207.154.243.21

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
47% Elevated
15 reports
13 reporters · latest 1 hour ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
15 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 2 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1
Most common categories Web App Attack 5 Bad Web Bot 4 DDoS Attack 2 Exploited Host 2 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 IndigoRidge
Web App Attack
🇺🇸 IndigoRidge
Web App Attack
🇺🇸 IndigoRidge
Web App Attack
🇩🇪 klaus_ph
[Wed Nov 11 18:10:51.189536 2026] [reqtimeout:info] [pid 2935586] [client 207.154.243.21:47350] AH01382: Request header read timeout ...
Bad Web Bot
🇺🇸 mutebot.net
Port Scan
🇩🇪 LRob
Shop search flood (L7 DDoS) | path: /30-meilleur-velo-entre-2000-et-3000-euros | query: order=product.name.desc&q=Taille-XXL-60-53 | src_port: 43310, 43322
DDoS Attack Web App Attack
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
Exploited Host Bad Web Bot
Anonymous
WEB attack
Brute-Force
🇺🇸 SX Communications
HTTP application-layer DoS / botnet traffic from 207.154.243.21: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
DDoS Attack Bad Web Bot Exploited Host
🇺🇸 ipblock.com
IPBlock protected site ID [4055-d][s=03]. Persistent 404, vulnerability scanner
Hacking Bad Web Bot Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇨🇿 lp
anomaly: tcp_port_scan, 501 > threshold 500, repeats 26528 times
Port Scan
🇫🇷 Quarks Solutions
crowdsecurity/iptables-scan-multi_ports
Port Scan
🇦🇹 centurion
Blocked by UFW on ns03 [8001/tcp] Source port: 61013 TTL: 246 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 6939.
Port Scan Hacking

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 198.235.24.133
🇬🇧 216.226.76.20
🇳🇱 185.242.226.59
🇺🇸 185.180.141.4
🇦🇷 181.46.66.17
🇦🇷 179.37.76.55
🇺🇸 162.216.149.242
🇺🇸 162.216.149.176
🇺🇸 157.230.9.158
🇻🇪 143.105.18.78
🇺🇸 140.235.171.44
🇮🇩 103.159.199.43
🇵🇱 87.251.64.131
🇳🇱 45.156.128.76
🇨🇳 43.242.97.26
🇸🇬 43.160.250.239
🇺🇸 43.110.29.61
🇬🇧 195.96.139.125
🇺🇸 167.71.99.191
🇺🇸 167.71.25.26
feedback