JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 207.154.239.156

207.154.239.156 was found in our database!

This IP was reported 128 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 207.154.239.156

Whois 207.154.239.156

IP Abuse Reports for 207.154.239.156:

This IP address has been reported a total of 128 times from 106 distinct sources. 207.154.239.156 was first reported on August 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-08-15 01:02:30 (2 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇬🇧 myintarweb	2026-08-15 00:11:35 (2 days ago)	207.154.239.156 - - [07/Aug/2026:23:10:38 +0100] 443 "GET / HTTP/1.0" 400 1671 "-" "-" ...	Hacking Bad Web Bot Web App Attack
🇮🇳 Parth Maniar	2026-08-10 17:31:56 (6 days ago)	This IP address carried out 3 SSH credential attack (attempts) on 09-08-2026. For more information o ... show more This IP address carried out 3 SSH credential attack (attempts) on 09-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇺🇸 rjdefrancisco	2026-08-10 07:06:17 (1 week ago)	Unwanted traffic detected by honeypot on August 09, 2026: port scans (1 port 23 scan).	Port Scan Brute-Force SSH
🇺🇸 chronos	2026-08-10 06:29:09 (1 week ago)	[AUTORAVALT][[10/08/2026 - 03:29:09 -03:00 UTC] Attack from [DigitalOcean, LLC] [207.154.239.156] Ac ... show more [AUTORAVALT][[10/08/2026 - 03:29:09 -03:00 UTC] Attack from [DigitalOcean, LLC] [207.154.239.156] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
🇪🇸 librebit	2026-08-10 02:17:19 (1 week ago)	Brute force	Brute-Force
🇨🇦 alexbfr	2026-08-09 21:51:03 (1 week ago)	Fail2Ban report from custom-honeypot; automated Telnet honeypot detection.	Brute-Force IoT Targeted
🇳🇱 DonAtari	2026-08-09 14:45:22 (1 week ago)	DShield firewall scan - TCP to port 8000	Brute-Force SSH
🇺🇸 donarev419	2026-08-09 10:10:54 (1 week ago)	Connection to port 445 with data transfer. Data preview:	Port Scan Hacking
🇫🇷 Thomas Basset	2026-08-09 09:19:46 (1 week ago)	Aug 9 11:19:45 ns0 postfix/smtpd[1959768]: improper command pipelining after CONNECT from unknown[2 ... show more Aug 9 11:19:45 ns0 postfix/smtpd[1959768]: improper command pipelining after CONNECT from unknown[207.154.239.156]: \026\003\003\001\246\001\000\001\242\003\003+e\374<H\2450z\3627r4\301\210\377$\341\240g\226\371\220s\206\370t\033\260\275\332M\253 \356'y\|\323\033\017U\017\037\2148:>W?\242\332\331^C\347\254=>=\353\263\257\021\316\212\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 Aug 9 11:19:45 ns0 postfix/smtpd[1959768]: improper command pipelining after CONNECT from unknown[207.154.239.156]: \026\003\003\001\246\001\000\001\242\003\003\353/x\323(\2746S\v=P\f^\240l0K\200\313\220\b\266KE3\274\026F\030xI, \215L\304 `\345\315\203\030\302\373q\026\272wV\fx\343\260\356\200\211\205Ku\231\356\017\037\345\004\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= Aug 9 11:19:45 ns0 postfix/smtpd[1959768]: improper command pipelining after CONNECT from unknown[207.154.239.156]: \026\003\003\001W\001\000\001S\003\003\024\032 ... show less	Brute-Force
🇫🇷 EvoX	2026-08-09 08:51:24 (1 week ago)	🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 2525 GET / User-Agent: Mozilla/5.0 (compatible; O ... show more 🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 2525 GET / User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) Accept: / Accept-Encoding: gzip; 2525 [2] TCP show less	Hacking Bad Web Bot
🇳🇱 ipoac.nl	2026-08-09 07:59:27 (1 week ago)	2026-08-09T09:59:14.284857+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT ... show more 2026-08-09T09:59:14.284857+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT from unknown[207.154.239.156]:53190: 026003003001246001000001242003003^0031770059253&rC227306s3120028N002372a>0218004327034+e+-302%6 376355233320>2062356s377201003020002016333322W020302'S216234A204331237311006261g0002120000260003000g3002363002420002360009000k300237300243000237 2026-08-09T09:59:18.372630+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT from unknown[207.154.239.156]:53196: 026003003001246001000001242003003365360235325Av367016247ze3312361f034237,347P302345273y212^x343r323321 n221312341342271C;326R266332376341246005i<177304377261357252]P373256212Q366}000212000005000004000a000300000204000272000A000235300241300235000= 2026-08-09T09:59:21.448227+02:00 ipoac.nl postfix/smtpd-: improper command pipelining after CONNECT from unknown[207.154.239.156]:27284: 026003003001W001000001S003003003t020342251k9377L365sZ277237354<SQ=_024335r374320~227305312375313 266313Ij250356!264207f3172 show less	Brute-Force
Anonymous	2026-08-09 07:46:13 (1 week ago)	Unauthorized connection attempt	Email Spam Port Scan
Anonymous	2026-08-09 07:20:02 (1 week ago)	SSH tarpit (endlessh) connection from 207.154.239.156	Brute-Force SSH
🇺🇸 ras07	2026-08-09 06:00:12 (1 week ago)	Brute force SSH login attempts.	Brute-Force SSH

Showing 1 to 15 of 128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 72.255.3.171

🇩🇿 41.97.207.190

🇺🇸 216.239.161.54

🇺🇸 185.243.5.219

🇦🇷 181.46.185.162

🇦🇷 181.45.207.82

🇨🇳 115.191.22.111

🇷🇺 95.174.102.79

🇺🇸 66.132.224.23

🇩🇪 8.209.75.169

🇺🇸 2400:cb00:1293:1000:5008:f55b:2ad3:bf7c

🇺🇸 162.158.155.91

🇭🇰 118.193.40.61

🇨🇳 111.127.45.127

🇳🇱 94.156.177.153

🇩🇪 93.152.224.9

🇳🇱 92.63.197.5

🇨🇳 36.139.152.215

🇨🇳 36.106.167.92

🇸🇬 34.21.249.194