JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

207.154.199.123

Neutral Activity

Abuse Confidence Score

0% Low Risk

44 reports

37 reporters · latest 6 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

207.154.199.123 has been reported 44 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

44 from 37 distinct reporters

First reported

September 24th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇹 nuno	2026-05-10 23:57:48 UTC · (6 months ago)	207.154.199.123 - - [11/May/2026:00:57:46 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-" 0.000 - 207.154.199.123 - - [11/May/2026:00:57:4 ... show more 207.154.199.123 - - [11/May/2026:00:57:46 +0100] host:80 "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-" 0.000 - 207.154.199.123 - - [11/May/2026:00:57:47 +0100] host:443 "GET / HTTP/1.1" 404 809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-" 0.000 - ... show less	Web App Attack
Anonymous	2026-03-04 16:05:42 UTC · (8 months ago)	Blocked: Reason='Possible SQL injection activity (3/60 min)'; Requests=3	SQL Injection
🇺🇸 MPL	2026-02-15 22:17:38 UTC · (8 months ago)	tcp/7000 (2 or more attempts)	Port Scan
🇬🇧 wiredalter	2026-02-15 21:37:12 UTC · (8 months ago)	Blocked by fail2ban on cVPS [1177/tcp] Source Port: 61015 TTL: 242 Packet Length: 44 TOS: 0x00 Analyzed by https://ip.wiredalter.com	Brute-Force SSH
🇺🇸 MPL	2026-02-15 21:20:22 UTC · (8 months ago)	tcp/8085 (3 or more attempts)	Port Scan
🇬🇧 Andrew	2026-02-15 21:14:40 UTC · (8 months ago)	Blocked by UFW (TCP on port 8181). Source port: 61007 TTL: 245 Packet length: 44 TOS: 0x00 This report (for 207.154.199.123) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2025-09-29 23:31:59 UTC · (1 year ago)	Sep 29 23:31:52 imap-login: Info: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=207.154.199.123, lip=X.X.X.X, TLS handshaking: read(size=1026) failed: Connection reset by ... show more Sep 29 23:31:52 imap-login: Info: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=207.154.199.123, lip=X.X.X.X, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<rX5MCvk/AYLPmsd7> Sep 29 23:31:58 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=207.154.199.123, lip=X.X.X.X, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<qDWrCvk/KjXPmsd7> Sep 29 23:31:58 imap-login: Info: Disconnected: Connection closed: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol (no auth attempts in 0 secs): user=<>, rip=207.154.199.123, lip=X.X.X.X, TLS handshaking: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol, session=<AoCsCvk/wy7Pmsd7> ... show less	Brute-Force
🇰🇷 winter	2025-09-29 23:24:49 UTC · (1 year ago)	Connection attemp from 207.154.199.123 to port 22	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-29 20:09:04 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 jsopn	2025-09-29 15:32:11 UTC · (1 year ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "" at 2025-09-29T15:32:05Z	Brute-Force SSH
🇫🇮 Erpelstolz	2025-09-29 09:25:44 UTC · (1 year ago)	external host: 2025-09-29T11:25:30.208579+02:00 erpelstolz postfix/submission/smtpd[958120]: lost connection after EHLO from unknown[207.154.199.123] 2025-09-29T11:25:30.399602+02:00 erpelstolz postfix/submission/smtpd[958120]: improper command pipel ... show more external host: 2025-09-29T11:25:30.208579+02:00 erpelstolz postfix/submission/smtpd[958120]: lost connection after EHLO from unknown[207.154.199.123] 2025-09-29T11:25:30.399602+02:00 erpelstolz postfix/submission/smtpd[958120]: improper command pipelining after CONNECT from unknown[207.154.199.123]: HELP\r\n 2025-09-29T11:25:37.766256+02:00 erpelstolz postfix/submission/smtpd[958120]: lost connection after UNKNOWN from unknown[207.154.199.123] 2025-09-29T11:25:37.805608+02:00 erpelstolz postfix/submission/smtpd[958120]: improper command pipelining after CONNECT from unknown[207.154.199.123]: \r\n\r\n 2025-09-29T11:25:42.807011+02:00 erpelstolz postfix/submission/smtpd[958120]: lost connection after CONNECT from unknown[207.154.199.123] show less	Email Spam
🇦🇪 abusiveIntelligence	2025-09-29 09:00:00 UTC · (1 year ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇺🇸 chronos	2025-09-29 06:42:51 UTC · (1 year ago)	[AUTORAVALT][[29/09/2025 - 03:42:51 -03:00 UTC] Attack from [DigitalOcean, LLC] [207.154.199.123] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Una ... show more [AUTORAVALT][[29/09/2025 - 03:42:51 -03:00 UTC] Attack from [DigitalOcean, LLC] [207.154.199.123] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
Anonymous	2025-09-29 03:35:11 UTC · (1 year ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack
Anonymous	2025-09-29 02:53:23 UTC · (1 year ago)	Fail2Ban - Nginx Bot Probes	Web App Attack

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇴 190.242.42.92

🇬🇪 91.231.218.149

🇸🇬 84.75.148.4

🇩🇪 47.245.136.231

🇳🇱 45.144.212.113

🇵🇭 222.126.106.2

🇫🇮 193.187.110.160

🇺🇸 109.105.209.40

🇺🇸 77.113.170.175

🇺🇸 4.249.17.128

🇹🇭 185.78.164.17

🇨🇳 183.222.230.188

🇪🇨 157.100.191.119

🇺🇸 147.185.132.111

🇺🇸 142.111.58.66

🇨🇳 123.129.205.22

🇷🇴 80.94.92.179

🇺🇸 74.125.180.25

🇺🇸 66.132.186.127

🇺🇸 45.148.235.61