JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.2.191.244

155.2.191.244 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 37%: ?

37%

ISP	Mullvad VPN AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	mullvad.net
Country	🇺🇸 United States of America
City	Kansas, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.2.191.244

Whois 155.2.191.244

IP Abuse Reports for 155.2.191.244:

This IP address has been reported a total of 50 times from 16 distinct sources. 155.2.191.244 was first reported on August 23rd 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 gadix	2026-07-20 00:27:25 (7 hours ago)	[20/Jul/2026:02:27:23.813814 +0200] al1razweUVrcMCAyaB0nKwAAAAU 155.2.191.244 50608 127.0.0.1 7081 [ ... show more [20/Jul/2026:02:27:23.813814 +0200] al1razweUVrcMCAyaB0nKwAAAAU 155.2.191.244 50608 127.0.0.1 7081 [20/Jul/2026:02:27:23.815748 +0200] al1razKGykandEHyKfXsYQAAAAM 155.2.191.244 50612 127.0.0.1 7081 [20/Jul/2026:02:27:23.817578 +0200] al1ra1y2cLgFgr0kv2gCDwAAAAA 155.2.191.244 50640 127.0.0.1 7081 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 00:10:56 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 155.2.191.244 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 155.2.191.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 20:10:49.093349 2026] [security2:error] [pid 7762:tid 7762] [client 155.2.191.244:58372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.94"] [uri "/.env.dev"] [unique_id "al1niaYUMTZb5EB_uHawSAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 TaKeN	2026-07-19 23:40:50 (7 hours ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-07-20T01:40:50+02:00 and 2026-07-20T01:40:50+02:00. Sample requested paths: /.git/index. show less	Web App Attack Hacking
🇺🇸 ersei.net	2026-07-19 13:46:07 (17 hours ago)	Brute force multiple 403s	Brute-Force
Anonymous	2026-07-19 11:46:44 (19 hours ago)	155.2.191.244 - - [19/Jul/2026:13:46:39 +0200] "GET /.git/config HTTP/2.0" 404 167 "-" "Mozilla/5.0 ... show more 155.2.191.244 - - [19/Jul/2026:13:46:39 +0200] "GET /.git/config HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 11:19:49 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 155.2.191.244 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210492) triggered by 155.2.191.244 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:19:43.137936 2026] [security2:error] [pid 18825:tid 18825] [client 155.2.191.244:40468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.102"] [uri "/.env"] [unique_id "alyyz3v1Hxe3FxLHA2jNHwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 CELOS-SOC	2026-06-13 04:30:48 (1 month ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-06-03 04:30:51 (1 month ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-05-30 00:30:42 (1 month ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-05-28 04:31:20 (1 month ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-05-26 08:31:11 (1 month ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-05-19 04:31:11 (2 months ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇺🇸 [email protected]	2026-05-15 19:27:17 (2 months ago)	FortiGate SSL-VPN failed authentication/brute-force attempt. Blocklist status=locked; first_attempt= ... show more FortiGate SSL-VPN failed authentication/brute-force attempt. Blocklist status=locked; first_attempt=2026-05-15 12:27:13; last_attempt=2026-05-15 12:27:17; fail_count=2; FortiGate blocklist_id=253672; vfid=0. show less	Brute-Force
🇩🇪 CELOS-SOC	2026-05-13 08:30:35 (2 months ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
Anonymous	2026-05-06 18:16:50 (2 months ago)		Bad Web Bot Web App Attack

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 47.245.141.185

🇺🇸 2607:f8b0:400c:c28::12e

🇮🇳 2401:4900:8fef:e5df:f8c9:464c:2fea:e0bb

🇩🇪 194.88.98.84

🇧🇷 187.49.187.53

🇩🇪 185.242.3.195

🇭🇰 152.32.212.226

🇩🇪 69.5.169.121

🇩🇪 69.5.169.106

🇩🇪 69.5.169.99

🇲🇲 45.112.47.242

🇫🇮 34.88.114.71

🇮🇳 20.198.124.64

🇧🇷 200.11.123.241

🇳🇱 185.242.226.97

🇳🇱 185.242.226.68

🇮🇳 172.232.108.36

🇩🇪 167.172.108.213

🇩🇪 165.154.164.24

🇳🇱 89.21.67.137