JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.154.196.160

207.154.196.160 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	pritunl-mongodb-1034264d.mongo.ondigitalocean.com
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.154.196.160

Whois 207.154.196.160

IP Abuse Reports for 207.154.196.160:

This IP address has been reported a total of 54 times from 38 distinct sources. 207.154.196.160 was first reported on August 11th 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 PTnet	2025-12-07 06:24:39 (5 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇵🇹 PTnet	2025-12-06 22:42:23 (5 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇺🇸 COMPLEX	2025-12-04 05:18:05 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protoco ... show more Triggered Cloudflare WAF (l7ddos) from DE. Action taken: BLOCK ASN: 14061 (DIGITALOCEAN-ASN) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇵🇹 PTnet	2025-12-03 14:04:41 (6 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇪🇸 10dencehispahard SL	2025-12-03 07:35:19 (6 months ago)	Wordpress probing for vulnerabilities	Hacking Exploited Host
🇩🇪 Szymekk	2025-12-02 13:58:24 (6 months ago)	Fail2Ban: SSH brute force attempt [srv01]	Brute-Force SSH
🇩🇪 RyoKN	2025-11-21 01:28:29 (6 months ago)	Blocked by UFW on s474 [49214/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [49214/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-11-20 15:31:36 (6 months ago)	(mod_security) mod_security (id:217210) triggered by 207.154.196.160 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217210) triggered by 207.154.196.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 10:31:27.701032 2025] [security2:error] [pid 2560:tid 2560] [client 207.154.196.160:48420] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|gsyy.org.cn:443\|F\|4"] [data "CONNECT gsyy.org.cn:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gsyy.org.cn"] [uri "/"] [unique_id "aR80T9SE6jSLKn22VqrQggAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 RyoKN	2025-11-20 11:55:52 (6 months ago)	Blocked by UFW on s474 [54904/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [54904/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 RyoKN	2025-11-19 20:49:17 (6 months ago)	Blocked by UFW on s474 [53266/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [53266/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 Greg Poulson	2025-11-19 18:32:06 (6 months ago)	Our website was hit by this DDOS at a rate of 6 in 5 minutes.	DDoS Attack Web Spam Brute-Force
🇻🇳 trung.fun	2025-11-19 17:29:26 (6 months ago)	DDoS, Hack, Brute Force, Web Attack ...	DDoS Attack Web Spam Hacking Brute-Force Web App Attack
Anonymous	2025-11-19 16:08:00 (6 months ago)	scanning http requests from known botnet	Web App Attack
🇩🇪 RyoKN	2025-11-19 07:47:17 (6 months ago)	Blocked by UFW on s474 [34536/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This repor ... show more Blocked by UFW on s474 [34536/tcp] Source port: 8080 TTL: 54 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 TPI-Abuse	2025-11-19 07:35:01 (6 months ago)	(mod_security) mod_security (id:217210) triggered by 207.154.196.160 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:217210) triggered by 207.154.196.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 19 02:34:53.840810 2025] [security2:error] [pid 11299:tid 11299] [client 207.154.196.160:35528] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?i:(?:[a-z]{3,10}\\\\s+(?:\\\\w{3,7}?://[\\\\w\\\\-\\\\./](?::\\\\d+)?)?/[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S])?\|connect (?:\\\\d{1,3}\\\\.){3}\\\\d{1,3}\\\\.?(?::\\\\d+)?\|options \\\\)\\\\s+[\\\\w\\\\./]+\|get /[^?#](?:\\\\?[^#\\\\s])?(?:#[\\\\S]*)?)$" against "REQUEST_LINE" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "114"] [id "217210"] [rev "1"] [msg "COMODO WAF: Invalid HTTP Request Line\|\|i.instagram.com:443\|F\|4"] [data "CONNECT i.instagram.com:443 HTTP/1.1"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "i.instagram.com"] [uri "/"] [unique_id "aR1zHaxPT10JghQ9d1u4HwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.146.41

🇭🇰 101.36.112.103

🇵🇱 83.238.166.69

🇺🇸 45.84.120.4

🇹🇼 35.229.135.179

🇺🇸 18.190.15.50

🇬🇧 198.178.235.37

🇳🇱 195.178.110.30

🇰🇷 112.216.129.27

🇺🇸 74.235.84.135

🇺🇸 3.214.176.84

🇳🇱 93.174.95.106

🇷🇺 46.147.195.11

🇺🇸 20.55.162.197

🇧🇬 193.110.219.15

🇹🇹 190.213.26.120

🇱🇹 81.30.98.144

🇺🇸 64.159.242.130

🇺🇸 54.240.120.75

🇺🇸 18.119.209.50