JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

217.154.4.240

Neutral Activity

Abuse Confidence Score

0% Low Risk

215 reports

131 reporters · latest 1 year ago

ISP: IONOS SE
Usage Type: Data Center/Web Hosting/Transit
ASN: AS8560
Hostname(s): ip217-154-4-240.pbiaas.com
Domain Name: ionos.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

217.154.4.240 has been reported 215 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

215 from 131 distinct reporters

First reported

February 10th 2025

Most recent report

1 year ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Floofie	2025-03-03 02:28:50 UTC · (1 year ago)	217.154.4.240 - - [02/Mar/2025:21:28:49 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 217.154.4.240 - - [02/Mar/2025:21:28:50 -0500] "GET / HTTP/1.1" 444 ... show more 217.154.4.240 - - [02/Mar/2025:21:28:49 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 217.154.4.240 - - [02/Mar/2025:21:28:50 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 217.154.4.240 - - [02/Mar/2025:21:28:50 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RogueAutomata	2025-03-03 02:23:03 UTC · (1 year ago)	Detected malicious request: GET / Detections triggered: Access via IP addr (v4)	Web App Attack
🇺🇸 LotPhantom	2025-03-03 01:13:34 UTC · (1 year ago)	217.154.4.240 - - [03/Mar/2025:01:12:39 +0000] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "0" ...	Web App Attack
🇩🇪 Roper123	2025-03-02 02:46:54 UTC · (1 year ago)	Web exploits	Web App Attack
🇹🇷 rtbh.com.tr	2025-03-01 00:49:22 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-02-28 20:49:23 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇩 penjaga BRIN	2025-02-28 08:00:09 UTC · (1 year ago)	apache-auth-111	Web App Attack
🇫🇷 ecodehost.com	2025-02-28 06:16:02 UTC · (1 year ago)	Domain : bekgedder.org.tr Rule : WEB IP in black list	Port Scan
🇦🇹 Pingger Shikkoken	2025-02-28 00:48:37 UTC · (1 year ago)	2025-02-28T00:48:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=217.154.4.240 DST=10.1.1.2 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=43658 DF PROTO=TCP SPT=52374 DPT=443 WI ... show more 2025-02-28T00:48:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=217.154.4.240 DST=10.1.1.2 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=43658 DF PROTO=TCP SPT=52374 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 2025-02-28T00:48:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=217.154.4.240 DST=10.1.1.2 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=43659 DF PROTO=TCP SPT=52374 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0 2025-02-28T00:48:40+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=217.154.4.240 DST=10.1.1.2 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=43660 DF PROTO=TCP SPT=52374 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇩🇪 Vegascosmetics	2025-02-27 22:51:21 UTC · (1 year ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇫🇮 000rosiu	2025-02-27 21:46:54 UTC · (1 year ago)	Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: MANAGED_CHALLENGE ASN: 8560 (IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.) Protocol: HTTP/1.1 ( ... show more Triggered Cloudflare WAF (firewallCustom) from FR. Action taken: MANAGED_CHALLENGE ASN: 8560 (IONOS-AS This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2025-02-27T21:44:46Z Ray ID: 918b5baa8839eed5 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 Report generated by Cloudflare-WAF-To-AbuseIPDB: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇮🇹 Progetto1	2025-02-27 20:48:02 UTC · (1 year ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
Anonymous	2025-02-27 16:57:52 UTC · (1 year ago)	Reported from Nginx log analysis 18. Log: 217.154.4.240 - - [27/Feb/2025:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" "FR France -" "AS856 ... show more Reported from Nginx log analysis 18. Log: 217.154.4.240 - - [27/Feb/2025:xx:xx:xx 0100] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-" "FR France -" "AS8560" "IONOS SE" show less	Port Scan Brute-Force SSH
Anonymous	2025-02-27 10:56:22 UTC · (1 year ago)	$f2bV_matches	Brute-Force
🇸🇰 Shadow77	2025-02-27 09:12:00 UTC · (1 year ago)	217.154.4.240 - - [27/Feb/2025:05:51:14 +0100] "GET /backend/.env HTTP/1.1" 403 366 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 217.154.4.240 - - [27/Feb/2025:05:51:14 +0100] "GET / ... show more 217.154.4.240 - - [27/Feb/2025:05:51:14 +0100] "GET /backend/.env HTTP/1.1" 403 366 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 217.154.4.240 - - [27/Feb/2025:05:51:14 +0100] "GET /admin/.env HTTP/1.1" 403 366 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" show less	Hacking Web App Attack

Showing 1 to 15 of 215 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 50.6.206.232

🇳🇱 45.148.10.152

🇭🇷 154.47.29.19

🇩🇪 46.101.144.33

🇧🇪 34.96.41.113

🇵🇪 209.45.18.162

🇧🇷 179.189.41.129

🇰🇷 175.213.102.205

🇨🇦 134.195.198.137

🇫🇷 104.253.134.203

🇺🇸 71.126.129.38

🇫🇷 45.80.27.169

🇧🇪 35.210.157.203

🇻🇳 14.164.7.98

🇺🇸 216.218.82.57

🇺🇸 198.199.71.86

🇳🇱 193.47.62.20

🇳🇱 188.166.119.111

🇸🇦 176.16.66.165

🇺🇸 147.185.132.134