JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.194.38.108

154.194.38.108 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 37%: ?

37%

ISP	IT HOSTLINE LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62240
Domain Name	ithostline.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.194.38.108

Whois 154.194.38.108

IP Abuse Reports for 154.194.38.108:

This IP address has been reported a total of 17 times from 6 distinct sources. 154.194.38.108 was first reported on August 25th 2026, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 grassau.com	2026-09-16 14:39:36 (17 hours ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 CELOS-SOC	2026-09-16 06:30:25 (1 day ago)	Multiple Unauthorized VPN Login Attempts	Hacking Brute-Force
🇩🇪 grassau.com	2026-09-15 09:53:49 (1 day ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 Petros Stefanakis	2026-09-15 08:08:59 (1 day ago)	Port Scan detected from 154.194.38.108 (DE/Germany/-).	Port Scan
🇫🇷 sthoyer.de	2026-09-13 19:40:01 (3 days ago)	Sep 13 21:39:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Sep 13 21:39:57 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=17487 DF PROTO=TCP SPT=35551 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 21:39:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=17488 DF PROTO=TCP SPT=35551 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 21:39:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=17488 DF PROTO=TCP SPT=35551 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 21:40:00 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x20 TTL=56 ID=17489 DF PROTO=TCP SPT=35551 DPT=8443 WI ... show less	Port Scan
🇩🇪 grassau.com	2026-09-13 10:49:10 (3 days ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 grassau.com	2026-09-11 15:45:48 (5 days ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 grassau.com	2026-09-10 10:01:59 (6 days ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 grassau.com	2026-09-01 21:53:06 (2 weeks ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 CELOS-SOC	2026-08-30 06:30:28 (2 weeks ago)	Multiple Unauthorized VPN Login Attempts	Hacking Brute-Force
🇫🇷 sthoyer.de	2026-08-28 09:50:04 (2 weeks ago)	Aug 28 11:49:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Aug 28 11:49:55 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1529 DF PROTO=TCP SPT=9103 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 28 11:49:56 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1530 DF PROTO=TCP SPT=9103 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 28 11:49:58 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1531 DF PROTO=TCP SPT=9103 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 Aug 28 11:50:02 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=154.194.38.108 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=1532 DF PROTO=TCP SPT=9103 DPT=8443 WINDOW=655 ... show less	Port Scan
🇩🇪 grassau.com	2026-08-28 07:11:53 (2 weeks ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 grassau.com	2026-08-26 19:33:32 (3 weeks ago)	Port Scan detected from 154.194.38.108 (DE/Germany/State of Berlin/Berlin/-).	Port Scan
🇩🇪 R.G.	2026-08-26 13:18:04 (3 weeks ago)	Port Scan detected from 154.194.38.108 (DE/Germany/-). 11 hits in the last 95 seconds; Ports: ; D ... show more Port Scan* detected from 154.194.38.108 (DE/Germany/-). 11 hits in the last 95 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Aug 26 15:17:40 kernel: Firewall: TCP_IN Blocked* IN=enp0s31f6 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=154.194.38.108 DST=0.X.X.X show less	Port Scan
🇩🇪 CELOS-SOC	2026-08-26 12:30:20 (3 weeks ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 176.67.17.185

🇺🇸 162.216.150.212

🇺🇸 152.163.165.87

🇨🇦 76.64.217.171

🇺🇸 64.62.156.218

🇬🇧 193.176.29.3

🇺🇦 176.120.110.235

🇺🇦 176.120.110.5

🇷🇺 176.116.188.228

🇺🇸 173.255.223.62

🇺🇸 159.203.99.67

🇨🇲 154.70.102.114

🇨🇳 111.225.214.134

🇺🇸 107.150.103.88

🇫🇷 85.217.140.23

🇸🇦 84.13.142.21

🇸🇬 47.84.118.111

🇸🇬 45.76.188.22

🇧🇪 35.205.254.119

🇺🇸 20.65.170.250