JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

209.97.150.254

Neutral Activity

Abuse Confidence Score

0% Low Risk

64 reports

33 reporters · latest 1 year ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

209.97.150.254 has been reported 64 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

64 from 33 distinct reporters

First reported

October 13th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Block Rockin' Beats	2025-10-20 02:50:23 UTC · (1 year ago)	Probing for git config files	Hacking Web App Attack
🇫🇮 Jordy	2025-10-17 11:40:51 UTC · (1 year ago)	17/Oct/2025:13:43:22.941895 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATT ... show more 17/Oct/2025:13:43:22.941895 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.git/config"] [unique_id "aPIr2oKkFS0TlRXo5vXtCQAAAAM"] 17/Oct/2025:13:43:22.941895 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94" ... show less	Web App Attack
🇦🇺 Asimar	2025-10-17 10:03:24 UTC · (1 year ago)	(PERMBLOCK) 209.97.150.254 (US/United States/-) has had more than 2 temp blocks	Hacking
🇩🇪 DocNetzwerk	2025-10-17 09:47:26 UTC · (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 209.97.150.254 (US/United States/-)	SQL Injection
🇫🇮 Jordy	2025-10-17 09:18:59 UTC · (1 year ago)	17/Oct/2025:11:21:31.076240 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATT ... show more 17/Oct/2025:11:21:31.076240 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "familievandemaat.nl"] [uri "/.git/config"] [unique_id "aPIKm7oVXSjE0018PIIJAQAAAAY"] 17/Oct/2025:11:21:31.076240 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94" ... show less	Web App Attack
🇫🇷 ingroscart.it	2025-10-17 08:17:43 UTC · (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 209.97.150.254 (US/United States/-)	SQL Injection
🇺🇸 blizzard	2025-10-17 06:51:48 UTC · (1 year ago)	Unauthorized HTTP/1.1 GET /.git/config blocked by Custom rules; requester ignored robots.txt: (ASN: 14061) (Network: DIGITALOCEAN-ASN) (Method: GET) (Path: /.git/config) (Query: ) (User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ... show more Unauthorized HTTP/1.1 GET /.git/config blocked by Custom rules; requester ignored robots.txt: (ASN: 14061) (Network: DIGITALOCEAN-ASN) (Method: GET) (Path: /.git/config) (Query: ) (User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36) show less	Port Scan Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇦🇺 nzhost.co.nz	2025-10-17 06:25:11 UTC · (1 year ago)	$f2bV_matches	Hacking Brute-Force
🇳🇱 Jordy	2025-10-17 05:40:12 UTC · (1 year ago)	17/Oct/2025:07:40:11.779204 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATT ... show more 17/Oct/2025:07:40:11.779204 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "fc-pilsener.nl"] [uri "/.git/config"] [unique_id "aPHWu4DXnRlBjg7NzPwuGAAAAAc"] 17/Oct/2025:07:40:11.779204 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id ... show less	Web App Attack
🇫🇷 sprmario	2025-10-17 04:56:01 UTC · (1 year ago)	Domain : fatihterimsozluk.com Rule : config 2025-10-17 04:55:27 192.168.1.68 GET /.git/config - 80 - 172.71.203.137 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - fatihterimsozluk. ... show more Domain : fatihterimsozluk.com Rule : config 2025-10-17 04:55:27 192.168.1.68 GET /.git/config - 80 - 172.71.203.137 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 - fatihterimsozluk.com 403 0 0 1410 438 125 - 209.97.150.254 show less	Hacking SQL Injection
🇦🇺 Asimar	2025-10-17 04:51:43 UTC · (1 year ago)	(mod_security) mod_security triggered on hostname [redacted] 209.97.150.254 (US/United States/-): (CF_ENABLE)	SQL Injection
🇳🇱 Jordy	2025-10-17 02:00:41 UTC · (1 year ago)	17/Oct/2025:04:00:41.088676 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATT ... show more 17/Oct/2025:04:00:41.088676 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "fc-pilsener.nl"] [uri "/.git/config"] [unique_id "aPGjSTfGRWqZw4IS5XW5vgAAAAY"] 17/Oct/2025:04:00:41.088676 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 209.97.150.254] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id ... show less	Web App Attack
🇩🇪 LRob	2025-10-17 00:03:06 UTC · (1 year ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 Mr-Money	2025-10-16 14:41:43 UTC · (1 year ago)	209.97.150.254 - - [16/Oct/2025:16:41:43 +0200] "GET /.git/config HTTP/1.1" 404 496 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ...	Hacking SQL Injection Bad Web Bot Exploited Host Web App Attack
🇬🇧 openstrike.co.uk	2025-10-16 05:13:37 UTC · (1 year ago)	3 attacks on VC URLs: GET /.git/config HTTP/1.1	Hacking

Showing 1 to 15 of 64 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 218.201.250.120

🇬🇧 212.71.250.74

🇳🇱 195.178.110.26

🇨🇴 185.244.235.133

🇺🇸 185.180.141.2

🇰🇭 103.115.173.112

🇹🇼 60.250.195.111

🇧🇩 2a09:bac5:49b:25b9::3c2:47

🇩🇪 194.35.188.103

🇿🇦 154.17.153.202

🇺🇸 142.54.236.102

🇷🇴 92.118.39.77

🇺🇸 66.132.195.96

🇧🇷 45.164.246.11

🇯🇵 43.165.190.208

🇺🇸 23.108.72.224

🇺🇸 2604:2dc0:202:200::17b

🇹🇼 198.235.24.83

🇲🇽 187.190.254.29

🇺🇸 162.216.150.156