JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.154.239.237

207.154.239.237 was found in our database!

This IP was reported 126 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.154.239.237

Whois 207.154.239.237

IP Abuse Reports for 207.154.239.237:

This IP address has been reported a total of 126 times from 100 distinct sources. 207.154.239.237 was first reported on May 3rd 2026, and the most recent report was 28 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 PrivateLiu	2026-07-29 04:50:05 (28 seconds ago)	[AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CM ... show more [AbuseIPDB auto-report] Rules: Rule5. Region: non-CN. Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /solr/admin/cores?action=STATUS&wt=json, /solr/admin/info/system. Statuses: 301, 404. Methods: GET. UA: N/A show less	Web App Attack
🇬🇧 gaztronics	2026-07-29 04:21:38 (28 minutes ago)	2026-07-29T04:21:36.006733 liberator sendmail[272834]: 66T4LZTY272834: [207.154.239.237] did not iss ... show more 2026-07-29T04:21:36.006733 liberator sendmail[272834]: 66T4LZTY272834: [207.154.239.237] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA ... show less	Brute-Force
🇩🇪 ghostwarriors	2026-07-29 04:20:33 (30 minutes ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kuj	2026-07-29 03:11:52 (1 hour ago)	2026-07-28T21:11:50.302944-06:00 derpamp-oci derper[13901]: 2026/07/28 21:11:50 http: TLS handshake ... show more 2026-07-28T21:11:50.302944-06:00 derpamp-oci derper[13901]: 2026/07/28 21:11:50 http: TLS handshake error from 207.154.239.237:26064: client sent an HTTP request to an HTTPS server 2026-07-28T21:11:50.606618-06:00 derpamp-oci derper[13901]: 2026/07/28 21:11:50 http: TLS handshake error from 207.154.239.237:26072: client sent an HTTP request to an HTTPS server 2026-07-28T21:11:52.137301-06:00 derpamp-oci derper[13901]: 2026/07/28 21:11:52 http: TLS handshake error from 207.154.239.237:26078: client sent an HTTP request to an HTTPS server ... show less	Port Scan Brute-Force
🇺🇸 donarev419	2026-07-29 02:54:52 (1 hour ago)	Port scan detected on port 587 (connection without data transfer)	Port Scan
🇬🇧 andypiper	2026-07-29 01:03:12 (3 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 Kreisausschuss des Odenwaldkreises	2026-07-29 00:56:08 (3 hours ago)	HAProxy NOSRV or BADREQ	Web App Attack
🇺🇸 jkhorvath.com	2026-07-29 00:33:34 (4 hours ago)	Request for URL /cgi-bin/authLogin.cgi	Phishing Brute-Force Web App Attack
🇩🇪 dispaisyenterprises	2026-07-29 00:09:41 (4 hours ago)	Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9092 GET /v2/_catalog User-Agent: Go-http-client/1. ... show more Honeypot [fra-de-honeypot]: HTTP/1.1 request on 9092 GET /v2/_catalog User-Agent: Go-http-client/1.1; 9092 [9] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇦🇺 LiftUp Hosting	2026-07-28 23:39:57 (5 hours ago)	Honeypot hit: Unauthorized traffic (297 bytes of payload); 4891 [1] TCP	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-28 21:47:20 (7 hours ago)	Honeypot hit: Unauthorized traffic (297 bytes of payload); 11434 [1] TCP	Port Scan
🇸🇰 EVISION	2026-07-28 20:02:16 (8 hours ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: 9Vcou6kVvoUl2rQzuH9Qvl69qLUIh8MO show less	Port Scan Hacking Brute-Force
🇫🇷 EggEek	2026-07-28 19:27:05 (9 hours ago)	2026-07-28T19:26:59.216393+00:00 hyperion postfix/submission/smtpd[809253]: improper command pipelin ... show more 2026-07-28T19:26:59.216393+00:00 hyperion postfix/submission/smtpd[809253]: improper command pipelining after CONNECT from unknown[207.154.239.237]: \026\003\003\001\247\001\000\001\243\003\003\343\312\300\373\001P\211\|\366\027\226i\230\t\2655d%\275\2321\020<\032K\016\341f\036X\200w \332\251\251\0212\340\327\377\341\266X\331\025\223$\202\230\af\346\340\350\2000\300\305\016\345\344\365\235\005\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-07-28T19:26:59.248537+00:00 hyperion postfix/submission/smtpd[809253]: improper command pipelining after CONNECT from unknown[207.154.239.237]: \026\003\003\001\247\001\000\001\243\003\003Px\256\275p7\326\206\001\315\375\355\2463]P\2064\311\247`\202\306\371@\372\341\226\030Q\265\215 O\2227a\017\234\243\253\002\350\243\274`&\237\337\022Q\356\327\336,\321-@-5\3311\347x\a\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2026-07-28T19:26:59.281405+00:00 hyperion postfix/submi ... show less	Brute-Force SSH
🇨🇦 oh.mg	2026-07-28 19:24:20 (9 hours ago)	2026-07-28T15:24:19.371211-04:00 frank postfix/submission/smtpd[2842978]: improper command pipelinin ... show more 2026-07-28T15:24:19.371211-04:00 frank postfix/submission/smtpd[2842978]: improper command pipelining after CONNECT from unknown[207.154.239.237]: \026\003\003\001\247\001\000\001\243\003\003\302\322Y\323\263L\031\333\033\033\217\226\224\v\322\3243\343\251\243\b\026\f\033/\3029a\224\313H\204 \355\333\006\261e=F\211\203\252\304\326\304\f\310\203%x\\\361ks5\255Q\327L\033\r\017eK\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2026-07-28T15:24:19.569188-04:00 frank postfix/submission/smtpd[2845911]: improper command pipelining after CONNECT from unknown[207.154.239.237]: \026\003\003\001\247\001\000\001\243\003\003\023\024wO\357jP\023\364*F\340\313\v/F\377\234\256\333D\035\372v \017\021Jl!1\017 \211\003\276\355\222\364x\272\233\321\017\210\016\332\231\266\370\362\237\213U\346\247\216\247\030\177$&\356\275c\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2026-07-28T15:24:19.762691-04:00 frank postfix/submission/smt ... show less	Brute-Force Port Scan
Anonymous	2026-07-28 17:48:19 (11 hours ago)	hacking	Hacking

Showing 1 to 15 of 126 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c256:5001

🇧🇷 205.210.31.180

🇧🇪 198.235.24.152

🇨🇳 115.204.236.44

🇸🇬 111.119.198.130

🇺🇸 104.168.53.118

🇨🇭 92.39.60.52

🇺🇸 68.66.220.30

🇺🇸 64.62.156.66

🇺🇸 45.194.67.29

🇪🇨 45.163.204.31

🇺🇸 45.30.77.163

🇵🇰 39.34.186.227

🇨🇦 15.222.30.163

🇦🇿 212.47.135.160

🇲🇦 196.75.52.142

🇳🇱 185.93.89.36

🇧🇷 179.148.113.249

🇺🇸 170.187.147.114

🇺🇸 160.119.66.13