JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 147.224.216.92

147.224.216.92 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 85%: ?

85%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 147.224.216.92

Whois 147.224.216.92

IP Abuse Reports for 147.224.216.92:

This IP address has been reported a total of 17 times from 16 distinct sources. 147.224.216.92 was first reported on October 20th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 creechy	2026-10-21 17:58:00 (1 day ago)	147.224.216.92 - - [21/Oct/2026:10:57:49 -0700] "GET /.git/HEAD HTTP/1.1" 403 689 107.137.67.44 107. ... show more 147.224.216.92 - - [21/Oct/2026:10:57:49 -0700] "GET /.git/HEAD HTTP/1.1" 403 689 107.137.67.44 107.137.67.44 ... show less	Hacking Bad Web Bot
🇦🇹 cybertailor	2026-10-21 13:09:39 (1 day ago)	147.224.216.92 - - [21/Oct/2026:18:09:35 +0500] "GET /public_html/.git/config HTTP/1.1" 404 146 "-" ... show more 147.224.216.92 - - [21/Oct/2026:18:09:35 +0500] "GET /public_html/.git/config HTTP/1.1" 404 146 "-" "WebSiphon/next-0.1" 147.224.216.92 - - [21/Oct/2026:18:09:35 +0500] "GET /.git/packed-refs HTTP/1.1" 404 146 "-" "WebSiphon/next-0.1" 147.224.216.92 - - [21/Oct/2026:18:09:35 +0500] "GET /frontend/.git/COMMIT_EDITMSG HTTP/1.1" 404 146 "-" "WebSiphon/next-0.1" 147.224.216.92 - - [21/Oct/2026:18:09:35 +0500] "GET /www/.git/config.worktree HTTP/1.1" 404 146 "-" "WebSiphon/next-0.1" 147.224.216.92 - - [21/Oct/2026:18:09:35 +0500] "GET /backend/.git/HEAD HTTP/1.1" 404 146 "-" "WebSiphon/next-0.1" ... show less	Port Scan
🇺🇸 ZeroTrustSentinel	2026-10-21 13:05:21 (1 day ago)	Unauthorized HTTP vulnerability scanning and endpoint probe (http-crawl-non_statics); blocked by per ... show more Unauthorized HTTP vulnerability scanning and endpoint probe (http-crawl-non_statics); blocked by perimeter firewall. show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-10-21 12:54:43 (1 day ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇮🇪 RoboSOC	2026-10-21 12:45:21 (1 day ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇫🇷 Kejult	2026-10-21 10:30:31 (2 days ago)	Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 435 request ev ... show more Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 435 request event(s), 128 distinct path(s), 65 request(s) to suspicious path(s). Examples: /.env, /.env.backup, /.env.bak, /.env.development, /.env.development.local. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 LSPCCU	2026-10-21 07:47:50 (2 days ago)	TSEC Honeypot Network report. Threat score: 70/100. Categories: Port Scan, Hacking, Brute-Force, Web ... show more TSEC Honeypot Network report. Threat score: 70/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: galah, tanner. Context: 147.224.216.92 classified as botnet node participating in coordinated attack campaigns (high confidence). show less	Port Scan Hacking Brute-Force Web App Attack SSH
🇺🇸 donarev419	2026-10-21 06:03:48 (2 days ago)	Connection to port 8043 with data transfer. Data preview: GET / HTTP/1.1 accept: / user-agent: W ... show more Connection to port 8043 with data transfer. Data preview: GET / HTTP/1.1 accept: / user-agent: WebSiphon/next-0.1 accept-encoding: gzip,deflate,br host: show less	Port Scan Hacking
🇹🇷 ScchutzZ	2026-10-20 21:05:06 (2 days ago)	Fail2Ban banı. Jail: plesk-modsecurity.	Brute-Force
🇧🇬 sirdroppe	2026-10-20 20:56:54 (2 days ago)	Vector=SCANNER. Detalles: Intento de escanear ruta sensible: /root/.env	Port Scan
🇩🇪 Jochen Pretli	2026-10-20 18:05:51 (2 days ago)	connection to honeypot	Email Spam Port Scan
🇳🇱 VMHeaven.io	2026-10-20 16:42:07 (2 days ago)	Blocked by UFW [8545/tcp] Source port: 10237 TTL: 247 Packet length: 40	Port Scan
🇳🇱 Savvii	2026-10-20 03:29:53 (3 days ago)	15 attempts against mh-modsecurity-ban on pf102968	Brute-Force Web App Attack
Anonymous	2026-10-20 03:19:44 (3 days ago)	147.224.216.92 - - [20/Oct/2026:05:19:43 +0200] "GET /.env.development HTTP/1.1" 403 117 "-" "WebSip ... show more 147.224.216.92 - - [20/Oct/2026:05:19:43 +0200] "GET /.env.development HTTP/1.1" 403 117 "-" "WebSiphon/next-0.1" ... show less	Hacking Bad Web Bot Web App Attack
🇳🇱 knock	2026-10-20 02:53:38 (3 days ago)	Knock-Knock honeypot brute-force: HTTP (49 total hits)	Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 50.218.197.4

🇺🇸 3.15.8.50

🇸🇬 2a12:f544:c6f7:84d3:d825:663d:bdcf:2c48

🇳🇱 194.146.38.223

🇧🇷 187.85.88.168

🇮🇩 103.46.186.148

🇳🇱 91.108.9.119

🇫🇷 88.186.237.10

🇺🇸 67.223.17.70

🇺🇸 66.132.172.180

🇸🇬 43.159.34.167

🇩🇪 2003:c6:e748:1288:99a1:c020:8035:3d69

🇺🇸 168.158.19.36

🇸🇪 165.231.143.109

🇭🇰 152.32.225.117

🇰🇷 119.200.229.33

🇵🇱 91.224.185.1

🇺🇸 75.153.96.88

🇦🇷 45.162.20.169

🇺🇸 185.150.189.60