JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

207.154.229.174

Neutral Activity

Abuse Confidence Score

0% Low Risk

46 reports

33 reporters · latest 11 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

207.154.229.174 has been reported 46 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

46 from 33 distinct reporters

First reported

December 28th 2024

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2025-11-25 06:15:03 UTC · (11 months ago)	Blocked by UFW (TCP on 8001) Source port: 61008 TTL: 235 Packet length: 44 TOS: 0x08 This report (for 207.154.229.174) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇺🇸 gu-alvareza	2025-10-01 07:05:04 UTC · (1 year ago)	SystemBC.Botnet	DDoS Attack Hacking
🇫🇷 masterguru	2025-09-30 21:10:42 UTC · (1 year ago)	Host header is a numeric IP address. Pattern match "^ (920350-133)	Hacking Bad Web Bot
Anonymous	2025-09-30 21:01:01 UTC · (1 year ago)	[Tue Sep 30 23:01:00.811192 2025] [php7:error] [pid 13637] [client 207.154.229.174:57278] script '/var/www/sites/default/upl.php' not found or unable to stat [Tue Sep 30 23:01:00.846114 2025] [php7:error] [pid 2301] [client 207.154.229.174:57298] scr ... show more [Tue Sep 30 23:01:00.811192 2025] [php7:error] [pid 13637] [client 207.154.229.174:57278] script '/var/www/sites/default/upl.php' not found or unable to stat [Tue Sep 30 23:01:00.846114 2025] [php7:error] [pid 2301] [client 207.154.229.174:57298] script '/var/www/sites/default/1.php' not found or unable to stat [Tue Sep 30 23:01:00.867588 2025] [php7:error] [pid 5629] [client 207.154.229.174:57320] script '/var/www/sites/default/password.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇧🇪 delabiemedia.be	2025-09-30 19:04:59 UTC · (1 year ago)	207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "G ... show more 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /t4 HTTP/1.1" 404 134 "-" "Mozilla/5.0" 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /geoip/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 207.154.229.174 - - [30/Sep/2025:21:04:59 +0200] "GET /favicon.ico HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Web App Attack
🇦🇺 2000cn.com.au	2025-09-30 18:24:12 UTC · (1 year ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Hacking Web App Attack
Anonymous	2025-09-30 16:37:54 UTC · (1 year ago)	[Tue Sep 30 18:37:53.681985 2025] [authz_core:error] [pid 7324] [client 207.154.229.174:47886] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Sep 30 18:37:53.692248 2025] [authz_core:error] [pid 28213] [client 207.154.229.174: ... show more [Tue Sep 30 18:37:53.681985 2025] [authz_core:error] [pid 7324] [client 207.154.229.174:47886] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Sep 30 18:37:53.692248 2025] [authz_core:error] [pid 28213] [client 207.154.229.174:47896] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Sep 30 18:37:53.701621 2025] [authz_core:error] [pid 6488] [client 207.154.229.174:47912] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇺🇸 Eric Bellomo	2025-09-30 14:01:30 UTC · (1 year ago)	207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET / HTTP/1.1" 403 13 207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET /form.html HTTP/1.1" 403 13 207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET /upl.php HTTP/1.1" 403 13 207.154.229.174 ... show more 207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET / HTTP/1.1" 403 13 207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET /form.html HTTP/1.1" 403 13 207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET /upl.php HTTP/1.1" 403 13 207.154.229.174 - - [30/Sep/2025:14:01:29 +0000] "GET /t4 HTTP/1.1" 403 13 ... show less	Port Scan Bad Web Bot
