JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.154.218.139

207.154.218.139 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.154.218.139

Whois 207.154.218.139

IP Abuse Reports for 207.154.218.139:

This IP address has been reported a total of 23 times from 18 distinct sources. 207.154.218.139 was first reported on February 12th 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2024-10-11 22:33:08 (1 year ago)	Unauthorized web scan.	Web App Attack
🇨🇭 zynex	2024-09-26 13:20:20 (1 year ago)	URL Probing: /alfacgiapi/index.php	Web App Attack
Anonymous	2024-09-26 11:15:00 (1 year ago)	intensive app scan	Hacking Web App Attack
🇳🇱 Roderic	2024-09-24 01:42:44 (1 year ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 207.154.218.139 (DE/Germ ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 207.154.218.139 (DE/Germany/-) show less	Port Scan
🇨🇭 zynex	2024-09-23 20:28:13 (1 year ago)	URL Probing: /style.php	Web App Attack
🇮🇩 hermawan	2024-09-23 20:11:56 (1 year ago)	[Mon Sep 23 07:06:36.072492 2024] [security2:error] [pid 634406:tid 126222157743808] [client 207.154 ... show more [Mon Sep 23 07:06:36.072492 2024] [security2:error] [pid 634406:tid 126222157743808] [client 207.154.218.139:65154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp_is_mobile" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.5.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "39"] [id "440000"] [msg "BAD BOT - Detected and Blocked"] [data "Matched Data: wp_is_mobile found within REQUEST_HEADERS:User-Agent: wp_is_mobile request_line = GET /wp-load.php HTTP/1.1"] [severity "NOTICE"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/wp-load.php"] [unique_id "ZvCxDI8kHjJ2J71xBAawAAAAAIE"], referer www.bing.com [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[634434] [GnV/Kb7W9CA] [ZvCxDI8kHjJ2J71xBAawAAAAAIE] keep_alive=[0] [2024-09-23 07:06:36.072497] [R:ZvCxDI8kHjJ2J71xBAawAAAAAIE] UA:'wp_is_mobile' Host:'staklim-jatim.bmkg.go.id' ACCEPT:'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8' Referer:'www ... show less	Hacking Web App Attack
Anonymous	2024-09-23 19:54:00 (1 year ago)	Looking for PHP urls - Hacking	Hacking
🇺🇸 TPI-Abuse	2024-09-23 18:50:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 207.154.218.139 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 207.154.218.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 23 14:50:41.054151 2024] [security2:error] [pid 26509:tid 26509] [client 207.154.218.139:57580] [client 207.154.218.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.weathercarib.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "ZvG4gTKQxLcMIjQ6A39ChwAAAAY"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mawan	2024-09-23 03:41:15 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 BPS-StatisticsIndonesia	2024-09-21 10:29:58 (1 year ago)	WP Admin Scan Activities	Web App Attack
🇺🇸 TPI-Abuse	2024-09-21 08:32:47 (1 year ago)	(mod_security) mod_security (id:210492) triggered by 207.154.218.139 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210492) triggered by 207.154.218.139 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 21 04:32:42.281683 2024] [security2:error] [pid 2225442:tid 2225508] [client 207.154.218.139:58957] [client 207.154.218.139] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web201.dnchosting.com"] [uri "/wp-includes/css/wp-config.php"] [unique_id "Zu6EqoX_Hb9aFEaKG1mRVAAAAgE"], referer: www.bing.com show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 Cloudkul Cloudkul	2024-09-21 07:45:06 (1 year ago)	Multiple unauthorized attempts to access web resources	Brute-Force Web App Attack
🇺🇸 mawan	2024-09-21 05:04:08 (1 year ago)	Suspected of having performed illicit activity on LAX server.	Web App Attack
🇮🇩 kadosmekaten	2024-09-21 03:43:00 (1 year ago)	207.154.218.139 - - [21/Sep/2024:10:42:10 +0700] "GET /shell.php HTTP/1.1" 200 3244 "www.bing.com" " ... show more 207.154.218.139 - - [21/Sep/2024:10:42:10 +0700] "GET /shell.php HTTP/1.1" 200 3244 "www.bing.com" "wp_is_mobile" show less	Hacking Web App Attack
Anonymous	2024-09-20 11:14:26 (1 year ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2404:6800:4000:101f::12a

🇨🇳 211.90.189.233

🇫🇷 141.101.95.61

🇨🇳 123.138.72.200

🇳🇱 91.92.40.45

🇳🇱 34.6.65.139

🇺🇸 20.228.193.165

🇲🇾 2620:171:1b:f002:9999::241

🇺🇸 2400:cb00:119:1000:f461:bcf9:2866:a821

🇺🇸 172.174.212.25

🇨🇳 119.48.135.88

🇨🇳 118.212.120.225

🇺🇸 54.71.187.124

🇦🇷 45.167.222.152

🇭🇰 206.237.27.61

🇧🇷 205.210.31.133

🇷🇺 185.107.252.253

🇺🇸 147.185.132.225

🇨🇳 124.135.183.204

🇸🇬 34.87.182.246