Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
207.154.254.15 attackspambots
Port scan: Attack repeated for 24 hours
2020-03-21 20:20:17
207.154.254.15 attackbotsspam
firewall-block, port(s): 80/tcp
2020-03-06 20:12:08
207.154.254.154 attackspam
techno.ws 207.154.254.154 \[27/Oct/2019:16:29:54 +0100\] "POST /wp-login.php HTTP/1.1" 200 5604 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
techno.ws 207.154.254.154 \[27/Oct/2019:16:29:54 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4070 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-10-28 00:14:04
207.154.254.64 attackbotsspam
Honeypot attack, port: 23, PTR: PTR record not found
2019-07-30 03:14:06
207.154.254.64 attackbotsspam
Automatic report - Port Scan Attack
2019-07-16 04:05:43
207.154.254.64 attack
Excessive Port-Scanning
2019-07-15 23:57:52
207.154.254.64 attackbotsspam
Excessive Port-Scanning
2019-07-05 07:06:53
207.154.254.64 attackspam
2019-06-27 18:10:43,824 fail2ban.actions        [23326]: NOTICE  [portsentry] Ban 207.154.254.64
...
2019-06-28 23:51:07
Whois info:
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       207.154.192.0 - 207.154.255.255
CIDR:           207.154.192.0/18
NetName:        DIGITALOCEAN-207-154-192-0
NetHandle:      NET-207-154-192-0-1
Parent:         NET207 (NET-207-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   DigitalOcean, LLC (DO-13)
RegDate:        2016-04-12
Updated:        2020-04-03
Comment:        Routing and Peering Policy can be found at https://www.as14061.net
Comment:        
Comment:        Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref:            https://rdap.arin.net/registry/ip/207.154.192.0



OrgName:        DigitalOcean, LLC
OrgId:          DO-13
Address:        105 Edgeview Drive, Suite 425
City:           Broomfield
StateProv:      CO
PostalCode:     80021
Country:        US
RegDate:        2012-05-14
Updated:        2025-04-11
Ref:            https://rdap.arin.net/registry/entity/DO-13


OrgTechHandle: NOC32014-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-646-827-4366 
OrgTechEmail:  noc@digitalocean.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN

OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName:   DigitalOcean Abuse
OrgAbusePhone:  +1-646-827-4366 
OrgAbuseEmail:  abuse@digitalocean.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/DIGIT19-ARIN

OrgNOCHandle: NOC32014-ARIN
OrgNOCName:   Network Operations Center
OrgNOCPhone:  +1-646-827-4366 
OrgNOCEmail:  noc@digitalocean.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/NOC32014-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 207.154.254.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44380
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;207.154.254.156.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026091501 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 10:30:06 CST 2026
;; MSG SIZE  rcvd: 108
Host info
Host 156.254.154.207.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 156.254.154.207.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
118.27.37.73 attackbotsspam
Aug  1 05:27:17 vmd17057 sshd\[23337\]: Invalid user lukas from 118.27.37.73 port 45524
Aug  1 05:27:17 vmd17057 sshd\[23337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.37.73
Aug  1 05:27:20 vmd17057 sshd\[23337\]: Failed password for invalid user lukas from 118.27.37.73 port 45524 ssh2
...
2019-08-01 16:18:13
120.52.121.86 attackbotsspam
2019-08-01T07:12:19.471461abusebot-7.cloudsearch.cf sshd\[4467\]: Invalid user leagsoft from 120.52.121.86 port 46868
2019-08-01 16:50:36
106.12.102.91 attackspam
Aug  1 04:02:28 localhost sshd\[20680\]: Invalid user rain from 106.12.102.91 port 16392
Aug  1 04:02:28 localhost sshd\[20680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.91
Aug  1 04:02:31 localhost sshd\[20680\]: Failed password for invalid user rain from 106.12.102.91 port 16392 ssh2
Aug  1 04:05:44 localhost sshd\[20737\]: Invalid user ben from 106.12.102.91 port 47596
Aug  1 04:05:44 localhost sshd\[20737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.102.91
...
2019-08-01 16:41:11
185.30.176.148 attackspam
Aug105:11:45server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.176.191\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:06:28server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.176.191\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:21:41server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.176.148\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\<2/RvvQWPF5 5HrCU\>Aug105:05:51server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.176.191\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:05:53server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.176.148\,lip=
2019-08-01 16:38:08
213.152.162.154 attack
REQUESTED PAGE: /xmlrpc.php
2019-08-01 16:49:52
49.88.112.61 attack
Aug  1 06:48:46 host sshd\[8687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.61  user=root
Aug  1 06:48:48 host sshd\[8687\]: Failed password for root from 49.88.112.61 port 20240 ssh2
...
2019-08-01 16:16:56
185.30.176.93 attackbots
Aug105:05:49server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.63\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:06:45server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:06:06server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:16:54server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.251.104.77\,TLS:Connectionclosed\,session=\Aug105:05:47server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=185.30.177.176\,lip=148.25
2019-08-01 16:34:46
191.53.253.145 attackbots
Currently 7 failed/unauthorized logins attempts via SMTP/IMAP whostnameh 7 different usernames and wrong password:
2019-08-01T05:01:59+02:00 x@x
2019-07-29T18:47:10+02:00 x@x
2019-07-24T13:31:31+02:00 x@x
2019-07-15T18:15:36+02:00 x@x
2019-07-15T14:31:53+02:00 x@x
2019-07-10T22:22:39+02:00 x@x
2019-06-23T12:28:37+02:00 x@x

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=191.53.253.145
2019-08-01 16:27:43
189.38.173.25 attackspambots
Aug  1 09:26:55 srv206 sshd[28469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.38.173.25  user=root
Aug  1 09:26:57 srv206 sshd[28469]: Failed password for root from 189.38.173.25 port 60468 ssh2
...
2019-08-01 16:37:19
216.10.250.5 attack
...
2019-08-01 16:06:49
142.4.204.122 attackspambots
Aug  1 05:27:33 dedicated sshd[30863]: Invalid user max from 142.4.204.122 port 44078
2019-08-01 16:11:19
46.101.101.66 attack
ssh bruteforce or scan
...
2019-08-01 16:26:09
101.255.125.106 attack
Honeypot attack, port: 445, PTR: PTR record not found
2019-08-01 16:47:46
73.140.175.106 attackbotsspam
Jul 29 21:45:32 dallas01 sshd[1534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.140.175.106
Jul 29 21:45:35 dallas01 sshd[1534]: Failed password for invalid user admin from 73.140.175.106 port 56149 ssh2
Jul 29 21:45:36 dallas01 sshd[1534]: Failed password for invalid user admin from 73.140.175.106 port 56149 ssh2
Jul 29 21:45:38 dallas01 sshd[1534]: Failed password for invalid user admin from 73.140.175.106 port 56149 ssh2
2019-08-01 16:51:01
46.201.175.17 attack
Telnetd brute force attack detected by fail2ban
2019-08-01 16:40:50

Recently Reported IPs

52.180.152.222 64.226.91.58 164.92.247.156 40.124.171.151
20.169.85.0 161.35.73.18 159.89.17.75 188.166.90.226
188.166.64.25 64.62.156.183 165.245.242.42 64.89.163.14
206.42.109.58 52.141.45.117 199.45.154.48 168.194.164.3
113.229.120.248 194.187.177.216 95.111.241.206 165.245.177.51