AbuseIPDB » 207.154.196.207

207.154.196.207 was found in our database!

This IP was reported 61 times. Confidence of Abuse is 99%: ?

99%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 207.154.196.207

Whois 207.154.196.207

IP Abuse Reports for 207.154.196.207:

This IP address has been reported a total of 61 times from 47 distinct sources. 207.154.196.207 was first reported on August 9th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
gu-alvareza	2024-08-14 07:05:29 (3 weeks ago)	SystemBC.Botnet	DDoS Attack Hacking
lnklnx	2024-08-14 06:26:06 (3 weeks ago)	www.lnklnx.com:80 207.154.196.207 - - [14/Aug/2024:01:26:05 -0500] "\x16\x03\x01" 400 392 "-" "-"<br ... show morewww.lnklnx.com:80 207.154.196.207 - - [14/Aug/2024:01:26:05 -0500] "\x16\x03\x01" 400 392 "-" "-" ... show less	Web App Attack
ozisp.com.au	2024-08-14 02:53:14 (3 weeks ago)	US_DigitalOcean,_<33>1723603993 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classificatio ... show moreUS_DigitalOcean,_<33>1723603993 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classification: Unknown Traffic] [Priority: 3] {TCP} 207.154.196.207:58636 show less	Hacking
nfsec.pl	2024-08-14 02:51:48 (3 weeks ago)	207.154.196.207 - - [14/Aug/2024:04:51:47 +0200] "GET /form.html HTTP/1.1" 404 371 "-" "curl/8.1.2"< ... show more207.154.196.207 - - [14/Aug/2024:04:51:47 +0200] "GET /form.html HTTP/1.1" 404 371 "-" "curl/8.1.2" 207.154.196.207 - - [14/Aug/2024:04:51:47 +0200] "GET /upl.php HTTP/1.1" 404 371 "-" "Mozilla/5.0" 207.154.196.207 - - [14/Aug/2024:04:51:47 +0200] "GET /t4 HTTP/1.1" 404 371 "-" "Mozilla/5.0" 207.154.196.207 - - [14/Aug/2024:04:51:47 +0200] "GET /geoip/ HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 207.154.196.207 - - [14/Aug/2024:04:51:47 +0200] "GET /1.php HTTP/1.1" 404 371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Exploited Host Web App Attack
IP Analyzer	2024-08-14 02:15:03 (3 weeks ago)	Unauthorized connection attempt from IP address 207.154.196.207 on Port 80(HTTP)	Brute-Force
Sefinek	2024-08-14 02:02:03 (3 weeks ago)	IP: 207.154.196.207 Protocol: TCP Source port: 46374 Destination port: 80 TT ... show moreIP: 207.154.196.207 Protocol: TCP Source port: 46374 Destination port: 80 TTL: 234 Packet length: 44 TOS: 0x00 Timestamp: Aug 14 04:02:03 (04:02:03, 14.08.2024) The IP address was blocked by the Uncomplicated Firewall (UFW) due to suspicious activity. Packet details suggest a possible unauthorized access or port scanning attempt. show less	Port Scan Web App Attack
FlyerOne	2024-08-14 01:29:04 (3 weeks ago)	IP blocked	Bad Web Bot Web App Attack
MPL	2024-08-14 01:18:33 (3 weeks ago)	tcp/80 (2 or more attempts)	Port Scan
Anonymous	2024-08-13 22:31:42 (3 weeks ago)	fail2ban apache-modsecurity [msg "Host header is a numeric IP address"] [uri "/ab2g"]	Web App Attack
Anonymous	2024-08-13 22:10:20 (3 weeks ago)	VPN Authentication Brute Force	Brute-Force
lavnet.net	2024-08-13 21:25:57 (3 weeks ago)	[Tue Aug 13 21:25:53.348951 2024] [authz_core:error] [pid 2821276:tid 2821276] [client 207.154.196.2 ... show more[Tue Aug 13 21:25:53.348951 2024] [authz_core:error] [pid 2821276:tid 2821276] [client 207.154.196.207:49116] AH01630: client denied by server configuration: /var/www/a0a0.org/web/alive.php [Tue Aug 13 21:25:56.888474 2024] [authz_core:error] [pid 2674623:tid 2674623] [client 207.154.196.207:41660] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php [Tue Aug 13 21:25:56.888702 2024] [authz_core:error] [pid 2674623:tid 2674623] [client 207.154.196.207:41660] AH01630: client denied by server configuration: /var/www/a0a0.org/web/index.php ... show less	Brute-Force
Anonymous	2024-08-13 19:54:04 (3 weeks ago)	[14/Aug/2024:05:54:02 +1000] "GET /ab2g HTTP/1.1" 404 196 [14/Aug/2024:05:54:04 +1000] "GET /ab2h HT ... show more[14/Aug/2024:05:54:02 +1000] "GET /ab2g HTTP/1.1" 404 196 [14/Aug/2024:05:54:04 +1000] "GET /ab2h HTTP/1.1" 404 196 show less	Hacking Web App Attack
abuse_IP_reporter	2024-08-13 15:45:15 (3 weeks ago)	Aug 13 17:47:32 server UFW BLOCK SRC=207.154.196.207 PROTO=TCP SPT=56365 DPT=443	Port Scan
diego	2024-08-13 15:06:20 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
diego	2024-08-13 14:29:43 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack