JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

207.154.199.240

Activity Trending Down

Abuse Confidence Score

2% Caution

209 reports

148 reporters · latest 2 weeks ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

209 from 148 distinct reporters

First reported

August 26th 2025

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇫🇷 France 1

Most common categories Email Spam 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 lefraisier.net	2026-10-26 00:59:31 UTC · (2 weeks ago)	SMTP SPAM : Error: command not recognized ...	Email Spam
🇫🇷 oonux.net	2026-01-15 10:29:09 UTC · (9 months ago)	RouterOS: Scanning detected TCP 207.154.199.240:61008 > x.x.x.x:15000	Port Scan
🇺🇦 llighthunter	2025-12-12 21:56:42 UTC · (10 months ago)	Dec 7 03:13:20 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, TLS, session=<OnBpYlJFMpLPmsfw> Dec 7 03:13:22 mail dovecot: pop3-login: Disconnected: Too many bad commands (no aut ... show more Dec 7 03:13:20 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, TLS, session=<OnBpYlJFMpLPmsfw> Dec 7 03:13:22 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, session=<QOV7YlJFNpLPmsfw> Dec 7 03:13:22 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, session=<Fmp+YlJFRJLPmsfw> show less	Port Scan Hacking Spoofing
🇺🇸 Mark--	2025-12-12 02:00:40 UTC · (10 months ago)	Unauthorized connection attempt detected port 8080	Hacking
🇺🇦 llighthunter	2025-12-11 21:28:29 UTC · (10 months ago)	Dec 7 03:13:20 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, TLS, session=<OnBpYlJFMpLPmsfw> Dec 7 03:13:22 mail dovecot: pop3-login: Disconnected: Too many bad commands (no aut ... show more Dec 7 03:13:20 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, TLS, session=<OnBpYlJFMpLPmsfw> Dec 7 03:13:22 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, session=<QOV7YlJFNpLPmsfw> Dec 7 03:13:22 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=207.154.199.240, lip=192.168.1.80, session=<Fmp+YlJFRJLPmsfw> show less	Port Scan Hacking Spoofing
🇺🇸 chronos	2025-12-11 18:28:46 UTC · (10 months ago)	[AUTORAVALT][[11/12/2025 - 15:28:46 -03:00 UTC] Attack from [DigitalOcean, LLC] [207.154.199.240] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Una ... show more [AUTORAVALT][[11/12/2025 - 15:28:46 -03:00 UTC] Attack from [DigitalOcean, LLC] [207.154.199.240] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force] ... show less	Phishing Email Spam Hacking Spoofing Brute-Force
🇫🇷 SpaceHost-Server	2025-12-10 23:43:26 UTC · (11 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-12-10 20:10:23 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 Hobby Bob	2025-12-10 16:07:42 UTC · (11 months ago)	Dec 10 16:07:42 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 30 secs): user=, rip=207.154.199.240, lip=X.X.X.X session=	Port Scan Hacking
🇮🇹 Giacomo Mondino	2025-12-10 15:10:37 UTC · (11 months ago)	Dec 10 15:10:37 server postfix/smtpd[1438737]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\246\001\000\001\242\003\003@\250[>!R\\\325\031u\211\206\344\330N\215\273\334p@\343\321]\365\253\033b\026\375}\37 ... show more Dec 10 15:10:37 server postfix/smtpd[1438737]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\246\001\000\001\242\003\003@\250[>!R\\\325\031u\211\206\344\330N\215\273\334p@\343\321]\365\253\033b\026\375}\377 ?\356\331\226\204\224\2317\203\246\0253\035\|Es\306\306A\243;\304\205\251g\324x!\361\213^B\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 Dec 10 15:10:37 server postfix/smtpd[1438737]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\246\001\000\001\242\003\003\367\261r3=\251Q\255\226\237\035\305s\230\353\365\351!1\227\251\372\266\177\003\224mZ\001n<\355 \037^x.L!\035\233\371B\034IX\304\224\036\246#\370\356\346\317\321\331~\212\321\366\004\031Qg\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= Dec 10 15:10:37 server postfix/smtpd[1438737]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\ ... show less	Brute-Force
