255.178
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- GMO Internet, Inc.
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS58791
- Domain Name
- gmo.jp
- Country
- 🇯🇵 Japan
- City
- Tokyo, Tokyo
Abuse Reports
Total reports
31 from
30 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 www.winos.me |
Shield: Layer4 Port 9 Trap
|
Port Scan Hacking | |
| 🇺🇸 mjerezarjona |
Web scan probing for secret files such as .env and .git, detected by fail2ban
|
Web App Attack Bad Web Bot | |
| 🇩🇪 IVski.com |
IVski WAF | Sensitive file probe - looking for exposed .git/config
|
Hacking Brute-Force Web App Attack | |
| Anonymous |
160.251.255.178 - - [08/Nov/2026:06:46:53 +0000] "GET /.git/config HTTP/1.1" 503 5349 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
...
|
Bad Web Bot Web App Attack | |
| 🇯🇵 pixelboost.kr |
160.251.255.178 - - [08/Nov/2026:10:06:20 +0900] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
...
|
Bad Web Bot Web App Attack | |
| Anonymous |
"GET /.git/config HTTP/1.1"
|
Hacking Web App Attack | |
| 🇺🇸 lnklnx |
www.lnklnx.com:80 160.251.255.178 - - [07/Nov/2026:17:59:04 -0600] "GET /.git/config HTTP/1.1" 301 563 "-" "Mozilla/5.0 (compatible; Scanner/1.0)"
...
|
Web App Attack | |
| 🇮🇩 Burayot |
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 160.251.255.178 (JP/Japan/v160-251-255-178.c8kt.static.cnode.jp): 1 in the last 3600 secs
|
Web App Attack | |
| Anonymous |
Fail2Ban jail zimbra-uri detected and blocked malicious activity against our mail server.
|
Hacking Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.git/config | seen at 2026-11-07 19:54:37.502 |
|
Web App Attack | |
| Anonymous |
|
Web App Attack | |
| Anonymous |
[server.dsamoodle.de] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.git/config | /.git/config | fast_lane=true kernel_at=2026-11-07T18:44:30+00:00
|
Hacking Web App Attack | |
| 🇩🇪 Enno |
P38::Fail2Ban: automated bot scanning / credential probing detected.
|
Web App Attack Bad Web Bot | |
| 🇩🇪 PBC |
Automated web exploit scan blocked by fail2ban
|
Brute-Force SSH | |
| 🇳🇱 enpepet |
GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (compatible; Scanner/1.0) URL:/.git/config
|
Port Scan Hacking Brute-Force Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown