JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

207.154.242.126

Neutral Activity

Abuse Confidence Score

0% Low Risk

314 reports

83 reporters · latest 4 years ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

207.154.242.126 has been reported 314 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

314 from 83 distinct reporters

First reported

June 5th 2021

Most recent report

4 years ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Joe-Mark	2022-10-02 13:53:16 UTC · (4 years ago)	Blocked by Sophos UTM Network Protection / proto=6 . srcport=40177 . dstport=443 HTTPS . dst=xx.xx.186.206 (2113)	Port Scan
🇿🇦 IrisFlower	2022-10-02 06:34:48 UTC · (4 years ago)	Unauthorized connection attempt detected from IP address 207.154.242.126 to port 80 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2022-10-02 05:49:05 UTC · (4 years ago)	Unauthorized connection attempt detected from IP address 207.154.242.126 to port 443 [J]	Port Scan Hacking
🇮🇩 hermawan	2022-10-02 02:12:52 UTC · (4 years ago)	[Sun Oct 02 13:11:19.628831 2022] [-:error] [pid 9009:tid 140542981371456] [client 207.154.242.126:39454] [client 207.154.242.126] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(?:urlgrabber/[0-9\\\\.]+ yum/[0-9\\\\.]+\|mozilla/[0- ... show more [Sun Oct 02 13:11:19.628831 2022] [-:error] [pid 9009:tid 140542981371456] [client 207.154.242.126:39454] [client 207.154.242.126] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(?:urlgrabber/[0-9\\\\.]+ yum/[0-9\\\\.]+\|mozilla/[0-9\\\\.]+ ecairn-grabber/[0-9\\\\.]+ \\\$\\\\+http://ecairn.com/grabber\\\$)$" against "REQUEST_HEADERS:User-Agent" required. [file "/etc/modsecurity/coreruleset-4.0.0-rc1/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "57"] [id "913100"] [msg "Found User-Agent associated with security scanner"] [data "Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 zgrab/0.x"] [severity "CRITICAL"] [ver "OWASP_CRS/4.0.0-rc1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-scanner"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/118/224/541/310"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/ab2g"] [unique_id "YzkrhzlTeU-MZMPxgCwhNgAAAFQ"] [karang ... show less	Hacking Web App Attack
🇨🇭 Diguid	2021-08-07 03:30:05 UTC · (5 years ago)	Jun 19 18:42:59 raison sshd[2582]: Failed password for root from 207.154.242.126 port 57278 ssh2 Jun 19 18:48:43 raison sshd[2803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 Jun 19 18:48: ... show more Jun 19 18:42:59 raison sshd[2582]: Failed password for root from 207.154.242.126 port 57278 ssh2 Jun 19 18:48:43 raison sshd[2803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 Jun 19 18:48:44 raison sshd[2803]: Failed password for invalid user superadmin from 207.154.242.126 port 38542 ssh2 ... show less	Brute-Force SSH
🇬🇧 oppidans.net	2021-06-28 05:47:23 UTC · (5 years ago)	Jun 16 23:31:21 ns3092206 sshd[31170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 user=root	Port Scan Brute-Force SSH
🇩🇪 formality	2021-06-22 00:04:09 UTC · (5 years ago)	Invalid user text from 207.154.242.126 port 37220	Brute-Force SSH
🇫🇷 NXO WAN	2021-06-21 18:05:38 UTC · (5 years ago)	Jun 21 12:34:36 : SSH login attempts with invalid user	Brute-Force SSH
Anonymous	2021-06-21 15:26:08 UTC · (5 years ago)	Jun 21 20:24:28 mail sshd[2851446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 Jun 21 20:24:28 mail sshd[2851446]: Invalid user seb from 207.154.242.126 port 39678 Jun 21 20:24:31 mail ssh ... show more Jun 21 20:24:28 mail sshd[2851446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 Jun 21 20:24:28 mail sshd[2851446]: Invalid user seb from 207.154.242.126 port 39678 Jun 21 20:24:31 mail sshd[2851446]: Failed password for invalid user seb from 207.154.242.126 port 39678 ssh2 Jun 21 21:26:07 mail sshd[2860272]: Invalid user tests from 207.154.242.126 port 40562 ... show less	Brute-Force SSH
🇩🇪 formality	2021-06-21 14:43:55 UTC · (5 years ago)	Invalid user debian from 207.154.242.126 port 47814	Brute-Force SSH
Anonymous	2021-06-21 14:24:29 UTC · (5 years ago)	Jun 21 20:19:17 mail sshd[2850747]: Invalid user text from 207.154.242.126 port 33666 Jun 21 20:19:17 mail sshd[2850747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 Jun 21 20:19:17 mail ss ... show more Jun 21 20:19:17 mail sshd[2850747]: Invalid user text from 207.154.242.126 port 33666 Jun 21 20:19:17 mail sshd[2850747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 Jun 21 20:19:17 mail sshd[2850747]: Invalid user text from 207.154.242.126 port 33666 Jun 21 20:19:19 mail sshd[2850747]: Failed password for invalid user text from 207.154.242.126 port 33666 ssh2 Jun 21 20:24:28 mail sshd[2851446]: Invalid user seb from 207.154.242.126 port 39678 ... show less	Brute-Force SSH
🇿🇦 IrisFlower	2021-06-21 14:06:33 UTC · (5 years ago)	Unauthorized connection attempt detected from IP address 207.154.242.126 to port 2220 [J]	Port Scan Hacking
🇦🇺 whirlpoole	2021-06-21 10:32:36 UTC · (5 years ago)	(sshd) Failed SSH login from 207.154.242.126 (DE/Germany/-): 5 in the last 3600 secs	Brute-Force SSH
Anonymous	2021-06-21 10:32:01 UTC · (5 years ago)	(sshd) Failed SSH login from 207.154.242.126 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jun 21 10:18:34 optimus sshd[13234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... show more (sshd) Failed SSH login from 207.154.242.126 (DE/Germany/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jun 21 10:18:34 optimus sshd[13234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 user=root Jun 21 10:18:36 optimus sshd[13234]: Failed password for root from 207.154.242.126 port 52096 ssh2 Jun 21 10:29:57 optimus sshd[16396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 user=root Jun 21 10:30:00 optimus sshd[16396]: Failed password for root from 207.154.242.126 port 50198 ssh2 Jun 21 10:31:57 optimus sshd[17092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.242.126 user=root show less	Brute-Force
🇿🇦 IrisFlower	2021-06-21 08:14:57 UTC · (5 years ago)	Unauthorized connection attempt detected from IP address 207.154.242.126 to port 2220 [J]	Port Scan Hacking

Showing 1 to 15 of 314 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.254.40.89

🇸🇦 176.44.142.106

🇳🇱 109.160.32.176

🇺🇸 104.22.56.50

🇸🇬 85.203.21.207

🇵🇭 180.191.127.194

🇸🇬 145.223.130.226

🇨🇳 120.71.10.48

🇰🇷 119.28.239.85

🇳🇱 109.160.32.162

🇸🇬 104.22.224.75

🇷🇺 94.79.7.120

🇫🇷 85.217.140.17

🇳🇱 64.205.72.128

🇿🇦 41.123.71.216

🇺🇸 40.124.117.28

🇺🇸 20.46.228.245

🇺🇸 192.169.226.90

🇧🇷 189.56.195.78

🇩🇪 109.160.32.48