JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.54.172.209

159.54.172.209

Recent Activity

18 reports found in our database

91% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Oracle Corporation

Usage Type

Data Center/Web Hosting/Transit

ASN

AS31898

Domain Name

oracle.com

Country

🇺🇸 United States of America

City

San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 159.54.172.209:

This IP address has been reported a total of 18 times from 18 distinct sources. 159.54.172.209 was first reported on August 24th 2026, and the most recent report was 4 days ago. In the last 60 days, the top reporter locations were: France with 7 reports; Germany with 4 reports; United States of America with 4 reports. The most common categories in these recent reports were: Port Scan 17 times; Hacking 2 times; Brute-Force 1 time; Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 peter.pann	2026-08-25 22:23:58 (4 days ago)	Port scan: 18 blocked connection attempts to ports 8000,8082,8083,9118,9119,9120,9121,9150,9443 (dro ... show more Port scan: 18 blocked connection attempts to ports 8000,8082,8083,9118,9119,9120,9121,9150,9443 (dropped by our geo-firewall). show less	Port Scan
🇫🇷 EvoX	2026-08-25 21:01:17 (5 days ago)	🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.0 request on 9119 GET / User-Agent: Mozilla/5.0; 9119 [1], 915 ... show more 🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.0 request on 9119 GET / User-Agent: Mozilla/5.0; 9119 [1], 9150 [1], 8000 [1], 9121 [1], 9120 [1], 8083 [1] TCP show less	Hacking Bad Web Bot
🇬🇧 pearbright	2026-08-25 15:19:36 (5 days ago)	2026-08-25T15:19:34.983264+00:00 srv1791811 kernel: [4940256.962543] [UFW BLOCK] IN=eth0 OUT= MAC=64 ... show more 2026-08-25T15:19:34.983264+00:00 srv1791811 kernel: [4940256.962543] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=159.54.172.209 DST=76.13.255.190 LEN=60 TOS=0x08 PREC=0x40 TTL=41 ID=13588 DF PROTO=TCP SPT=46672 DPT=9121 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-25T15:19:34.983474+00:00 srv1791811 kernel: [4940256.962785] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=159.54.172.209 DST=76.13.255.190 LEN=60 TOS=0x08 PREC=0x40 TTL=43 ID=9498 DF PROTO=TCP SPT=33514 DPT=9119 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-25T15:19:34.983520+00:00 srv1791811 kernel: [4940256.962809] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=159.54.172.209 DST=76.13.255.190 LEN=60 TOS=0x08 PREC=0x40 TTL=41 ID=2707 DF PROTO=TCP SPT=58200 DPT=8000 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-25T15:19:34.983542+00:00 srv1791811 kernel: [4940256.962892] [UFW BLOCK] IN=eth0 OUT= MAC=64:e8:d4:c0:67:43:44:38:39:ff:ff:41:08:00 SRC=159 ... show less	Port Scan
🇺🇸 kelliwic.net	2026-08-25 14:41:46 (5 days ago)	Port scan detected (F2B)	Port Scan
🇺🇸 micropedro	2026-08-25 13:26:48 (5 days ago)	4 incidents: port scanning. Ports: 8000/TCP(1), 8082/TCP(1), 8083/TCP(1), 9119/TCP(1), 9120/TCP(1). ... show more 4 incidents: port scanning. Ports: 8000/TCP(1), 8082/TCP(1), 8083/TCP(1), 9119/TCP(1), 9120/TCP(1). First: 2026-08-25 09:26, Last: 2026-08-25 09:26 UTC. Triggers: ufw-repeater,non-public-port,firewall-tcp. show less	Port Scan
🇩🇪 ValtonTahiri	2026-08-25 07:31:14 (5 days ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=159.54.172.209; proto=TCP; source_port=54896; target_port=9121; flags=SYN show less	Port Scan
Anonymous	2026-08-25 07:30:11 (5 days ago)	Triggered: repeated knocking on closed ports.	Port Scan
