137.184.82.161
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
Abuse Reports
Total reports
44 from
34 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇬🇧 openstrike.co.uk |
22 attacks on PHP URLs, env grabbing URLs, password/key grabbing URLs, config grabbing URLs:
POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1
GET /.env.dev HTTP/1.1
GET /.aws/credentials HTTP/1.1
GET /.DS_Store HTTP/1.1
|
Web App Attack Hacking | |
| 🇧🇪 cmbplf |
|
Brute-Force Bad Web Bot | |
| 🇬🇧 rakkor |
2026-11-14T13:37:38+00:00 NAS [Sat Nov 14 13:37:38.884890 2026] [authz_core:error] [pid 13686:tid 13707] [client 137.184.82.161:55662] AH01630: client denied by server configuration: /var/services/web/.DS_Store
...
|
Brute-Force Hacking | |
| Anonymous |
(apache-scanners) Failed apache-scanners trigger with match [redacted]): (CF_ENABLE)
|
Port Scan | |
| 🇫🇮 KTSTechnology |
Web vulnerability scanning detected by our ISP firewall
|
Web App Attack | |
| 🇫🇷 dynamix |
Multiple WAF Violations
|
Web App Attack | |
| Anonymous |
CrowdSec http-generic-403-bf
|
Brute-Force | |
| 🇩🇪 paissangroup |
Multiple WAF Violations
|
Web App Attack | |
| 🇳🇱 homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
|
Web App Attack SSH Hacking | |
| Anonymous |
|
Bad Web Bot Web App Attack | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-13 UTC.
|
Hacking | |
| Anonymous |
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
|
Web App Attack | |
| 🇬🇧 WebNiraj |
(mod_security) mod_security (id:9900002) triggered by 137.184.82.161 (US/United States/-): 5 in the last 3600 secs [SIGMA]
|
Brute-Force | |
| 🇳🇱 Alt255 |
|
Bad Web Bot Web App Attack | |
| Anonymous |
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force Web App Attack Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown