JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

207.154.255.44

Neutral Activity

Abuse Confidence Score

0% Low Risk

121 reports

85 reporters · latest 9 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

207.154.255.44 has been reported 121 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

121 from 85 distinct reporters

First reported

May 24th 2023

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 VMHeaven.io	2026-02-03 04:34:37 UTC · (9 months ago)	Blocked by UFW [8081/tcp] Source port: 61005 TTL: 247 Packet length: 44	Port Scan
🇫🇷 masterguru	2026-02-03 03:19:30 UTC · (9 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 207.154.255.44 (DE/Germany/-): 1 in the last 3600 secs (0-197)	Hacking
🇨🇳 ThreatBook.io	2025-12-18 22:48:00 UTC · (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/207.154.255.44 2025-12-18 00:09:16 /favicon.ico 2025-12-18 00:09:13 /form.html 2025-12-18 00:09:17 /1.php 2025-12-18 00:09:14 /upl.php 2025-12-18 00:09:14 /t4 2025-12-18 00 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/207.154.255.44 2025-12-18 00:09:16 /favicon.ico 2025-12-18 00:09:13 /form.html 2025-12-18 00:09:17 /1.php 2025-12-18 00:09:14 /upl.php 2025-12-18 00:09:14 /t4 2025-12-18 00:09:13 / 2025-12-18 00:09:16 /geoip/ 2025-12-18 00:09:19 /password.php 2025-12-18 00:09:18 /systembc/password.php show less	Web App Attack
🇫🇷 MatStef132	2025-12-17 20:42:11 UTC · (10 months ago)	Malicious activity detected (2 incidents). IP has been blacklisted.	DDoS Attack Port Scan
🇩🇪 Mr-Money	2025-12-17 17:03:07 UTC · (10 months ago)	scenario: crowdsecurity/http-backdoors-attempts - events: 2	Hacking Web App Attack
Anonymous	2025-12-17 11:30:57 UTC · (10 months ago)	207.154.255.44 - - [17/Dec/2025:12:30:57 +0100] "GET / HTTP/1.1" 301 169 "-" "curl/8.1.2"	Bad Web Bot
🇺🇸 antlac1	2025-12-17 07:16:05 UTC · (10 months ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2025-12-17 07:05:08 UTC · (10 months ago)	SystemBC.Botnet	DDoS Attack Hacking
🇺🇸 EricTheRedFL	2025-12-17 04:59:54 UTC · (10 months ago)	web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:50 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:50 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59: ... show more web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:50 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:50 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:50 -0500] "GET / HTTP/1.1" 301 517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:51 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 207.154.255.44 - - [16/Dec/2025:23:59:51 -0500] "GET /form.html HTTP/1.1" 301 535 "-" "curl/8.1.2" ... show less	Hacking Brute-Force Web App Attack
Anonymous	2025-12-17 04:09:09 UTC · (10 months ago)		Web App Attack
🇺🇸 zwebvigil	2025-12-17 03:59:23 UTC · (10 months ago)	207.154.255.44 [16/Dec/2025:19:59:22 -0800] "GET / HTTP/1.1" 401 381 "-" port=43904 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 621 207.154.255.44 [16/Dec/2025 ... show more 207.154.255.44 [16/Dec/2025:19:59:22 -0800] "GET / HTTP/1.1" 401 381 "-" port=43904 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 621 207.154.255.44 [16/Dec/2025:19:59:22 -0800] "GET /form.html HTTP/1.1" 401 381 "-" port=43916 "curl/8.1.2" "-" "-" "<ipaddr>" 568 207.154.255.44 [16/Dec/2025:19:59:22 -0800] "GET /upl.php HTTP/1.1" 401 381 "-" port=43926 "Mozilla/5.0" "-" "-" "<ipaddr>" 203 207.154.255.44 [16/Dec/2025:19:59:22 -0800] "GET /t4 HTTP/1.1" 401 381 "-" port=43934 "Mozilla/5.0" "-" "-" "<ipaddr>" 456 207.154.255.44 [16/Dec/2025:19:59:22 -0800] "GET /geoip/ HTTP/1.1" 401 381 "-" port=43940 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 511 207.154.255.44 [16/Dec/2025:19:59:23 -0800] "GET /favicon.ico HTTP/1.1" 401 381 "-" port=43944 "Mozilla/5.0 (Windows NT show less	Web App Attack
🇩🇪 0x44	2025-12-17 03:20:57 UTC · (10 months ago)	207.154.255.44 [17/Dec/2025] * Spam host detected, probing for vulnerabilities ...	Web Spam Exploited Host Web App Attack
Anonymous	2025-12-17 03:18:46 UTC · (10 months ago)	[Tue Dec 16 22:18:42.687868 2025] [proxy_fcgi:error] [pid 957779:tid 957779] [client 207.154.255.44:46636] AH01071: Got error 'Primary script unknown' [Tue Dec 16 22:18:43.411524 2025] [proxy_fcgi:error] [pid 958233:tid 958233] [client 207.154.255.44 ... show more [Tue Dec 16 22:18:42.687868 2025] [proxy_fcgi:error] [pid 957779:tid 957779] [client 207.154.255.44:46636] AH01071: Got error 'Primary script unknown' [Tue Dec 16 22:18:43.411524 2025] [proxy_fcgi:error] [pid 958233:tid 958233] [client 207.154.255.44:46672] AH01071: Got error 'Primary script unknown' [Tue Dec 16 22:18:43.767505 2025] [proxy_fcgi:error] [pid 957512:tid 957512] [client 207.154.255.44:46698] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2025-12-17 02:55:12 UTC · (10 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack
🇬🇧 [email protected]	2025-12-17 00:49:48 UTC · (10 months ago)	...	Brute-Force SSH

Showing 1 to 15 of 121 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.252.139.63

🇵🇰 172.69.111.192

🇧🇷 172.68.74.144

🇺🇸 162.216.149.53

🇧🇷 162.158.177.134

🇵🇭 162.158.136.156

🇰🇷 125.135.78.246

🇦🇷 104.23.237.89

🇮🇩 103.157.48.103

🇿🇦 102.215.193.12

🇨🇦 99.249.234.166

🇺🇸 64.227.17.80

🇰🇷 47.80.30.234

🇮🇳 45.123.92.247

🇺🇸 2a10:7b02:2383:8929:c4bd:b03:ccdd:d6ba

🇪🇨 181.199.44.7

🇨🇴 172.71.186.132

🇮🇳 172.70.184.158

🇲🇺 172.69.92.137

🇮🇳 152.58.78.166