JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

161.120.217.133

Recent Activity

Abuse Confidence Score

75% Critical

14 reports

14 reporters · latest 1 hour ago

ISP: Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: AS132203
Domain Name: tencentcloud.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

14 from 14 distinct reporters

First reported

November 5th 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 5 🇩🇪 Germany 3 🇦🇲 Armenia 1

Most common categories Web App Attack 14 Hacking 5 Brute-Force 4 Bad Web Bot 2 SSH 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 sms.ru	2026-11-07 14:22:12 UTC · (1 hour ago)	/vendor/.env	Web App Attack
🇧🇾 lns.bz	2026-11-07 13:54:46 UTC · (1 hour ago)	.env scanning [BY]	Web App Attack
🇺🇸 RonnieGas	2026-11-06 23:54:56 UTC · (15 hours ago)	Automated enumeration of configuration and credential files on a public web platform: large bursts of requests for .env variants, .git/config and cloud credential files, from a rotating pool of unrelated hosting networks sharing one user-agent string ... show more Automated enumeration of configuration and credential files on a public web platform: large bursts of requests for .env variants, .git/config and cloud credential files, from a rotating pool of unrelated hosting networks sharing one user-agent string. show less	Web App Attack Hacking
🇩🇪 FD-IX	2026-11-06 23:21:16 UTC · (16 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇳🇱 homeshowdomain.nl	2026-11-06 22:59:53 UTC · (16 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.	Web App Attack SSH Hacking
🇳🇱 Mangelot Hosting	2026-11-06 17:42:58 UTC · (21 hours ago)	(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 161.120.217.133 (DE/Germany/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇩🇪 itsvic.dev	2026-11-06 10:43:33 UTC · (1 day ago)	161.120.217.133 - - [06/Nov/2026:10:43:32 +0000] "social.itsvic.dev" "GET /api/.env HTTP/1.1" 404 443 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 161.120.217.133 - - [06/No ... show more 161.120.217.133 - - [06/Nov/2026:10:43:32 +0000] "social.itsvic.dev" "GET /api/.env HTTP/1.1" 404 443 292 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 161.120.217.133 - - [06/Nov/2026:10:43:32 +0000] "social.itsvic.dev" "GET /api/v1/.env HTTP/1.1" 404 443 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 161.120.217.133 - - [06/Nov/2026:10:43:32 +0000] "social.itsvic.dev" "GET /api/v2/.env HTTP/1.1" 404 443 295 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
Anonymous	2026-11-06 09:28:03 UTC · (1 day ago)	Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.development HTTP/1.1, POST / HTTP/1.1, GET /.env HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.development HTTP/1.1, POST / HTTP/1.1, GET /.env HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇯🇵 S.O.B.A. Dev.	2026-11-06 09:02:59 UTC · (1 day ago)	Web vulnerability scanning	Brute-Force Web Spam Web App Attack
🇦🇲 arm osint	2026-11-06 07:50:55 UTC · (1 day ago)	Automated web vulnerability scanning: 163 HTTP 4xx probes for sensitive paths (/, /.env, /.env.backup, /.env.ci). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.	Web App Attack Brute-Force
🇩🇪 schuerholz	2026-11-06 03:18:04 UTC · (1 day ago)	Web application attack detected by WAF (OWASP CRS, 13 high-volume alert(s) in 24h, e.g. /.env.sample, /.env.dist, /admin/.env). Automated detection.	Web App Attack Hacking
🇳🇱 WeCloudit-Anti-Abuse	2026-11-06 02:46:24 UTC · (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-11-05 10:17:42 UTC · (2 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 Alt255	2026-11-05 10:14:33 UTC · (2 days ago)	[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 161.120.217.133 - - [05/Nov/2026:11:14:24 +0100] "GET /.git/config HTTP/1.1" 301 504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ... show more [ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 161.120.217.133 - - [05/Nov/2026:11:14:24 +0100] "GET /.git/config HTTP/1.1" 301 504 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 200.138.46.242

🇳🇱 195.178.110.242

🇳🇱 109.160.32.44

🇳🇱 77.67.26.184

🇬🇧 46.33.129.232

🇺🇸 43.153.114.203

🇨🇭 209.99.190.186

🇺🇸 174.68.48.77

🇺🇸 172.236.102.48

🇩🇪 147.78.131.226

🇭🇰 107.150.123.48

🇨🇳 106.13.95.77

🇮🇳 103.89.136.111

🇮🇪 54.74.215.46

🇺🇸 45.8.19.249

🇭🇰 220.246.42.222

🇳🇱 213.177.179.62

🇬🇧 195.96.139.171

🇨🇳 117.62.22.127

🇺🇸 104.164.126.8