JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.2.191.94

155.2.191.94 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 60%: ?

60%

ISP	Mullvad VPN AB
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136557
Domain Name	mullvad.net
Country	🇺🇸 United States of America
City	Kansas, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.2.191.94

Whois 155.2.191.94

IP Abuse Reports for 155.2.191.94:

This IP address has been reported a total of 68 times from 23 distinct sources. 155.2.191.94 was first reported on October 25th 2025, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 uchat-ai.com	2026-07-25 15:58:11 (7 hours ago)	IP 155.2.191.94 在过去24小时内进行了 4 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data ... show more IP 155.2.191.94 在过去24小时内进行了 4 次攻击。详细信息: 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found; 攻击类型: Restricted File Access Attempt, 攻击信息: No matched data found show less	Web App Attack
🇳🇱 Savvii	2026-07-25 02:10:33 (21 hours ago)	20 attempts against mh-misbehave-ban on storm	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-25 01:49:45 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 155.2.191.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 155.2.191.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:49:41.909593 2026] [security2:error] [pid 479911:tid 479911] [client 155.2.191.94:50660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.218"] [uri "/.env.dev"] [unique_id "amQWNYqJpAP1Thv0orDM6AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 webadmin	2026-07-25 01:00:19 (22 hours ago)	2026-07-25T03:00:15.557671+02:00 tytan csmpro-api[3056]: [error] client: 155.2.191.94 server: 195.11 ... show more 2026-07-25T03:00:15.557671+02:00 tytan csmpro-api[3056]: [error] client: 155.2.191.94 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/ [404]: Not Found 2026-07-25T03:00:16.650414+02:00 tytan csmpro-api[3056]: [error] client: 155.2.191.94 server: 195.116.29.58, request: "POST", url: http://195.116.29.58/ [404]: Not Found 2026-07-25T03:00:19.082294+02:00 tytan csmpro-api[3056]: [error] client: 155.2.191.94 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/laravel/.env [404]: Not Found 2026-07-25T03:00:19.082294+02:00 tytan csmpro-api[3056]: [error] client: 155.2.191.94 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/.env.production [404]: Not Found show less	Web App Attack
🇩🇪 strxmpp	2026-07-24 21:17:47 (1 day ago)	155.2.191.94 - - [24/Jul/2026:23:17:47 +0200] "GET /.git/HEAD HTTP/2.0" 404 409 "-" "Mozilla/5.0 (Wi ... show more 155.2.191.94 - - [24/Jul/2026:23:17:47 +0200] "GET /.git/HEAD HTTP/2.0" 404 409 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-24 19:53:24 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 155.2.191.94 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 155.2.191.94 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 15:53:19.324471 2026] [security2:error] [pid 721822:tid 721822] [client 155.2.191.94:57584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.137"] [uri "/.env.dev"] [unique_id "amPCr22inr97YP7GebB7mQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 mail.avx.gr	2026-07-24 19:37:58 (1 day ago)	Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 155.2.191.94 - - [24/Jul/202 ... show more Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 155.2.191.94 - - [24/Jul/2026:22:37:57 +0300] "GET /.env HTTP/1.1" 403 2424 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36 Edg/101.0.1210.47" show less	Web App Attack
🇺🇸 n2nguyenn2nguyen	2026-07-24 17:08:44 (1 day ago)	Blocked by YFC Security on https://1904.brixzly.com — type: directory_scan_attempts	Web App Attack
🇦🇺 2000cn.com.au	2026-07-24 14:27:11 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇧🇾 lns.bz	2026-07-24 11:44:30 (1 day ago)	.env scanning [BY]	Web App Attack
🇩🇪 CELOS-SOC	2026-07-12 12:30:55 (1 week ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-07-11 12:30:50 (2 weeks ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-07-10 12:30:17 (2 weeks ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-07-07 20:30:50 (2 weeks ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force
🇩🇪 CELOS-SOC	2026-07-04 04:30:45 (3 weeks ago)	Multiple Unauthorized SSLVPN Login Attempts	Hacking Brute-Force

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.98.122.37

🇫🇷 141.95.242.9

🇺🇸 47.251.125.100

🇬🇧 188.66.127.172

🇸🇬 172.237.74.252

🇫🇷 91.238.181.141

🇫🇷 91.196.152.127

🇺🇸 69.231.255.99

🇰🇷 59.9.40.153

🇩🇪 43.228.157.9

🇺🇸 23.239.184.41

🇷🇺 178.178.194.136

🇺🇸 157.230.184.110

🇰🇿 92.47.46.174

🇷🇺 85.114.30.130

🇸🇬 84.75.150.30

🇺🇸 20.65.178.1

🇺🇸 216.73.163.58

🇷🇴 193.32.162.27

🇧🇷 186.215.7.33