5.44.111.198

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
49% Elevated
20 reports
14 reporters · latest 4 days ago
ISP
Group One WH20 LEJ Webhosting 2.0 Leipzig
Usage Type
Content Delivery Network
ASN
AS8648
Hostname(s)
host109.alfahosting-server.de
Domain Name
dogado.de
Country
🇩🇪 Germany
City
Leipzig, Saxony
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
20 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 7 🇩🇪 Germany 4 🇺🇦 Ukraine 2
Most common categories Web App Attack 15 Bad Web Bot 9 Brute-Force 5 Hacking 3 SQL Injection 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
Probing for common web apps (e.g. wordpress) or invalid web tech (e.g. Querying for PHP services on a non-PHP site) .php
Web App Attack
🇺🇦 URAN Publishing Service
[09/Nov/2026:10:59:00 +0200] -- 5.44.111.198 Ban reason: Scanner [CMS_GENERIC] | Request: POST /wp-admin/admin-ajax.php HTTP/1.1
Bad Web Bot Web App Attack
🇸🇬 securejdprop
This IP was detected by CrowdSec triggering crowdsecurity/vpatch-git-config.
Hacking
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-25T04:36:37.000Z.
Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T11:29:58.000Z.
Web App Attack
🇺🇸 francelink.fr
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T10:47:07.000Z.
Web App Attack
🇩🇪 EGP Abuse Dept
Scanning for web/db/file exploits on www.dekleineschans.nl
SQL Injection Bad Web Bot Web App Attack
🇩🇪 botreporter
CMS vulnerability/installation scanning
Brute-Force Web App Attack
Anonymous
[server.dsamoodle.de] httpd-config-scan: sites=dsamun.gr; logs=/var/log/httpd/domains/dsamun.gr.log; samples=/.git/config | fast_lane=true kernel_at=2026-10-19T20:53:28+00:00 | requests=1
Hacking Web App Attack
🇺🇦 URAN Publishing Service
[06/Oct/2026:01:53:21 +0300] -- 5.44.111.198 Ban reason: User-Agent curl/
Bad Web Bot Web App Attack
🇨🇭 backslash
Bad Web Bot
🇯🇵 weils.net
2026-10-05 13:27:07(GMT+8) - /wp-admin/admin-ajax.php
Bad Web Bot
🇩🇪 london2038.com
Malformed or malicious web request 5.44.111.198 - - [05/Oct/2026:05:59:42 +0200] "POST /wp-admin/admin-ajax.php HTTP/2.0" 400 1 "-" "firfox"
Hacking Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇰🇷 211.223.41.90
🇵🇱 176.53.159.197
🇫🇷 162.159.124.20
🇰🇷 122.252.126.2
🇦🇹 109.70.100.13
🇫🇷 85.217.140.53
🇦🇷 190.113.188.250
🇨🇭 179.43.153.18
🇺🇸 162.216.150.7
🇻🇪 143.105.147.249
🇮🇳 117.236.124.166
🇳🇱 103.47.145.62
🇷🇴 2.57.121.112
🇺🇦 188.114.206.90
🇻🇳 113.173.136.23
🇧🇬 78.128.114.46
🇺🇸 45.33.105.76
🇬🇧 35.203.211.43
🇨🇳 27.188.184.13
🇨🇳 14.103.115.181
feedback