147.224.214.89

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
70% Elevated
18 reports
14 reporters · latest 1 day ago
ISP
Oracle Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Domain Name
oracle.com
Country
🇺🇸 United States of America
City
Chicago, Illinois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 8 🇩🇪 Germany 4 🇺🇸 United States of America 3
Most common categories Web App Attack 9 Port Scan 8 Hacking 5 Brute-Force 2 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Aggressive web scan
Web App Attack
🇹🇷 Threat.live
Threat.live: Web Scan
Web App Attack
🇩🇪 tentwentyfour
Blocked for probing for sensitive web application components
Brute-Force Web App Attack
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 40 application-level events across 2 target ports and 40 source port(s). Ports: 80/HTTP, 3001/service. Sensors: Honeytrap, Tanner.
Port Scan
🇫🇷 COMAITE
Suspicious URL access.
Web App Attack
🇺🇸 Phil Schuyler
Connection probe against a public honeypot service: 1 observed event targeting TCP/443.
Port Scan
🇫🇷 uthul
T-Pot honeypot: 1892 hits on ports [3080, 4891, 8007, 8089] (automated)
Port Scan
🇫🇷 Kejult
Hacking Bad Web Bot Web App Attack
🇫🇷 uthul
T-Pot honeypot: 1953 hits on ports [8081, 8082, 30001] (automated)
Port Scan
🇩🇪 roberto pereira
Honeypot port scan detected. Auto-blocked by XUI Shield.
DDoS Attack Port Scan
🇫🇷 Kejult
Honeypot Finding: verified TCP multi-port scan/probing; 377 application-level events across 2 target ports and 377 source port(s). Ports: 9091/service, 80/HTTP. Sensors: Honeytrap, Tanner.
Port Scan
Anonymous
BlockScope: 129 HTTP request(s) probing: api discovery; paths: /v1/rerank, /v1/realtime, /v1/tokenize, /v1/loads; CrowdSec: crowdsecurity/http-crawl-non_statics; 2026-11-10 02:30–02:30 UTC.
Web App Attack
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 8998 GET / User-Agent: WebSiphon/next-0.1 Accept: */* Accept-Encoding: gzip,deflate,br; 8998 [129] TCP
Hacking Bad Web Bot
🇫🇷 Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 129 payload-bearing connection/event(s), 17668 payload byte(s) total, maximum payload 165 byte(s). Target port(s): 8081.
Port Scan Hacking
🇬🇧 [email protected]
Automated report [Server: quest1]: IP caught scanning and attacking Aison Active Defense Honeypot traps.
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.105.247.222
🇺🇸 172.202.114.183
🇳🇱 142.93.233.88
🇺🇸 142.93.193.235
🇺🇸 134.209.223.38
🇳🇱 109.160.32.132
🇺🇸 70.91.135.181
🇸🇬 68.183.239.167
🇺🇸 40.223.147.7
🇮🇳 223.238.112.32
🇰🇷 221.162.3.197
🇺🇸 209.250.5.225
🇳🇱 193.47.62.69
🇷🇴 193.46.255.86
🇳🇱 185.223.235.55
🇧🇷 179.61.154.216
🇺🇸 159.223.140.193
🇸🇮 130.12.182.91
🇮🇳 103.207.9.246
🇫🇷 83.141.90.90
feedback