JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 217.154.9.224

217.154.9.224 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	IONOS SE
Usage Type	Data Center/Web Hosting/Transit
ASN	AS8560
Hostname(s)	ip217-154-9-224.pbiaas.com
Domain Name	ionos.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 217.154.9.224

Whois 217.154.9.224

IP Abuse Reports for 217.154.9.224:

This IP address has been reported a total of 28 times from 21 distinct sources. 217.154.9.224 was first reported on June 13th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 masterguru	2026-06-15 07:40:29 (1 hour ago)	. Matched phrase "/.env" at REQUEST_URI. (210492-169)	Web App Attack
🇺🇸 chronos	2026-06-15 07:14:09 (1 hour ago)	[AUTORAVALT][[15/06/2026 - 04:14:09 -03:00 UTC] Attack from [217.154.9.224][ip217-154-9-224.pbiaas.c ... show more [AUTORAVALT][[15/06/2026 - 04:14:09 -03:00 UTC] Attack from [217.154.9.224][ip217-154-9-224.pbiaas.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other soft] ... show less	Hacking Web App Attack
🇺🇸 chronos	2026-06-15 06:05:10 (2 hours ago)	[AUTORAVALT][[15/06/2026 - 03:05:10 -03:00 UTC] Attack from [217.154.9.224][ip217-154-9-224.pbiaas.c ... show more [AUTORAVALT][[15/06/2026 - 03:05:10 -03:00 UTC] Attack from [217.154.9.224][ip217-154-9-224.pbiaas.com] Action: BLocKed Hacking... Unauthorized attempts to access the server. Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various other soft] ... show less	Hacking Web App Attack
🇺🇸 drewf.ink	2026-06-15 05:55:18 (2 hours ago)	[05:55] Port scanning. Port(s) scanned: TCP/8443	Port Scan
🇺🇸 drewf.ink	2026-06-15 05:03:33 (3 hours ago)	[05:03] Port scanning. Port(s) scanned: TCP/7001	Port Scan
🇫🇷 LRNP	2026-06-15 04:52:42 (3 hours ago)	_:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.staging HTTP/1.1" 404 118 "-" "Mozil ... show more _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.staging HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /backend/.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:80 217.154.9.224 - - [15/Jun/2026:04:52:34 +0000] "GET /.env.example HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:80 217.154.9.224 - - [15/Jun/2026:04:52:34 +0000] "GET /docker-compose.override.yml HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:80 217.154.9.224 - - [15/Jun/2026:04:52:36 +0000] "GET /compose.yml HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:80 217.154.9.224 - - [15/Jun/2026:04:52:38 +0000] "GET /config/database.yml HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:80 217.154.9.224 - - [15/Jun/2026:04:52:39 +0000] "GET /config/database.yaml HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:80 217.154.9.224 - - [15/Jun/2026:04:52:40 +0000] "GET /config/secrets.yml HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:8 ... show less	Bad Web Bot Web App Attack
🇺🇸 drewf.ink	2026-06-15 03:59:14 (4 hours ago)	[03:59] Port scanning. Port(s) scanned: TCP/8080	Port Scan
🇫🇷 LRNP	2026-06-15 03:36:41 (5 hours ago)	_:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.prod HTTP/1.1" 404 118 "-" "Mozilla/ ... show more _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.prod HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.production HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.save HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.local HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.bak HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.backup HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] "GET /.env.dev HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible)" _:443 217.154.9.224 - - [15/Jun/2026:03:36:41 +0000] " ... show less	Bad Web Bot Web App Attack
🇩🇪 maxpower	2026-06-15 02:05:37 (6 hours ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 217.154.9.224 (FR/France/ip217-154-9-224 ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 217.154.9.224 (FR/France/ip217-154-9-224.pbiaas.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 217.154.9.224 - - [15/Jun/2026:04:05:25 +0200] "GET /wp-config.php.old HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible)" "-" host=51.77.95.118 217.154.9.224 - - [15/Jun/2026:04:05:30 +0200] "GET /config/secrets.yml HTTP/1.1" 404 13185 "-" "Mozilla/5.0 (compatible)" "-" host=51.77.95.118 show less	Port Scan
🇫🇷 solution.it	2026-06-15 00:39:25 (8 hours ago)	[Mon Jun 15 02:39:24.253307 2026] [php7:error] [pid 3956654:tid 3956654] [client 217.154.9.224:57384 ... show more [Mon Jun 15 02:39:24.253307 2026] [php7:error] [pid 3956654:tid 3956654] [client 217.154.9.224:57384] script '/var/www/html/config.inc.php' not found or unable to stat show less	Web App Attack
🇺🇸 drewf.ink	2026-06-15 00:03:20 (8 hours ago)	[00:03] Port scanning. Port(s) scanned: TCP/5000	Port Scan
🇺🇸 drewf.ink	2026-06-14 23:35:11 (9 hours ago)	[23:35] Port scanning. Port(s) scanned: TCP/8000	Port Scan
🇸🇬 celestialcity	2026-06-14 21:07:19 (11 hours ago)	Blocked by UFW on celestialcityas [8983/tcp] \| SPT: 51064 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reporte ... show more Blocked by UFW on celestialcityas [8983/tcp] \| SPT: 51064 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 pm33	2026-06-14 20:37:16 (12 hours ago)	Unauthorized connections HTTP 403	Web App Attack
🇨🇦 electronico	2026-06-14 20:35:39 (12 hours ago)	217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compa ... show more 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env.dev HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env.prod HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env.old HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /backend/.env HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env.backup HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env.development HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /.env.example HTTP/1.1" 404 2049 "-" "Mozilla/5.0 (compatible)" 217.154.9.224 - - [15/Jun/2026:07:35:39 +1100] "GET /wp-config.php HTTP/1.1" 404 2049 "- ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 204.195.5.69

🇨🇳 180.76.168.83

🇺🇸 172.185.24.228

🇺🇸 135.129.71.60

🇦🇪 94.202.55.241

🇨🇦 85.217.149.29

🇫🇷 85.217.140.52

🇺🇸 76.49.199.97

🇺🇸 45.91.81.111

🇩🇪 34.159.9.137

🇦🇫 149.54.40.222

🇮🇳 116.68.113.44

🇨🇳 106.119.117.63

🇺🇸 20.168.120.173

🇺🇸 216.180.246.149

🇺🇸 216.73.160.121

🇹🇷 188.3.12.178

🇮🇶 169.224.1.234

🇺🇸 143.42.173.101

🇭🇰 118.26.37.105