207.154.198.2
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
89 from
49 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Deltron3030 |
|
Brute-Force SSH | |
| 🇯🇵 jsys |
Automated report (nfacl NetFlow analysis, 300s window): host sweep (55 distinct dst hosts)
|
Port Scan | |
| 🇩🇪 senkodev |
2026-11-13T21:16:33.900751+02:00 vm1386.de.snk.wtf sshd[494162]: error: kex_exchange_identification: Connection closed by remote host
2026-11-13T21:16:33.901174+02:00 vm1386.de.snk.wtf sshd[494162]: Connection closed by 207.154.198.2 port 41378
...
|
Brute-Force SSH | |
| 🇩🇪 ghostwarriors |
Unauthorized connection attempt detected, SSH Brute-Force
|
Brute-Force Port Scan SSH | |
| 🇺🇸 Clarkcj |
|
Brute-Force SSH | |
| Anonymous |
$f2bV_matches
|
Brute-Force SSH | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/1723 (PPTP); 5 application-level events across 5 source port(s). Sensor(s): Dionaea.
|
Port Scan | |
| 🇩🇪 roki.ovh |
|
Brute-Force SSH | |
| 🇨🇿 lp |
anomaly: icmp_sweep, 258 > threshold 50, repeats 1213 times
|
Port Scan | |
| 🇩🇪 von44bis33 |
Cowrie SSH honeypot: unauthorized login attempts/commands observed.
|
Brute-Force SSH | |
| 🇨🇿 lp |
anomaly: icmp_sweep, 240 > threshold 50, repeats 431 times
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇷🇺 green_elephant |
ET SCAN Potential SSH Scan (207.154.198.2:37852 -> port 22) | packets: 2
|
Port Scan Brute-Force SSH | |
| 🇩🇪 D3vNu11 |
Level: (LOW): Reputation Unknown via Cowrie IOC Country: Germany 5x -> Target Country: Germany SSH
|
Brute-Force SSH | |
| 🇷🇴 cataa33 |
Automated firewall block: FIREWALL PING OF DEATH DetectIN=ppoe-wan1p OUT= DST_MAC= SRC=207.154.198.2 LEN=52 TOS=0x00 PREC=0x0
|
Port Scan Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown