JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

5.22.214.217

Neutral Activity

Abuse Confidence Score

0% Low Risk

46 reports

42 reporters · latest 4 months ago

ISP: UpCloud Ltd
Usage Type: Data Center/Web Hosting/Transit
ASN: AS202053
Hostname(s): htb-6lo7xkdthw.htb-cloud.com
Domain Name: upcloud.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

5.22.214.217 has been reported 46 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

46 from 42 distinct reporters

First reported

June 28th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnicorioja	2026-07-01 22:02:36 UTC · (4 months ago)	(Mod_security)	Web App Attack Brute-Force Bad Web Bot
🇳🇱 taivas.nl	2026-07-01 08:00:06 UTC · (4 months ago)	web_app_attack	Email Spam
🇫🇷 LoneRider	2026-07-01 07:05:29 UTC · (4 months ago)	[01/Jul/2026:09:05:28.778635 +0200] akS8ODibR57wOBNtWw0lEAAAAAc 5.22.214.217 36778 127.0.0.1 7080 [01/Jul/2026:09:05:28.778812 +0200] akS8OHJl1kC78cEQYZ6LRAAAAAQ 5.22.214.217 36788 127.0.0.1 7080 [01/Jul/2026:09:05:28.778877 +0200] akS8OMgC6az2T7IUXg ... show more [01/Jul/2026:09:05:28.778635 +0200] akS8ODibR57wOBNtWw0lEAAAAAc 5.22.214.217 36778 127.0.0.1 7080 [01/Jul/2026:09:05:28.778812 +0200] akS8OHJl1kC78cEQYZ6LRAAAAAQ 5.22.214.217 36788 127.0.0.1 7080 [01/Jul/2026:09:05:28.778877 +0200] akS8OMgC6az2T7IUXgSDvwAAAAA 5.22.214.217 36800 127.0.0.1 7080 ... show less	Hacking
🇨🇦 electronico	2026-07-01 05:31:59 UTC · (4 months ago)	5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /resources/.env HTTP/1.1" 404 5878 "-" "curl/8.5.0" 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /server/.env HTTP/1.1" 404 5878 "-" "python-requests/2.31.0" 5.22.214.217 - - [01/Jul/2026:16:31 ... show more 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /resources/.env HTTP/1.1" 404 5878 "-" "curl/8.5.0" 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /server/.env HTTP/1.1" 404 5878 "-" "python-requests/2.31.0" 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /app/config/database.php HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /.env.live HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /public/.env HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 5.22.214.217 - - [01/Jul/2026:16:31:59 +1100] "GET /.env.backup HTTP/1.1" 404 5878 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537. ... show less	Brute-Force Web App Attack
🇩🇪 s@ch@	2026-07-01 04:45:02 UTC · (4 months ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack
Anonymous	2026-07-01 04:29:05 UTC · (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇺🇸 i553041	2026-07-01 04:08:18 UTC · (4 months ago)	5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /config/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000 ... show more 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /config/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /.env.bkp HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /.env.docker HTTP/1.1" 404 146 "-" "Wget/1.21.4" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /app/config/database.php HTTP/1.1" 404 146 "-" "python-requests/2.31.0" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /sites/default/settings.php HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000] "GET /server/.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0" 5.22.214.217 - - [01/Jul/2026:04:08:17 +0000 ... show less	Brute-Force SSH
🇩🇪 cvb	2026-07-01 01:36:56 UTC · (4 months ago)	[Wed Jul 01 03:36:53.705092 2026] [access_compat:error] [pid 54658:tid 54658] [client 5.22.214.217:54374] AH01797: client denied by server configuration: /var/www/html/config/credentials.yml.enc [Wed Jul 01 03:36:54.339884 2026] [access_compat:error] ... show more [Wed Jul 01 03:36:53.705092 2026] [access_compat:error] [pid 54658:tid 54658] [client 5.22.214.217:54374] AH01797: client denied by server configuration: /var/www/html/config/credentials.yml.enc [Wed Jul 01 03:36:54.339884 2026] [access_compat:error] [pid 54707:tid 54707] [client 5.22.214.217:54470] AH01797: client denied by server configuration: /var/www/html/config/database.yml [Wed Jul 01 03:36:54.384009 2026] [access_compat:error] [pid 54668:tid 54668] [client 5.22.214.217:54474] AH01797: client denied by server configuration: /var/www/html/config/.env [Wed Jul 01 03:36:54.958972 2026] [access_compat:error] [pid 45449:tid 45449] [client 5.22.214.217:54480] AH01797: client denied by server configuration: /var/www/html/config/credentials.yml.enc [Wed Jul 01 03:36:56.013806 2026] [access_compat:error] [pid 45452:tid 45452] [client 5.22.214.217:34632] AH01797: client denied by server configuration: /var/www/html/config/database.yml [Wed Jul 01 03:36:56.545348 2026] [access_compat:error ... RK-Cloud show less	Brute-Force Web App Attack
🇬🇧 andypiper	2026-07-01 01:01:05 UTC · (4 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇫🇷 YF	2026-07-01 00:15:21 UTC · (4 months ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
Anonymous	2026-06-30 22:49:02 UTC · (4 months ago)	Unauthorized access (443/tcp/https)	Port Scan Web App Attack
🇩🇪 Hazzard	2026-06-30 22:44:15 UTC · (4 months ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇳🇱 Roderic	2026-06-30 21:56:56 UTC · (4 months ago)	(apache_scanners-2) Failed apache-scanners trigger with match [redacted])	Port Scan
🇩🇪 paissangroup	2026-06-30 20:13:21 UTC · (4 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Ba-Yu	2026-06-30 19:48:42 UTC · (4 months ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 91.200.11.177

🇩🇪 69.5.169.231

🇨🇳 59.53.166.173

🇧🇪 34.77.140.104

🇩🇪 195.182.16.23

🇵🇱 194.113.248.243

🇩🇪 194.5.49.109

🇺🇦 176.119.75.122

🇸🇬 165.22.63.94

🇦🇷 148.222.223.252

🇨🇳 139.170.73.164

🇵🇰 103.213.112.160

🇺🇸 98.83.155.118

🇩🇪 69.5.169.249

🇹🇭 49.0.87.123

🇸🇾 31.9.213.216

🇨🇳 218.78.186.58

🇪🇹 196.188.34.64

🇳🇱 194.26.192.128

🇺🇸 172.174.242.250