147.224.213.166
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Oracle Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS31898
- Domain Name
- oracle.com
- Country
- 🇺🇸 United States of America
- City
- Chicago, Illinois
Abuse Reports
Total reports
16 from
12 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇫🇷 LoneRider |
|
Hacking | |
| 🇩🇪 Lino Project |
147.224.213.166 - - [12/Nov/2026:10:03:51 +0100] "GET /.env.development HTTP/1.1" 404 341 "-" "WebSiphon/next-0.1"
...
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 1823 hits on ports [8004, 8787] (automated)
|
Port Scan | |
| 🇩🇪 EnthecSolutions |
Detected by Enthec Solutions. | Attempts: 258 in 24h | Target port: 8090
|
Port Scan Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 9 hits on ports [8188] (automated)
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 258 packets across 2 ports (4000, 12312). | Evidence: GHOST_SCAN: IN=enp1s0f0 SRC=147.224.213.166 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=20173 DF PROTO=TCP SPT=59008 DPT=12312 WINDOW=62720 RES=0x00 SYN URGP=0
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 211 hits on ports [11434, 30000] (automated)
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 129 payload-bearing connection/event(s), 17539 payload byte(s) total, maximum payload 164 byte(s). Target port(s): 8081.
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: verified TCP multi-port scan/probing; 387 application-level events across 3 target ports and 376 source port(s). Ports: 8002/service, 8081/HTTP, 12312/service. Sensors: Honeytrap.
|
Port Scan | |
| 🇺🇸 sandra361 |
Port scan detected: 22 packets across 1 port (8080). | Evidence: GHOST_SCAN: IN=enp1s0 SRC=147.224.213.166 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=24782 DF PROTO=TCP SPT=58530 DPT=8080 WINDOW=62720 RES=0x00 SYN URGP=0
|
Port Scan | |
| 🇩🇪 LRob |
Vulnerability scanning | method: GET | path: /metrics, /get_server_args, /stats (+17 more) | ua: WebSiphon/next-0.1 | src_port: 34246, 34202, 34304 (+17 more)
|
Port Scan Web App Attack | |
| 🇬🇧 Marten Mark |
147.224.213.166 - - [08/Nov/2026:23:32:17 +0000] "GET /app/.env HTTP/1.1" 301 166 "-" "WebSiphon/next-0.1"
...
|
Web App Attack Bad Web Bot | |
| 🇺🇸 ruusvuu |
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown