Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
207.154.243.100 has a threat confidence score of 100%. This IP address from Germany (AS14061, DigitalOcean, LLC) has been observed in 272 honeypot sessions targeting SSH, HTTPS, IMAP, FTP, TELNET and 2 other protocols. Detected attack patterns include ssh host fingerprint and shell rc immutable removal. First observed on February 22, 2026, most recently active April 8, 2026.
Execution of a multi-command host fingerprinting script that collects kernel details, architecture, uptime, CPU count and model, GPU information, login history, and binary help characteristics, combined with chattr -i $HOME/.bashrc $HOME/.zshrc 2>/dev/null || true to remove the immutable attribute from user shell initialization files in the current user’s home directory.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration