JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

147.182.216.197

Neutral Activity

Abuse Confidence Score

0% Low Risk

61 reports

39 reporters · latest 6 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: North Bergen, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

147.182.216.197 has been reported 61 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

61 from 39 distinct reporters

First reported

February 4th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-04-30 13:02:46 UTC · (6 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇮 nNordic	2026-04-25 08:39:54 UTC · (6 months ago)	Connection attempt blocked by IDS/IPS from 147.182.216.197/32	Hacking
Anonymous	2026-04-08 17:22:50 UTC · (7 months ago)	Portscan: TCP/22222 (12x), TCP/2022 (16x), TCP/222 (16x), TCP/2222 (7x), TCP/2202 (5x)	Port Scan
🇨🇳 ThreatBook.io	2026-04-07 22:39:24 UTC · (7 months ago)	ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/147.182.216.197 2026-04-07 11:20:33 ["uname -s -v -n -r -m"]	Brute-Force
🇺🇸 xmission.com	2026-04-07 10:28:52 UTC · (7 months ago)	Blocked by UFW (TCP on 22222) Source port: 52605 TTL: 48 Packet length: 52 TOS: 0x08 This report (for 147.182.216.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 etu brutus	2026-04-07 10:23:58 UTC · (7 months ago)	147.182.216.197 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇩🇪 acadeova	2026-04-07 10:05:23 UTC · (7 months ago)	Blocked by UFW on vps4 [2202/tcp] Source port: 48238 TTL: 54 Packet length: 52 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 xmission.com	2026-04-07 10:03:42 UTC · (7 months ago)	Blocked by UFW (TCP on 2202) Source port: 59682 TTL: 48 Packet length: 52 TOS: 0x08 This report (for 147.182.216.197) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇩🇪 london2038.com	2026-04-07 10:01:22 UTC · (7 months ago)	Connection atttempts against closed TCP ports Apr 7 04:33:01 BLOCK SRC=147.182.216.197 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=64648 PROTO=TCP SPT=38508 DPT=2202 WINDOW=65535 RES=0x00 SYN Apr 7 09:51:56 BLOCK SRC=147.182.216.197 LEN=52 TOS=0x00 PREC=0 ... show more Connection atttempts against closed TCP ports Apr 7 04:33:01 BLOCK SRC=147.182.216.197 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=64648 PROTO=TCP SPT=38508 DPT=2202 WINDOW=65535 RES=0x00 SYN Apr 7 09:51:56 BLOCK SRC=147.182.216.197 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=9715 PROTO=TCP SPT=35413 DPT=2202 WINDOW=65535 RES=0x00 SYN Apr 7 11:58:10 BLOCK SRC=147.182.216.197 LEN=52 TOS=0x00 PREC=0x00 TTL=50 ID=9285 PROTO=TCP SPT=50723 DPT=2202 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇺🇸 MPL	2026-04-07 09:52:36 UTC · (7 months ago)	tcp port scan (25 or more attempts)	Port Scan
🇫🇷 EDSL	2026-04-07 09:36:48 UTC · (7 months ago)	[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing Port 222)	Port Scan
Anonymous	2026-04-07 08:57:04 UTC · (7 months ago)	(sshd) Failed SSH login from 147.182.216.197 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 7 10:54:54 server02 sshd[2844939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more (sshd) Failed SSH login from 147.182.216.197 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Apr 7 10:54:54 server02 sshd[2844939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.216.197 user=root Apr 7 10:54:56 server02 sshd[2844939]: Failed password for root from 147.182.216.197 port 55562 ssh2 Apr 7 10:56:59 server02 sshd[2845097]: Invalid user amir from 147.182.216.197 port 57538 Apr 7 10:56:59 server02 sshd[2845095]: Invalid user gituser from 147.182.216.197 port 57508 Apr 7 10:57:00 server02 sshd[2845096]: Invalid user ftptest from 147.182.216.197 port 57514 show less	Port Scan
🇺🇸 MPL	2026-04-07 08:53:28 UTC · (7 months ago)	tcp port scan (28 or more attempts)	Port Scan
🇺🇸 egulatee	2026-04-07 08:24:23 UTC · (7 months ago)	sshd jail triggered on ip-208-84-100-92.my-advin.com	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-07 08:22:25 UTC · (7 months ago)	147.182.216.197 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 03:22:11 15850 sshd[8562]: pam_unix(sshd:auth): authentication failure; logname= ui ... show more 147.182.216.197 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 7 03:22:11 15850 sshd[8562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.182.216.197 user=root Apr 7 03:22:13 15850 sshd[8562]: Failed password for root from 147.182.216.197 port 47224 ssh2 Apr 7 02:42:25 15850 sshd[5454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.64.168.164 user=root Apr 7 02:42:27 15850 sshd[5454]: Failed password for root from 170.64.168.164 port 34856 ssh2 Apr 7 02:44:44 15850 sshd[5615]: Failed password for root from 170.64.168.164 port 37302 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 61 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇻🇳 222.255.174.162

🇨🇭 34.65.173.81

🇳🇱 34.6.104.28

🇺🇸 3.131.220.121

🇧🇷 205.210.31.251

🇳🇱 195.178.110.232

🇦🇷 190.190.1.141

🇺🇸 189.104.173.205

🇺🇸 167.172.232.142

🇫🇮 147.185.133.17

🇨🇳 116.172.93.48

🇺🇸 100.28.118.16

🇳🇱 46.129.5.66

🇸🇬 43.163.81.180

🇵🇪 38.187.27.85

🇺🇸 216.25.90.11

🇷🇺 178.178.194.136

🇩🇪 167.94.145.27

🇨🇳 101.96.214.98

🇨🇦 85.217.149.16