← Back

IP Address Overview

Model: v1 Updated: Jan. 14, 2026, 9:58 a.m.

Report for 198.211.107.147 • United States • Digital Ocean

High-level context about this IP: ownership, geography, and traffic profile.

Traffic ready Risk ready Report ready Model v1

IP Address

198.211.107.147

Total Hits

279

Organization

Digital Ocean

ASN

AS14061 DigitalOcean, LLC

ISP

14061 DigitalOcean, LLC

Region

New Jersey

City

North Bergen

Country

United States

Subnet

—

Risk Level

low

First Seen

March 9, 2025, 2 a.m.

Last Seen

March 10, 2025, 2 a.m.

Total Errors

Risk Score

Risk

Model: v1 Computed: Jan. 14, 2026, 9:58 a.m.

Risk score

Low

Risk gradient

Contributor codes are normalized (e.g. sqli, cmdi, trav, sfp). Totals and breakdowns are derived from rollups and explainability tables only.

Top contributing annotators

Credential brute forcing cred 39 hits 0.00 pts Sensitive file probing sfp 15 hits 0.00 pts Path traversal attempts trav 13 hits 0.00 pts Scan velocity scan_velocity 38 hits 0.00 pts Command injection attempts cmdi 1 hits 0.00 pts Referrer abuse ref 44 hits 0.00 pts Protocol anomaly proto 3 hits 0.00 pts User-Agent anomaly ua 9 hits 0.00 pts

All contributing signals

Credential brute forcing cred 39 hits 136.40 pts

Repeated authentication attempts consistent with password guessing or credential stuffing.

Severity	Hits	Labels	Weighted	Top labels
10	22	1	121.00	n/a
8	2	1	8.80	n/a
6	2	1	6.60	n/a
0	13	1	0.00	n/a

Sensitive file probing sfp 15 hits 116.16 pts

Requests target commonly sensitive files, configs, backups, or administrative resources.

Severity	Hits	Labels	Weighted	Top labels
44	7	1	67.76	n/a
34	6	1	44.88	n/a
8	2	1	3.52	n/a

Path traversal attempts trav 13 hits 97.24 pts

Request paths/parameters resemble attempts to access files outside intended directories.

Severity	Hits	Labels	Weighted	Top labels
30	6	1	46.80	n/a
26	4	1	27.04	n/a
28	2	1	14.56	n/a
34	1	1	8.84	n/a

Scan velocity scan_velocity 38 hits 75.60 pts

High request rate and broad endpoint coverage suggest scanning or automated enumeration.

Severity	Hits	Labels	Weighted	Top labels
22	6	1	23.76	n/a
10	6	1	10.80	n/a
20	3	1	10.80	n/a
18	3	1	9.72	n/a
16	3	1	8.64	n/a
14	3	1	7.56	n/a
12	2	1	4.32	n/a
0	12	1	0.00	n/a

Command injection attempts cmdi 1 hits 23.80 pts

Request content resembles attempts to execute OS commands via an application.

Severity	Hits	Labels	Weighted	Top labels
28	1	1	23.80	n/a

Referrer abuse ref 44 hits 11.58 pts

Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.

Severity	Hits	Labels	Weighted	Top labels
9	38	1	10.26	n/a
8	4	1	0.96	n/a
6	2	1	0.36	n/a

Protocol anomaly proto 3 hits 2.64 pts

Request structure or protocol-level signals deviate from typical browser HTTP traffic.

Severity	Hits	Labels	Weighted	Top labels
11	3	1	2.64	n/a

User-Agent anomaly ua 9 hits 1.44 pts

User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.

Severity	Hits	Labels	Weighted	Top labels
8	9	1	1.44	n/a

Technical summary

Computed at

Jan. 14, 2026, 9:58 a.m.

Raw total

464.86

Total hits

279

Errors

Traffic

Rollup

Daily activity (hits per day) plus HTTP response mix and basic counters from the traffic rollup.

Daily activity (hits per day).

2xx

3xx

254

4xx

5xx

Unique URLs

138

Total Hits

279

First Seen

March 9, 2025, 2 a.m.

Last Seen

March 10, 2025, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →

Low High

Credential brute forcing cred

Repeated authentication attempts consistent with password guessing or credential stuffing.

hits 39 pts 136.40