🇫🇷 sthoyer.de	2026-08-25 06:48:20 (5 days ago)	Aug 25 08:48:18 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Aug 25 08:48:18 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.54.172.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=11278 DF PROTO=TCP SPT=34660 DPT=9119 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 08:48:18 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.54.172.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=18411 DF PROTO=TCP SPT=36754 DPT=9121 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 08:48:18 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.54.172.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=44512 DF PROTO=TCP SPT=44830 DPT=9120 WINDOW=64240 RES=0x00 SYN URGP=0 Aug 25 08:48:18 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=159.54.172.209 DST=173.212.223.67 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=26591 DF PROTO=TCP SPT=40268 DPT=8000 WI ... show less	Port Scan
🇫🇷 Little Iguana	2026-08-25 06:48:18 (5 days ago)	trying to access non-authorized port	Port Scan
🇩🇪 psauxit	2026-08-25 04:11:05 (5 days ago)	Fail2Ban - UFW port probing on unauthorized port	Port Scan
🇺🇸 LotPhantom	2026-08-25 03:50:34 (5 days ago)	2026-08-25T03:50:34.050054+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-08-25T03:50:34.050054+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=159.54.172.209 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=54483 DF PROTO=TCP SPT=44452 DPT=9120 WINDOW=64240 RES=0x00 SYN URGP=0 2026-08-25T03:50:34.050085+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=159.54.172.209 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=54552 DF PROTO=TCP SPT=40954 DPT=9119 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇫🇷 Petre 21_ip	2026-08-25 03:28:49 (5 days ago)	2026-08-25T05:28:48.603556+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-08-25T05:28:48.603556+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=159.54.172.209 DST=155.133.26.57 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=62309 DF PROTO=TCP SPT=39232 DPT=9119 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 mutebot.net	2026-08-25 02:54:08 (5 days ago)	SRC=159.54.172.209, PROTO=TCP, SPT=55834, DPT=9119 SRC=159.54.172.209, PROTO=TCP, SPT=36336, DPT=911 ... show more SRC=159.54.172.209, PROTO=TCP, SPT=55834, DPT=9119 SRC=159.54.172.209, PROTO=TCP, SPT=36336, DPT=9118 SRC=159.54.172.209, PROTO=TCP, SPT=36284, DPT=9121 SRC=159.54.172.209, PROTO=TCP, SPT=57306, DPT=9120 SRC=159.54.172.209, PROTO=TCP, SPT=55468, DPT=9150 show less	Port Scan
🇩🇪 schuh	2026-08-25 01:37:14 (5 days ago)	25-08-2026:01:36:25UTC [Port Scan] unique_ports:9 ports:8000,9119,9121,9120,8082,8083,9118,9150,9443 ... show more 25-08-2026:01:36:25UTC [Port Scan] unique_ports:9 ports:8000,9119,9121,9120,8082,8083,9118,9150,9443 (9 packets). SRC=159.54.172.209 TTL=56 DF PROTO=TCP SPT=41552 DPT=8000 SYN show less	Port Scan
🇵🇱 nfsec.pl	2026-08-25 01:22:27 (5 days ago)	Detected: TCP scan on port: 8000 with flags: SYN	Port Scan

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.133.24.124

🇺🇸 172.236.102.250

🇺🇸 172.203.212.25

🇵🇰 154.80.43.143

🇺🇸 147.185.132.83

🇺🇸 136.118.79.234

🇺🇸 52.71.216.196

🇧🇩 2400:cb00:1237:1000:ee50:3748:7cb4:b4e

🇨🇿 2400:cb00:31:1000:6141:c9fe:e85:e273

🇭🇰 191.124.7.154

🇻🇳 180.93.237.138

🇧🇷 179.189.85.66

🇷🇺 176.57.220.240

🇨🇳 175.175.235.48

🇸🇬 114.119.154.200

🇨🇦 85.217.149.54

🇺🇸 34.148.214.190

🇨🇦 20.48.250.41

🇺🇸 2607:f8b0:4001:c03::12d

🇩🇪 2400:cb00:1041:1000:a1b4:d6a7:f5f9:c57f