JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 155.2.216.16

155.2.216.16 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 49%: ?

49%

ISP	VPN Consumer Tokyo, Japan
Usage Type	Data Center/Web Hosting/Transit
ASN	AS212238
Domain Name	vpnconsumer.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 155.2.216.16

Whois 155.2.216.16

IP Abuse Reports for 155.2.216.16:

This IP address has been reported a total of 88 times from 46 distinct sources. 155.2.216.16 was first reported on April 11th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-07-07 06:48:23 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: ifconfig.me:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-06 06:06:29 (3 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: connectivitycheck.gstatic.com:443 show less	Open Proxy Port Scan
🇯🇵 demonsword	2026-07-04 09:43:54 (5 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: icanhazip.com:443 show less	Open Proxy Port Scan
🇫🇷 masterguru	2026-07-04 00:52:00 (5 days ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 155.2.216.16 (JP/Japan/-): 2 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 155.2.216.16 (JP/Japan/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇯🇵 SentinalX by uzumaru	2026-07-03 02:52:59 (6 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: connectivitycheck.gstatic.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-06-29 01:40:45 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cloudflare.com:443 show less	Open Proxy Port Scan
🇺🇸 TPI-Abuse	2026-06-21 17:29:42 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 155.2.216.16 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 155.2.216.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 21 13:29:34.831110 2026] [security2:error] [pid 28797:tid 28797] [client 155.2.216.16:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|totalsafe-security.com\|F\|2"] [data ".xsd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "totalsafe-security.com"] [uri "/vendor/phpunit/phpunit/phpunit.xsd"] [unique_id "ajgfftuN8SEb9aba9DYUMAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Vegascosmetics	2026-06-21 16:44:04 (2 weeks ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security	DDoS Attack Hacking Exploited Host
🇯🇵 SentinalX by uzumaru	2026-06-21 06:30:56 (2 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: connectivitycheck.gstatic.com:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-06-18 07:42:50 (3 weeks ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: cloudflare.com:443 show less	Open Proxy Port Scan
🇫🇷 matthieul.dev	2026-06-13 16:00:29 (3 weeks ago)	Blocked by os-abuseipdb; 16 hits, proto=tcp,udp, ports=3283	Port Scan Brute-Force
🇩🇪 CK_beats	2026-06-09 17:00:17 (1 month ago)	Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 6 hits, proto=tcp, ports=80	Port Scan Hacking
🇮🇩 hermawan	2026-06-06 04:46:27 (1 month ago)	1780721173.646685 155.2.216.16 103.166.156.58 64240_2-4-8-1-3_1357_7 2026-06-06 11:46:13 WIB ...	Email Spam Hacking
🇺🇸 MPL	2026-05-31 05:53:08 (1 month ago)	tcp/443 (7 or more attempts)	Port Scan
🇫🇷 masterguru	2026-05-30 17:00:11 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 155.2.216.16 (JP/Japan/-): 1 in the l ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 155.2.216.16 (JP/Japan/-): 1 in the last 3600 secs (0-195) show less	Hacking

Showing 1 to 15 of 88 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.227

🇵🇾 168.90.177.192

🇧🇬 79.124.62.230

🇺🇸 20.245.71.147

🇰🇷 14.63.196.175

🇪🇬 197.199.224.52

🇭🇰 165.154.43.179

🇭🇰 121.202.206.119

🇸🇪 77.53.193.47

🇨🇦 51.222.153.9

🇧🇬 5.188.206.66

🇺🇸 184.72.64.42

🇫🇷 167.86.66.204

🇳🇱 45.153.34.167

🇺🇸 18.215.152.242

🇲🇰 213.135.168.228

🇧🇷 191.240.98.104

🇧🇷 177.202.5.130

🇰🇷 112.151.178.49

🇹🇷 94.154.43.43