🇧🇷 vfAcceloReporter	2025-09-30 13:20:21 UTC · (1 year ago)	207.154.229.174 - - [30/Sep/2025:10:20:19 -0300] "GET /form.html HTTP/1.1" 404 125 "-" "curl/8.1.2" 207.154.229.174 - - [30/Sep/2025:10:20:20 -0300] "GET /upl.php HTTP/1.1" 404 125 "-" "Mozilla/5.0" 207.154.229.174 - - [30/Sep/2025:10:20:20 -0300] "G ... show more 207.154.229.174 - - [30/Sep/2025:10:20:19 -0300] "GET /form.html HTTP/1.1" 404 125 "-" "curl/8.1.2" 207.154.229.174 - - [30/Sep/2025:10:20:20 -0300] "GET /upl.php HTTP/1.1" 404 125 "-" "Mozilla/5.0" 207.154.229.174 - - [30/Sep/2025:10:20:20 -0300] "GET /t4 HTTP/1.1" 404 125 "-" "Mozilla/5.0" 207.154.229.174 - - [30/Sep/2025:10:20:20 -0300] "GET /geoip/ HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 207.154.229.174 - - [30/Sep/2025:10:20:21 -0300] "GET /favicon.ico HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Brute-Force Exploited Host Web App Attack
Anonymous	2025-09-30 13:07:29 UTC · (1 year ago)	207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /form.html HTTP/1.1" 404 1616 "-" "curl/8.1.2" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /upl.php HTTP/1.1" 404 1615 "-" "Mozilla/5.0" "-" "-" 207.154.229.174 - - [30/Sep/202 ... show more 207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /form.html HTTP/1.1" 404 1616 "-" "curl/8.1.2" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /upl.php HTTP/1.1" 404 1615 "-" "Mozilla/5.0" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /t4 HTTP/1.1" 404 1611 "-" "Mozilla/5.0" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /geoip/ HTTP/1.1" 404 1613 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:27 +0000] "GET /favicon.ico HTTP/1.1" 404 1616 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:28 +0000] "GET /1.php HTTP/1.1" 404 1613 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 207.154.229.174 - - [30/Sep/2025:13:07:28 +0000] ... show less	Brute-Force SSH
🇷🇺 Reaper	2025-09-30 10:06:43 UTC · (1 year ago)	GET /systembc/password.php	Web App Attack
Anonymous	2025-09-30 06:55:44 UTC · (1 year ago)	Brute-Force reported by Fail2Ban	Brute-Force Web App Attack
🇫🇷 Kraften	2025-09-30 06:46:46 UTC · (1 year ago)	Tentative Web App attack ...	Web App Attack
🇺🇸 antlac1	2025-09-30 05:48:54 UTC · (1 year ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇵🇱 rafamiga	2025-09-30 05:40:00 UTC · (1 year ago)	207.154.229.174:58304 [30/Sep/2025:05:40:40.575] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\|\|\|Mozilla/5.0 (Windows NT 10.0; } "GET /geoip/ --- 207.154.229.174:58316 [30/Sep/2025:05:40:40.627] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\| ... show more 207.154.229.174:58304 [30/Sep/2025:05:40:40.575] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\|\|\|Mozilla/5.0 (Windows NT 10.0; } "GET /geoip/ --- 207.154.229.174:58316 [30/Sep/2025:05:40:40.627] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\|\|\|Mozilla/5.0 (Windows NT 10.0; } "GET /favicon.ico --- 207.154.229.174:58330 [30/Sep/2025:05:40:40.674] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\|\|\|Mozilla/5.0 (Windows NT 10.0; } "GET /1.php --- 207.154.229.174:58338 [30/Sep/2025:05:40:40.717] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\|\|\|Mozilla/5.0 (Windows NT 10.0; } "GET /systembc/password.php --- 207.154.229.174:58342 [30/Sep/2025:05:40:40.768] web nomatch/<NOSRV> 0/-1/-1/-1/0 503 216 SC {<ip>\|\|\|Mozilla/5.0 (Windows NT 10.0; } "GET /password.php --- show less	Port Scan

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2a10:4a01:a215:3a82:451:295:7c45:ca7e

🇨🇳 220.161.52.149

🇨🇳 220.154.134.180

🇰🇷 220.126.58.114

🇷🇺 213.177.102.141

🇩🇪 194.88.98.113

🇳🇱 193.47.62.69

🇳🇱 176.65.132.93

🇩🇪 161.120.218.128

🇺🇸 157.245.242.193

🇺🇸 143.244.164.209

🇨🇦 143.110.220.4

🇳🇱 138.226.239.233

🇨🇦 138.197.169.143

🇺🇸 108.29.201.14

🇯🇵 104.165.161.225

🇮🇩 103.183.75.60

🇸🇬 47.82.8.179

🇪🇬 41.42.30.104

🇨🇦 24.157.236.250