JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 137.184.82.217

137.184.82.217 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 70%: ?

70%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 137.184.82.217

Whois 137.184.82.217

IP Abuse Reports for 137.184.82.217:

This IP address has been reported a total of 17 times from 16 distinct sources. 137.184.82.217 was first reported on June 13th 2022, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zupan	2026-06-25 17:01:57 (8 hours ago)	Blocked by UFW on vps [9200/tcp] \| SPT: 35968 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [9200/tcp] \| SPT: 35968 \| TTL: 53 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 itsnixk	2026-06-25 08:48:22 (16 hours ago)	(mod_security) mod_security (id:920350) triggered by 137.184.82.217 (US/United States/-): 1 in the l ... show more (mod_security) mod_security (id:920350) triggered by 137.184.82.217 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 04:48:19.026606 2026] [security2:error] [pid 838917:tid 839353] [client 137.184.82.217:33042] ModSecurity: Access denied with code 406 (phase 1). Pattern match "(?:^([\\\\d.]+\|\\\\[[\\\\da-f:]+\\\\]\|[\\\\da-f:]+)(:[\\\\d]+)?$)" at REQUEST_HEADERS:Host. [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "773"] [id "920350"] [msg "Host header is a numeric IP address"] [redacted] [severity "WARNING"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [redacted] [uri "/"] [unique_id "ajzrU-a-DO68bHPnE1NaFQAAAKc"] show less	Port Scan
🇩🇪 ghostwarriors	2026-06-25 07:20:13 (17 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Hulk Smash	2026-06-24 23:42:54 (1 day ago)	Automated report, webserver-auth troll for exploits and/or SSH Attempts	Brute-Force Hacking
🇺🇸 xmission.com	2026-06-24 21:23:39 (1 day ago)	Blocked by UFW (TCP on 443) Source port: 37222 TTL: 53 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 37222 TTL: 53 Packet length: 60 TOS: 0x08 This report (for 137.184.82.217) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 Rip	2026-06-23 02:11:05 (2 days ago)	Spoofed, Forged or malicious User-Agent detected.	Brute-Force Web App Attack
🇦🇺 PetePK	2026-06-22 19:59:01 (3 days ago)	Probed 6 time(s): TCP/443, TCP/9200, TCP/80	Port Scan
🇺🇸 NXTwoThou	2026-06-14 19:32:10 (1 week ago)	Http scans of direct ips	Web App Attack
🇵🇱 sefinek.net	2026-06-14 05:01:46 (1 week ago)	Blocked by UFW on PL02 [443/tcp] \| SPT: 35972 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on PL02 [443/tcp] \| SPT: 35972 \| TTL: 46 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇦🇺 LiftUp Hosting	2026-06-09 23:00:32 (2 weeks ago)	Honeypot hit: Unauthorized traffic on 1883/mqttd	Port Scan
🇺🇸 RAP	2026-06-09 22:32:42 (2 weeks ago)	2026-06-09 22:32:42 UTC Unauthorized activity to TCP port 3306.	Port Scan
🇨🇦 DRI	2026-06-09 16:33:28 (2 weeks ago)	Unsolicited TCP traffic on Honeypot, srcport=61005 dstport=8808	Port Scan Hacking
🇺🇸 xmission.com	2026-06-09 16:30:51 (2 weeks ago)	Blocked by UFW (TCP on 1337) Source port: 61012 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1337) Source port: 61012 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 137.184.82.217) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-09 14:39:33 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇩🇪 www.blocklist.de	2022-06-13 20:40:34 (4 years ago)	Lines containing failures of 137.184.82.217 (max 1000) Jun 14 02:37:27 MAKserver06 sshd[1562860]: AD ... show more Lines containing failures of 137.184.82.217 (max 1000) Jun 14 02:37:27 MAKserver06 sshd[1562860]: AD user shubham from 137.184.82.217 port 36974 Jun 14 02:37:27 MAKserver06 sshd[1562860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.82.217 Jun 14 02:37:29 MAKserver06 sshd[1562860]: Failed password for AD user shubham from 137.184.82.217 port 36974 ssh2 Jun 14 02:37:30 MAKserver06 sshd[1562860]: Received disconnect from 137.184.82.217 port 36974:11: Bye Bye [preauth] Jun 14 02:37:30 MAKserver06 sshd[1562860]: Disconnected from AD user shubham 137.184.82.217 port 36974 [preauth] Jun 14 02:39:24 MAKserver06 sshd[1563372]: AD user juergen from 137.184.82.217 port 36724 Jun 14 02:39:24 MAKserver06 sshd[1563372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.184.82.217 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=137.184.82.217 show less	FTP Brute-Force Hacking

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.15.10.179

🇪🇨 181.188.237.220

🇺🇸 172.191.239.155

🇺🇸 172.69.23.11

🇱🇹 141.98.10.140

🇨🇳 117.172.221.133

🇺🇸 104.22.20.85

🇺🇸 104.22.20.84

🇺🇸 64.62.197.195

🇰🇷 47.80.29.108

🇨🇳 36.22.242.255

🇺🇸 35.236.251.185

🇹🇼 221.120.38.97

🇺🇸 208.84.101.146

🇺🇸 162.158.166.212

🇦🇺 121.45.188.229

🇰🇷 106.96.6.73

🇺🇸 104.22.17.99

🇺🇸 104.22.17.98

🇮🇩 103.182.192.6