🇨🇿 huginet	2025-12-10 14:12:21 UTC · (11 months ago)	2025-12-10T15:12:20.780874 hugo.huginet.net postfix/submission/smtpd[1644564]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\250\001\000\001\244\003\003\261\bhI\315\002\201`\000(\214K\024\355\375\340b}\326W ... show more 2025-12-10T15:12:20.780874 hugo.huginet.net postfix/submission/smtpd[1644564]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\250\001\000\001\244\003\003\261\bhI\315\002\201`\000(\214K\024\355\375\340b}\326W\036\372\231[\263XH\3470\315UQ \203\277\232\375j\234>\f\023\204\335\365=\375L\356'\333\332\324\337\264\332\242V'\217\333y^\3155\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2025-12-10T15:12:20.865224 hugo.huginet.net postfix/submission/smtpd[1644564]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\250\001\000\001\244\003\003t\032\367\270\322\264>\002i<\214z\267\245i.\277h\261\237\263\313\024h\217\273y\3571\000\030\273 \367\372\201\225\231\321\004AWF\376scA}\216-\206\243\201\317U\241{\327o\026@\005\232\362\025\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= ... show less	Email Spam Brute-Force
🇩🇪 jasperedv.de	2025-12-10 13:32:42 UTC · (11 months ago)	SMTP blocked - SPAM	Email Spam Brute-Force
🇬🇧 NotCool	2025-12-10 12:58:39 UTC · (11 months ago)	(eximsyntax) Exim syntax errors from 207.154.199.240 (DE/Germany/-): 10 in the last 3600 secs	Brute-Force
🇺🇸 Hobby Bob	2025-12-10 11:18:55 UTC · (11 months ago)	Dec 10 05:18:55 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 30 secs): user=, rip=207.154.199.240, lip=X.X.X.X session=	Port Scan Hacking
🇫🇷 Steve Brown	2025-12-10 10:58:58 UTC · (11 months ago)	2025-12-10T10:58:57.848736+00:00 fr postfix/submission/smtpd[17651]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\246\001\000\001\242\003\003\374\213\210\271\000\246\335Y\335<T\344\016\224\231\207\277\355\ ... show more 2025-12-10T10:58:57.848736+00:00 fr postfix/submission/smtpd[17651]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\246\001\000\001\242\003\003\374\213\210\271\000\246\335Y\335<T\344\016\224\231\207\277\355\201\335\033\213\246\264\305<\325\|\315,yz \363D\274l\341\036e\264\350\256K\020%E\026!\002\365\213/\253\350\355DO\276C\347\261\034Y\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2025-12-10T10:58:57.894850+00:00 fr postfix/submission/smtpd[17651]: improper command pipelining after CONNECT from unknown[207.154.199.240]: \026\003\003\001\246\001\000\001\242\003\003\335\276{s\323\303\036b\245I\033\366\346.\256zPI\256.\275\270\215\306\231\316l\005\203@\203; \376U\r\306V\0036\036\210\324JK\303\237-\255\300h#\327\244Q\224=4\262\256\357\303\301\253\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2025-12-10T10:58:57.946606+00:00 fr postfix/submission/smtpd[17651]: improper ... show less	Brute-Force

Showing 1 to 15 of 209 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.237.137.166

🇩🇪 2a02:c202:2359:8080::1

🇸🇬 193.37.32.155

🇲🇽 187.212.13.248

🇦🇷 181.105.62.218

🇨🇴 181.62.56.113

🇺🇸 130.49.79.183

🇹🇼 123.58.205.100

🇩🇪 69.5.169.209

🇳🇱 51.158.205.203

🇺🇸 43.153.19.215

🇺🇸 31.134.3.209

🇺🇸 222.167.105.81

🇺🇸 217.145.224.55

🇦🇺 216.226.77.30

🇹🇷 185.231.227.221

🇺🇸 173.255.223.143

🇺🇸 158.94.187.112

🇺🇸 110.172.129.223

🇫🇷 95.111.232.173