JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.154.24.80

217.154.24.80 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 0%: ?

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip217.154.24-80.pbiaas.com
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Koln, North Rhine-Westphalia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.154.24.80

Whois 217.154.24.80

IP Abuse Reports for 217.154.24.80:

This IP address has been reported a total of 14 times from 10 distinct sources. 217.154.24.80 was first reported on August 23rd 2025, and the most recent report was 10 months ago.

Old Reports: The most recent abuse report for this IP address is from 10 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2025-10-10 05:01:49 (10 months ago)	Multiple WAF Violations	Web App Attack
🇲🇾 Rizzy	2025-10-08 13:18:44 (10 months ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2025-10-04 20:20:01 (10 months ago)	suspicious request in access.log	Web App Attack
🇮🇹 VHosting	2025-09-28 12:02:36 (10 months ago)	Detected mail brute force attack from 4 different servers	Brute-Force
🇧🇷 Rollcalciferrr	2025-09-28 11:49:00 (10 months ago)	Passwprd Spray	Brute-Force
🇮🇩 hermawan	2025-09-12 09:19:51 (11 months ago)	[Fri Sep 12 16:19:20.722155 2025] [security2:error] [pid 1190665:tid 140661014529728] [client 217.15 ... show more [Fri Sep 12 16:19:20.722155 2025] [security2:error] [pid 1190665:tid 140661014529728] [client 217.154.24.80:58928] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %27 found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /pdfjs/web/viewer.html?file=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1 Request URI RAW = /pdfjs/web/viewer.html?file=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), Request Basename = viewer.html"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "aMPlmMKmmP6VSocN_mvIWAAAAkQ"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1190696] [4JQXJleFWXQ] [aMPlmMKmmP6VSocN_mvIWA ... show less	Hacking Web App Attack
Anonymous	2025-09-12 09:18:05 (11 months ago)	217.154.24.80 - - [12/Sep/2025:09:18:05 +0000] "GET /bothole/stinkwell.php?t=%27nvOpzp;%20AND%201=1% ... show more 217.154.24.80 - - [12/Sep/2025:09:18:05 +0000] "GET /bothole/stinkwell.php?t=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 307 5984 "https://atari-forum.com/viewtopic.php?t=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO))," "-" ... show less	SQL Injection
🇮🇩 hermawan	2025-09-09 08:20:20 (11 months ago)	[Tue Sep 09 15:18:23.176361 2025] [security2:error] [pid 1295947:tid 139979507234496] [client 217.15 ... show more [Tue Sep 09 15:18:23.176361 2025] [security2:error] [pid 1295947:tid 139979507234496] [client 217.154.24.80:62681] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %27 found within SERVER_NAME: staklim-jatim.bmkg.go.id request_line = GET /pdfjs/web/viewer.html?file=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1 Request URI RAW = /pdfjs/web/viewer.html?file=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), Request Basename = viewer.html"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/pdfjs/web/viewer.html"] [unique_id "aL_iz07jn58HwnBchtKJYgAAA4Y"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[1295980] [rnyN8hkmPbk] [aL_iz07jn58HwnBchtKJYg ... show less	Hacking Web App Attack
Anonymous	2025-09-07 16:16:15 (11 months ago)	217.154.24.80 - - [07/Sep/2025:16:16:15 +0000] "GET /bothole/stinkwell.php?t=%27nvOpzp;%20AND%201=1% ... show more 217.154.24.80 - - [07/Sep/2025:16:16:15 +0000] "GET /bothole/stinkwell.php?t=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 307 709 "https://www.atari-forum.com/viewtopic.php?t=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO))," "-" ... show less	SQL Injection
🇺🇸 gu-alvareza	2025-09-06 07:05:04 (11 months ago)	HTTP.URI.SQL.Injection	SQL Injection Web App Attack
🇳🇱 exxos	2025-09-05 14:03:01 (11 months ago)	HTTP1.x attacks	DDoS Attack
Anonymous	2025-09-05 13:03:10 (11 months ago)	217.154.24.80 - - [05/Sep/2025:13:02:57 +0000] "GET /bothole/stinkwell.php?t=%27nvOpzp;%20AND%201=1% ... show more 217.154.24.80 - - [05/Sep/2025:13:02:57 +0000] "GET /bothole/stinkwell.php?t=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO)), HTTP/1.1" 307 709 "https://www.atari-forum.com/viewtopic.php?t=%27nvOpzp;%20AND%201=1%20OR%20(%3C%27%22%3EiKO))," "-" ... show less	SQL Injection
🇺🇸 gu-alvareza	2025-09-05 07:05:04 (11 months ago)	HTTP.URI.SQL.Injection	SQL Injection Web App Attack
🇺🇸 fortypoundhead	2025-08-23 02:41:02 (1 year ago)	SQL Injection Attempt	SQL Injection Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.232

🇻🇳 123.21.71.60

🇺🇸 195.184.76.127

🇬🇧 193.176.29.16

🇺🇸 154.16.116.152

🇵🇭 143.44.197.254

🇨🇳 115.231.78.11

🇳🇱 104.234.138.25

🇺🇸 66.240.223.214

🇹🇼 60.251.40.153

🇳🇱 45.148.10.141

🇬🇧 45.133.173.141

🇸🇬 45.78.216.159

🇨🇦 20.104.50.220

🇺🇸 139.87.112.117

🇳🇱 91.92.40.151

🇺🇸 71.6.135.131

🇺🇸 47.18.187.240

🇷🇺 46.191.190.254

🇵🇪 38.250.158.156